last executing test programs: 15.261144345s ago: executing program 3 (id=237): r0 = socket$inet6(0x10, 0x2, 0x4) r1 = socket(0x11, 0x800000003, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x6e, &(0x7f00000003c0)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "e4dfa1", 0x0, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @private}, @mcast2, [], "4ae87982ef59fd6d"}}}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xbc, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x30, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10001}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x101}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}]}]}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, [0x8, 0x4], [0x0, 0x8, 0x400]}}]}}]}, 0xbc}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000001200)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000001240)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r6, 0xc01064c1, &(0x7f0000001280)={r7}) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r5, 0x29, 0x41, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)=0x1024) 12.959263422s ago: executing program 3 (id=242): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000950000001e02eea4"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 11.971018338s ago: executing program 3 (id=243): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f00000001c0)='\x00', 0x0}, 0x30) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=0x1, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@ifindex, 0xffffffffffffffff, 0x34, 0x2, 0x0, @link_id, r2}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@cgroup, r0, 0x0, 0x200c, 0x0, @prog_id=r1, r2}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x0) lseek(r5, 0x0, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r4, r6, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000000206010100000000000000000000000005000100070000000900020073797a30000000000c00078008001240000000000c00030068141d035d69700005000500020000000500040000000000"], 0x50}}, 0x0) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) getdents(r7, &(0x7f0000001fc0)=""/184, 0xb8) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$video(&(0x7f0000000040), 0x7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r9, &(0x7f0000003040)={@val={0x8, 0x800}, @val={0x1}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x4, 0x0, @rand_addr, @multicast2=0xe0000001}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x4}]}}}}}, 0x3a) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, 0x4, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(0xffffffffffffffff) sendmsg$NFQNL_MSG_CONFIG(r11, 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_IRQFD(r12, 0x4020aed2, &(0x7f0000000000)={0xffffffffffffffff, 0x9, 0x3}) 11.326910637s ago: executing program 3 (id=247): openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$inet(r0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) sched_setscheduler(0x0, 0x1, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x5c, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001840)={0x24, 0x0, &(0x7f0000001740)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000e80)={0x2c, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00030400000004"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 8.567235784s ago: executing program 0 (id=252): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xe7e74b3a17e1ad5c, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000e, 0x2012, r3, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000200)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000140)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @ptr={0x73622a85, 0xfc, 0x0, 0x0, 0x0, 0x2f}, @flat=@weak_handle={0x77682a85, 0xa}}, 0x0}}], 0x0, 0x0, 0x0}) 8.343190466s ago: executing program 0 (id=254): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) eventfd(0x80000005) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYRES16], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) socket$inet(0x2, 0x3, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYBLOB="e3b0a15abfd1f9095e24971a0ffb30077bab7bc6f145b6cc852468d05a2d8466926d7e05df0fc0877ec1d332cc8d1d1a4edaa3f26239fe29b18fe4b65786e883c5bc7a09ee0ea256af45a3d332cb3e0b21accd01088143ad0e44ae976647e8229b3893d708c9d07f12569032fa49e89792dec7bc53f5d3e69ddb3d7ecf9269226ca50ea3832c2433f30fb9ea6addb6a91048266606ebe13a6519b210fd6f47794e"], 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0x541b, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x5, 0xffff5bec, 0x5, 0x28, r7, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x3, 0xf, @void, @value, @void, @value}, 0x50) openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='sysv\x00', 0x1008000, 0x0) 7.130052089s ago: executing program 0 (id=255): r0 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') preadv(r0, &(0x7f0000000380), 0x0, 0x10004000, 0x90) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xdffffffffffffffc, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) getpriority(0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, 0x0, 0x78) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x50009405, 0x0) 4.427585761s ago: executing program 3 (id=259): socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x4) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fchdir(0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000002c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000040)={@my=0x0, 0x1}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000340)={@any, 0x2}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f0000000100)={{@my=0x0, 0x6}, 0x0, 0x1}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc044}, 0x480c0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000140)=0x10001, 0x4) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x4, &(0x7f00000000c0)={0x0, 0x13, 0x0, @thr={&(0x7f00000003c0)="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", 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) open(0x0, 0x400141042, 0x0) 3.89238061s ago: executing program 0 (id=260): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000f6ff00"/28], 0x44) r1 = creat(&(0x7f0000000040)='./file0\x00', 0xecf86c37d53048c3) write$binfmt_script(r1, &(0x7f00000000c0)={'#! ', './file0', [{}]}, 0xc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r3) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="24c01fb8c239dd8d0000005ccf9cfaf015c5054187daaf6a93a9f551f52f9580cb019271ffa4d18c90fe81482e4e39c2e0e939d0e0ff5b97bbbf60fda7d8212be85d2e1c8d7e66419000576d5710b80bd214abe86a5466020e4185e2f9d7d6e7239f5f63b7ce7629105f7a8a96624804", @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000040007800c0005000000000000000000"], 0x24}}, 0x0) close(r1) accept4(r1, &(0x7f0000000380)=@caif=@util, &(0x7f0000000400)=0x80, 0x800) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_nanosleep(0x6, 0x1, &(0x7f0000000300)={r5, r6+60000000}, 0x0) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x40, r7, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'GPL\x00'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7f}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1ff}]}, 0x40}, 0x1, 0x0, 0x0, 0xc4}, 0x24000000) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, &(0x7f0000000340)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, &(0x7f0000000540)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r9, 0xc0182101, &(0x7f0000000640)={r10}) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002dc0)={&(0x7f0000000140)='sys_enter\x00', r12}, 0x10) lgetxattr(0x0, 0x0, 0x0, 0x0) bind$inet6(r11, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r11, 0x3) setsockopt$inet6_int(r11, 0x29, 0x4b, &(0x7f0000000180)=0x3, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd602a84350014060000000000000000000000000000000000fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5890030000000000"], 0x0) 3.213254411s ago: executing program 3 (id=263): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0x9361, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x90) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) read(r4, 0x0, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0xf8}}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r6, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0xc0) 2.959012645s ago: executing program 2 (id=265): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000c80)={@map, 0xffffffffffffffff, 0x34, 0x2, 0xffffffffffffffff, @prog_fd}, 0x20) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x0) lseek(r2, 0x0, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x50}}, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x4, 0x3e8, 0x200, 0x200, 0x0, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@mac=@link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x4}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@remote}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'netdevsim0\x00', 'pim6reg\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x1, 0x42, 0x40, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000140), 0x1000, r5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, &(0x7f0000001200)=""/119, &(0x7f00000002c0), &(0x7f00000007c0), 0x7, r5}, 0x38) getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$video(&(0x7f0000000040), 0x7, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'hsr0\x00', @broadcast}) write$tun(r7, &(0x7f0000003040)={@val={0x8, 0x800}, @val={0x1}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x4, 0x0, @rand_addr, @multicast2=0xe0000001}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x4}]}}}}}, 0x3a) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, 0x4, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(0xffffffffffffffff) sendmsg$NFQNL_MSG_CONFIG(r9, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_IRQFD(r10, 0x4020aed2, &(0x7f0000000000)={0xffffffffffffffff, 0x9, 0x3}) 2.859865359s ago: executing program 4 (id=266): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRES8], &(0x7f00000000c0)='syzkaller\x00', 0x10001, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000500)={{{@in=@loopback, @in6=@private1}}, {{@in6}, 0x0, @in=@local}}, &(0x7f0000000440)=0xe8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) socket$kcm(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000002080)={0x0, 0x0}) ptrace$ARCH_MAP_VDSO_64(0x1e, r2, 0x4, 0x2003) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3d0, 0x0, 0x0, 0x1d8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@random="eaa334dd81ea"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bond0\x00', 'bridge0\x00'}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d8}}, {{@arp={@private, @local, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'batadv0\x00', 'veth0_vlan\x00'}, 0xc0, 0xf0, 0x0, {0x0, 0x1e03}}, @unspec=@CONNMARK={0x30}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000002040), 0x0, 0x0) ioctl$BLKGETSIZE64(r4, 0x80081272, &(0x7f0000002080)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7fff}) setrlimit(0x4, &(0x7f00000024c0)={0x0, 0x8}) creat(&(0x7f0000000000)='./file0\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f000059f000/0x2000)=nil, 0x2000, 0x2, 0x10, r5, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000001000/0x4000)=nil, 0x3) pipe(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) 1.940775947s ago: executing program 1 (id=267): sched_setscheduler(0x0, 0x5, &(0x7f000000d380)) ioprio_set$pid(0x1, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000380)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x9101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000002100)='./file0/file0\x00', 0x0, 0x2187017, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1026864, &(0x7f0000000b40)=ANY=[@ANYBLOB='max=-']) timer_gettime(0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000002140)={0x2020}, 0x2020) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = dup(r1) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) splice(r4, 0x0, r5, 0x0, 0x808, 0x0) 1.891029734s ago: executing program 0 (id=268): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() futex(&(0x7f000000cffc)=0x1, 0x80000000000d, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) syz_clone(0x2200, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020}, 0x2020) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x0, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) recvmmsg(0xffffffffffffffff, &(0x7f0000000d00)=[{{&(0x7f00000000c0)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000540)=""/225, 0xe1}], 0x2}, 0xfffffffb}, {{&(0x7f0000000380)=@nfc_llcp, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/165, 0xa5}, {&(0x7f00000008c0)=""/153, 0x99}, {&(0x7f0000000980)=""/87, 0x57}, {&(0x7f0000000a00)=""/106, 0x6a}, {&(0x7f0000000a80)=""/229, 0xe5}, {&(0x7f0000000b80)=""/160, 0xa0}, {&(0x7f0000000400)=""/39, 0x27}, {0x0}], 0x9}, 0x28000}], 0x2, 0x40012001, &(0x7f0000000d80)={0x77359400}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffa84, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}]}, 0x24}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x28}}, 0x0) 1.821197028s ago: executing program 2 (id=269): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) sendmsg$inet(r0, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0) 1.811234444s ago: executing program 4 (id=270): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x800082}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xfffffffffffffd1e) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x40047451, 0x2000000c) 1.630588281s ago: executing program 1 (id=271): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) gettid() 1.5711352s ago: executing program 4 (id=272): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000200000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1.570875209s ago: executing program 2 (id=273): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) syz_clone(0x12008000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.330731868s ago: executing program 1 (id=274): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200]}}}) ioctl$VIDIOC_QBUF(r1, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800}) 1.326516653s ago: executing program 2 (id=275): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffb5, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file0\x00'}, 0x18) 1.263096742s ago: executing program 4 (id=276): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88b59edace0000033e8283f2305e02000002ff02000000000000000000000000000104004e20004d03"], 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000003380)=""/4096, 0x1000}, {0x0}], 0x2, 0x0, 0x25}, 0x100) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0xf, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(r3, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r4, 0x1, 0xf, 0x0, 0x0) bind$inet6(r4, 0x0, 0x0) listen(r4, 0x0) writev(r2, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_io_uring_setup(0x3671, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) 1.122149947s ago: executing program 2 (id=277): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000140), 0x12) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x6, 0xb, 0x0, 0x20000000) 1.05648351s ago: executing program 2 (id=278): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) unshare(0x2c020400) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r2, 0x4038ae7a, &(0x7f0000000240)={[{0x2, 0x0, 0x0, 0x1}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000006480), 0x3, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r4, 0xc0945662, &(0x7f00000002c0)={0x0, 0x0, '\x00', {0x0, @bt={0x68a, 0xe4, 0x1, 0x1, 0x1, 0x6, 0x1ac, 0x5, 0x6, 0x0, 0x2, 0xc, 0x8, 0x2, 0x6, 0x18, {0x8, 0x30000000}, 0x8, 0x4}}}) 927.459893ms ago: executing program 0 (id=279): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) syz_usb_connect(0x0, 0x3e, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) timer_create(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x4040000}) socket$nl_route(0x10, 0x3, 0x0) 389.48778ms ago: executing program 1 (id=280): bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0x100, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 226.625286ms ago: executing program 1 (id=281): socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x144000, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r1, &(0x7f0000000180), 0x20000000}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000000)={r1, &(0x7f0000000180), 0x0}, 0x20) 225.950438ms ago: executing program 4 (id=282): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r1, &(0x7f0000000040), 0x20000000}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r1, 0x0, 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000040), 0x20000000}, 0x20) close(r0) 73.520173ms ago: executing program 4 (id=283): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x9, 0x3, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f00000001c0), &(0x7f00000005c0)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x15, &(0x7f0000000100)={{r1}, &(0x7f0000000040), &(0x7f00000000c0)='%+9llu \x00'}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000015000000850000008600000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x401, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000000400000018110000", @ANYRESDEC, @ANYRESOCT=r4], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x2a, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000001000000000000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000c50820000000000085100000f8ffffff8d4703000500000085200000030000001832000002000000000000000000000018110000", @ANYRES32, @ANYBLOB, @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000186a0000050000000000000000080000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000eee8948f64479ff2675577ea5690fdb043f0f83d2617113be1a18aefe63568a2b2a804c584fab10daa85d4e1958c0351072f0b79a5208b97b41dea167569c44befa78c3792bfe3af7ea0c48e70a8f7a3e7c7b2e4ae08b5ee677f9a6e4c3886167f895c5686267468d6ae0252f278dc83a658543243a0ef8ce01c9cee3be0fa6916f67d039a9f8d307e3db9380b2a2062938778fc8c2f4ff6b3e936bf5ccbfd7848c8187e42e116fcefad8b26a503a88839a5d62e166aebb789bb25d5aa63d1775e7c0267d03a1bb1bfaccc177a2162092f48ab"], &(0x7f0000000300)='syzkaller\x00', 0x400, 0xe4, &(0x7f00000005c0)=""/228, 0x41100, 0x50, '\x00', 0x0, 0x25, r9, 0x8, &(0x7f00000006c0)={0x48, 0x1}, 0x8, 0x10, &(0x7f0000000840)={0x0, 0xd, 0x102, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a80)=[r7, r8, 0xffffffffffffffff], 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000001000)=ANY=[@ANYBLOB="7a0af8ff75257025bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 0s ago: executing program 1 (id=284): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000008a04"]) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.134' (ED25519) to the list of known hosts. [ 56.722652][ T5208] cgroup: Unknown subsys name 'net' [ 56.873500][ T5208] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.248107][ T5208] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 60.536855][ T5225] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 60.556241][ T5225] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 60.567423][ T5227] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.575427][ T5227] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 60.582616][ T5225] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.595779][ T5227] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.603859][ T5227] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 60.614027][ T5226] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.621720][ T5226] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 60.622139][ T5231] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 60.637922][ T5231] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 60.645601][ T5235] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 60.646386][ T5231] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 60.652985][ T5235] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 60.668533][ T5231] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 60.677315][ T5235] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 60.677662][ T5231] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.691986][ T5231] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 60.695189][ T5235] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 60.699720][ T5231] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 60.714027][ T5231] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 60.724304][ T5231] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 60.729201][ T5233] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 60.739936][ T5231] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 60.742075][ T5233] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 60.755015][ T4614] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 60.768281][ T5231] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 60.770403][ T5238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 60.783317][ T5231] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 60.794870][ T5231] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 61.310814][ T5219] chnl_net:caif_netlink_parms(): no params data found [ 61.372804][ T5218] chnl_net:caif_netlink_parms(): no params data found [ 61.473740][ T5229] chnl_net:caif_netlink_parms(): no params data found [ 61.534154][ T5230] chnl_net:caif_netlink_parms(): no params data found [ 61.553554][ T5228] chnl_net:caif_netlink_parms(): no params data found [ 61.610810][ T5218] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.619568][ T5218] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.628505][ T5218] bridge_slave_0: entered allmulticast mode [ 61.637433][ T5218] bridge_slave_0: entered promiscuous mode [ 61.650576][ T5219] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.658200][ T5219] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.665551][ T5219] bridge_slave_0: entered allmulticast mode [ 61.672249][ T5219] bridge_slave_0: entered promiscuous mode [ 61.686342][ T5219] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.693491][ T5219] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.703367][ T5219] bridge_slave_1: entered allmulticast mode [ 61.710320][ T5219] bridge_slave_1: entered promiscuous mode [ 61.723160][ T5218] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.731180][ T5218] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.738804][ T5218] bridge_slave_1: entered allmulticast mode [ 61.746417][ T5218] bridge_slave_1: entered promiscuous mode [ 61.849885][ T5218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.872038][ T5218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.886175][ T5219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.895795][ T5229] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.903041][ T5229] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.911327][ T5229] bridge_slave_0: entered allmulticast mode [ 61.918859][ T5229] bridge_slave_0: entered promiscuous mode [ 61.927182][ T5229] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.934333][ T5229] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.941640][ T5229] bridge_slave_1: entered allmulticast mode [ 61.949163][ T5229] bridge_slave_1: entered promiscuous mode [ 61.976387][ T5219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.048532][ T5218] team0: Port device team_slave_0 added [ 62.057945][ T5218] team0: Port device team_slave_1 added [ 62.067441][ T5219] team0: Port device team_slave_0 added [ 62.106538][ T5228] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.113823][ T5228] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.121775][ T5228] bridge_slave_0: entered allmulticast mode [ 62.128855][ T5228] bridge_slave_0: entered promiscuous mode [ 62.149113][ T5219] team0: Port device team_slave_1 added [ 62.169581][ T5229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.183482][ T5229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.194031][ T5230] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.202190][ T5230] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.210229][ T5230] bridge_slave_0: entered allmulticast mode [ 62.217137][ T5230] bridge_slave_0: entered promiscuous mode [ 62.224776][ T5228] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.234172][ T5228] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.241661][ T5228] bridge_slave_1: entered allmulticast mode [ 62.249131][ T5228] bridge_slave_1: entered promiscuous mode [ 62.290230][ T5218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.297300][ T5218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.324375][ T5218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.353686][ T5230] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.360913][ T5230] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.369141][ T5230] bridge_slave_1: entered allmulticast mode [ 62.377586][ T5230] bridge_slave_1: entered promiscuous mode [ 62.396925][ T5228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.406892][ T5219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.413852][ T5219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.441461][ T5219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.453387][ T5218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.460986][ T5218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.487819][ T5218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.536341][ T5228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.546117][ T5219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.553256][ T5219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.579542][ T5219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.602200][ T5229] team0: Port device team_slave_0 added [ 62.646897][ T5228] team0: Port device team_slave_0 added [ 62.654486][ T5229] team0: Port device team_slave_1 added [ 62.673078][ T5230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.705087][ T5228] team0: Port device team_slave_1 added [ 62.731307][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.738326][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.756289][ T5226] Bluetooth: hci3: command tx timeout [ 62.765365][ T5229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.782783][ T5230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.815526][ T5218] hsr_slave_0: entered promiscuous mode [ 62.822022][ T5218] hsr_slave_1: entered promiscuous mode [ 62.835897][ T5231] Bluetooth: hci1: command tx timeout [ 62.835914][ T5225] Bluetooth: hci4: command tx timeout [ 62.836176][ T5225] Bluetooth: hci0: command tx timeout [ 62.841715][ T5226] Bluetooth: hci2: command tx timeout [ 62.871765][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.878988][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.905720][ T5229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.943638][ T5219] hsr_slave_0: entered promiscuous mode [ 62.950135][ T5219] hsr_slave_1: entered promiscuous mode [ 62.956818][ T5219] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.964926][ T5219] Cannot create hsr debugfs directory [ 62.975821][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.983172][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.009341][ T5228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.029997][ T5230] team0: Port device team_slave_0 added [ 63.038764][ T5230] team0: Port device team_slave_1 added [ 63.054828][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.062305][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.088974][ T5228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.183645][ T5230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.190767][ T5230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.218390][ T5230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.266119][ T5228] hsr_slave_0: entered promiscuous mode [ 63.272503][ T5228] hsr_slave_1: entered promiscuous mode [ 63.279992][ T5228] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.287734][ T5228] Cannot create hsr debugfs directory [ 63.294016][ T5230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.304939][ T5230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.332633][ T5230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.373001][ T5229] hsr_slave_0: entered promiscuous mode [ 63.379933][ T5229] hsr_slave_1: entered promiscuous mode [ 63.386938][ T5229] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.394619][ T5229] Cannot create hsr debugfs directory [ 63.572410][ T5230] hsr_slave_0: entered promiscuous mode [ 63.579067][ T5230] hsr_slave_1: entered promiscuous mode [ 63.586420][ T5230] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.594441][ T5230] Cannot create hsr debugfs directory [ 63.847431][ T5218] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.868538][ T5218] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.885886][ T5218] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.899722][ T5218] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.950693][ T5219] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.962853][ T5219] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.972774][ T5219] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.986552][ T5219] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.077733][ T5228] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.091459][ T5228] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.101625][ T5228] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.112107][ T5228] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.208116][ T5229] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.222197][ T5229] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.232172][ T5229] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.244354][ T5229] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.294045][ T5218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.397694][ T5218] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.416124][ T5230] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.426988][ T5230] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.445280][ T2516] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.452641][ T2516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.468915][ T5230] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.484903][ T2516] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.492107][ T2516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.516430][ T5230] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.549515][ T5219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.623638][ T5219] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.674495][ T5218] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.694890][ T1120] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.702130][ T1120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.721866][ T5228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.751428][ T1120] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.758669][ T1120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.839979][ T5226] Bluetooth: hci3: command tx timeout [ 64.889339][ T5229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.917680][ T5226] Bluetooth: hci2: command tx timeout [ 64.920819][ T5238] Bluetooth: hci4: command tx timeout [ 64.923126][ T5226] Bluetooth: hci0: command tx timeout [ 64.929583][ T5225] Bluetooth: hci1: command tx timeout [ 64.944038][ T5228] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.002522][ T5229] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.031980][ T772] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.039197][ T772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.064835][ T2516] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.072019][ T2516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.094436][ T5230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.123179][ T5218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.133385][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.140619][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.175944][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.183101][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.219403][ T5230] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.294723][ T5219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.334440][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.341736][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.398346][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.405554][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.428909][ T5218] veth0_vlan: entered promiscuous mode [ 65.507871][ T5218] veth1_vlan: entered promiscuous mode [ 65.533091][ T5230] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.548594][ T5230] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.598600][ T5219] veth0_vlan: entered promiscuous mode [ 65.651975][ T5219] veth1_vlan: entered promiscuous mode [ 65.698502][ T5229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.740635][ T5218] veth0_macvtap: entered promiscuous mode [ 65.783741][ T5219] veth0_macvtap: entered promiscuous mode [ 65.807037][ T5218] veth1_macvtap: entered promiscuous mode [ 65.829641][ T5219] veth1_macvtap: entered promiscuous mode [ 65.904748][ T5218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.927766][ T5219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.946502][ T5219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.964990][ T5219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.988216][ T5218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.003967][ T5219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.022845][ T5219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.037951][ T5219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.069531][ T5219] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.085966][ T5219] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.094710][ T5219] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.110684][ T5219] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.135043][ T5218] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.144275][ T5218] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.153702][ T5218] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.164685][ T5218] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.194177][ T5228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.208922][ T5230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.395095][ T1120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.405151][ T1120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.408755][ T5229] veth0_vlan: entered promiscuous mode [ 66.483387][ T2505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.490770][ T5229] veth1_vlan: entered promiscuous mode [ 66.496882][ T2505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.561854][ T5230] veth0_vlan: entered promiscuous mode [ 66.588390][ T2505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.600191][ T2505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.622440][ T5228] veth0_vlan: entered promiscuous mode [ 66.641505][ T5230] veth1_vlan: entered promiscuous mode [ 66.645612][ T1120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.654990][ T1120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.705191][ T5228] veth1_vlan: entered promiscuous mode [ 66.769014][ T5229] veth0_macvtap: entered promiscuous mode [ 66.794454][ T5229] veth1_macvtap: entered promiscuous mode [ 66.870216][ T5230] veth0_macvtap: entered promiscuous mode [ 66.898674][ T5230] veth1_macvtap: entered promiscuous mode [ 66.920489][ T5225] Bluetooth: hci3: command tx timeout [ 66.948173][ T5228] veth0_macvtap: entered promiscuous mode [ 66.972467][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.995663][ T5225] Bluetooth: hci0: command tx timeout [ 67.001157][ T5225] Bluetooth: hci2: command tx timeout [ 67.006323][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.011472][ T5238] Bluetooth: hci1: command tx timeout [ 67.022219][ T5226] Bluetooth: hci4: command tx timeout [ 67.031249][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.043961][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.067779][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.583049][ T5228] veth1_macvtap: entered promiscuous mode [ 67.804434][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.873033][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.898732][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.912975][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.924657][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.938707][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.961684][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.974485][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.995856][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.012122][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.033082][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.044658][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.059355][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.069909][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.080473][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.102857][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.132327][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.161638][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.188142][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.199031][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.226634][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.237145][ T5229] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.246778][ T5229] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.260130][ T5229] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.270165][ T5229] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.293755][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.305761][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.320173][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.332840][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.343707][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.354455][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.367196][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.382153][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.394076][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.404807][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.416004][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.426559][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.441820][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.459721][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.473341][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.491160][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.504263][ T5228] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.519864][ T5228] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.530510][ T5228] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.544291][ T5228] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.592852][ T5230] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.603507][ T5230] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.612703][ T5230] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.730386][ T5230] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.005596][ T5226] Bluetooth: hci3: command tx timeout [ 69.075887][ T5238] Bluetooth: hci1: command tx timeout [ 69.081743][ T5238] Bluetooth: hci0: command tx timeout [ 69.090686][ T5225] Bluetooth: hci4: command tx timeout [ 69.097590][ T5226] Bluetooth: hci2: command tx timeout [ 69.537968][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.563838][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.591452][ T5327] syzkaller1: entered promiscuous mode [ 69.601458][ T5327] syzkaller1: entered allmulticast mode [ 69.616313][ T5322] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9'. [ 69.662466][ T2516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.670809][ T2505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.679758][ T2516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.692580][ T2505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.748313][ T2516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.773055][ T2516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.835826][ T1120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.855368][ T1120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.948771][ T2505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.978337][ T2505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.355599][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 71.169616][ T5347] cannot load conntrack support for proto=3 [ 71.206705][ T5342] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 71.346739][ T5345] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3'. [ 71.387727][ T5345] futex_wake_op: syz.2.3 tries to shift op by -1; fix this program [ 71.800423][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.815420][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.886393][ T5224] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 71.955941][ T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 72.164392][ T5367] capability: warning: `syz.2.17' uses deprecated v2 capabilities in a way that may be insecure [ 72.822326][ T5224] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.839687][ T5224] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.870257][ T5224] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 72.896319][ T5224] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.920900][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.933755][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.966943][ T5224] usb 1-1: config 0 descriptor?? [ 72.977948][ T8] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 73.017440][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.047541][ T8] usb 2-1: config 0 descriptor?? [ 75.090097][ T8] usbhid 2-1:0.0: can't add hid device: -71 [ 75.108185][ T8] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 75.136186][ T5224] usbhid 1-1:0.0: can't add hid device: -71 [ 75.142225][ T5224] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 75.155726][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 75.238773][ T8] usb 2-1: USB disconnect, device number 2 [ 75.257877][ T5224] usb 1-1: USB disconnect, device number 2 [ 75.391948][ T5387] netlink: 40 bytes leftover after parsing attributes in process `syz.1.22'. [ 76.297138][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.635425][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 76.945750][ T1171] cfg80211: failed to load regulatory.db [ 77.384233][ T5407] cannot load conntrack support for proto=3 [ 77.595664][ T5408] cannot load conntrack support for proto=3 [ 77.796460][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 77.865866][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 77.895371][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 77.929675][ T5399] overlayfs: missing 'lowerdir' [ 78.125857][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.117145][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 80.127749][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 80.601490][ T5427] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 80.610625][ T5427] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 81.733014][ T5443] netlink: 36 bytes leftover after parsing attributes in process `syz.1.35'. [ 82.007263][ T5224] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 82.215414][ T5273] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 82.236835][ T5224] usb 3-1: device descriptor read/64, error -71 [ 82.427251][ T5273] usb 2-1: device descriptor read/64, error -71 [ 82.576156][ T5224] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 82.755411][ T5273] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 82.765489][ T5224] usb 3-1: device descriptor read/64, error -71 [ 82.776255][ T5471] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.054883][ T5224] usb usb3-port1: attempt power cycle [ 84.443220][ T5273] usb 2-1: device descriptor read/64, error -71 [ 84.565731][ T5273] usb usb2-port1: attempt power cycle [ 84.665302][ T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 84.865559][ T5224] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 85.024710][ T29] audit: type=1804 audit(1725965833.716:2): pid=5481 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.46" name="/newroot/10/bus/file0" dev="overlay" ino=75 res=1 errno=0 [ 85.075160][ T5224] usb 3-1: device descriptor read/8, error -71 [ 85.085606][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.217563][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.339335][ T8] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 85.406078][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.429417][ T5224] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 85.564787][ T8] usb 4-1: config 0 descriptor?? [ 85.593874][ T5224] usb 3-1: device descriptor read/8, error -71 [ 85.745936][ T5224] usb usb3-port1: unable to enumerate USB device [ 85.821058][ T8] usbhid 4-1:0.0: can't add hid device: -71 [ 85.841096][ T8] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 85.960989][ T8] usb 4-1: USB disconnect, device number 2 [ 86.319539][ T5498] FAULT_INJECTION: forcing a failure. [ 86.319539][ T5498] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 86.333257][ T5498] CPU: 1 UID: 0 PID: 5498 Comm: syz.1.49 Not tainted 6.11.0-rc7-syzkaller-00017-gbc83b4d1f086 #0 [ 86.343789][ T5498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 86.353874][ T5498] Call Trace: [ 86.357429][ T5498] [ 86.360382][ T5498] dump_stack_lvl+0x241/0x360 [ 86.365277][ T5498] ? __pfx_dump_stack_lvl+0x10/0x10 [ 86.370494][ T5498] ? __pfx__printk+0x10/0x10 [ 86.375105][ T5498] should_fail_ex+0x3b0/0x4e0 [ 86.379811][ T5498] strncpy_from_user+0x36/0x2e0 [ 86.384680][ T5498] ? kmem_cache_alloc_noprof+0x185/0x2a0 [ 86.390336][ T5498] getname_flags+0xf1/0x540 [ 86.394855][ T5498] do_sys_openat2+0xd2/0x1d0 [ 86.399459][ T5498] ? kvm_sched_clock_read+0x11/0x20 [ 86.404677][ T5498] ? __pfx_do_sys_openat2+0x10/0x10 [ 86.409886][ T5498] ? sched_clock_cpu+0x76/0x490 [ 86.414755][ T5498] ? __pfx_sched_clock_cpu+0x10/0x10 [ 86.420061][ T5498] __x64_sys_open+0x225/0x270 [ 86.424754][ T5498] ? __pfx___x64_sys_open+0x10/0x10 [ 86.429969][ T5498] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 86.436312][ T5498] ? __irq_exit_rcu+0x100/0x1c0 [ 86.441205][ T5498] ? do_syscall_64+0xb6/0x230 [ 86.445898][ T5498] do_syscall_64+0xf3/0x230 [ 86.450415][ T5498] ? clear_bhb_loop+0x35/0x90 [ 86.455107][ T5498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.461024][ T5498] RIP: 0033:0x7f607fb7def9 [ 86.465456][ T5498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.485175][ T5498] RSP: 002b:00007f60808cb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 86.493608][ T5498] RAX: ffffffffffffffda RBX: 00007f607fd36130 RCX: 00007f607fb7def9 [ 86.501593][ T5498] RDX: 0000000000000000 RSI: 000000000000003f RDI: 0000000020001640 [ 86.509578][ T5498] RBP: 00007f60808cb090 R08: 0000000000000000 R09: 0000000000000000 [ 86.517572][ T5498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.525815][ T5498] R13: 0000000000000000 R14: 00007f607fd36130 R15: 00007ffc27abff38 [ 86.533914][ T5498] [ 87.197335][ T5505] netlink: 40 bytes leftover after parsing attributes in process `syz.0.51'. [ 87.208775][ T5505] futex_wake_op: syz.0.51 tries to shift op by -1; fix this program [ 87.262880][ T5501] netlink: 40 bytes leftover after parsing attributes in process `syz.2.52'. [ 87.274570][ T5501] futex_wake_op: syz.2.52 tries to shift op by -1; fix this program [ 87.651654][ T5511] FAULT_INJECTION: forcing a failure. [ 87.651654][ T5511] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.675384][ T5511] CPU: 0 UID: 0 PID: 5511 Comm: syz.1.54 Not tainted 6.11.0-rc7-syzkaller-00017-gbc83b4d1f086 #0 [ 87.685941][ T5511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 87.696031][ T5511] Call Trace: [ 87.699370][ T5511] [ 87.702587][ T5511] dump_stack_lvl+0x241/0x360 [ 87.707287][ T5511] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.712497][ T5511] ? __pfx__printk+0x10/0x10 [ 87.717167][ T5511] ? __pfx_lock_release+0x10/0x10 [ 87.722189][ T5511] should_fail_ex+0x3b0/0x4e0 [ 87.726884][ T5511] _copy_from_user+0x2f/0xe0 [ 87.731587][ T5511] userfaultfd_ioctl+0x407/0x70a0 [ 87.736627][ T5511] ? stack_trace_save+0x118/0x1d0 [ 87.741649][ T5511] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 87.747111][ T5511] ? stack_depot_save_flags+0x29/0x830 [ 87.752571][ T5511] ? kasan_save_track+0x51/0x80 [ 87.757417][ T5511] ? kasan_save_track+0x3f/0x80 [ 87.762297][ T5511] ? kasan_save_free_info+0x40/0x50 [ 87.767582][ T5511] ? poison_slab_object+0xe0/0x150 [ 87.772720][ T5511] ? __kasan_slab_free+0x37/0x60 [ 87.777711][ T5511] ? kfree+0x149/0x360 [ 87.781777][ T5511] ? tomoyo_path_number_perm+0x68d/0x880 [ 87.787427][ T5511] ? security_file_ioctl+0x75/0xb0 [ 87.792712][ T5511] ? __se_sys_ioctl+0x47/0x170 [ 87.797475][ T5511] ? do_syscall_64+0xf3/0x230 [ 87.802148][ T5511] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.808303][ T5511] ? do_vfs_ioctl+0xf0e/0x2e50 [ 87.813078][ T5511] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 87.818133][ T5511] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 87.824552][ T5511] ? tomoyo_path_number_perm+0x208/0x880 [ 87.830180][ T5511] ? __pfx_lock_release+0x10/0x10 [ 87.835206][ T5511] ? kfree+0x149/0x360 [ 87.839279][ T5511] ? tomoyo_path_number_perm+0x71a/0x880 [ 87.844996][ T5511] ? tomoyo_path_number_perm+0x208/0x880 [ 87.850627][ T5511] ? smack_log+0x123/0x540 [ 87.855041][ T5511] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 87.861026][ T5511] ? __pfx_smack_log+0x10/0x10 [ 87.865881][ T5511] ? smk_access+0x4ab/0x4e0 [ 87.870390][ T5511] ? smk_tskacc+0x300/0x370 [ 87.874982][ T5511] ? smack_file_ioctl+0x2fa/0x3a0 [ 87.880124][ T5511] ? __pfx_smack_file_ioctl+0x10/0x10 [ 87.885518][ T5511] ? __fget_files+0x3f6/0x470 [ 87.890737][ T5511] ? __fget_files+0x29/0x470 [ 87.895527][ T5511] ? bpf_lsm_file_ioctl+0x9/0x10 [ 87.900561][ T5511] ? security_file_ioctl+0x87/0xb0 [ 87.905807][ T5511] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 87.911276][ T5511] __se_sys_ioctl+0xfc/0x170 [ 87.915875][ T5511] do_syscall_64+0xf3/0x230 [ 87.920405][ T5511] ? clear_bhb_loop+0x35/0x90 [ 87.925090][ T5511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.931009][ T5511] RIP: 0033:0x7f607fb7def9 [ 87.935418][ T5511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.955225][ T5511] RSP: 002b:00007f608099e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 87.963648][ T5511] RAX: ffffffffffffffda RBX: 00007f607fd35f80 RCX: 00007f607fb7def9 [ 87.971616][ T5511] RDX: 0000000020000080 RSI: 000000008010aa02 RDI: 0000000000000003 [ 87.979601][ T5511] RBP: 00007f608099e090 R08: 0000000000000000 R09: 0000000000000000 [ 87.987566][ T5511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.995530][ T5511] R13: 0000000000000000 R14: 00007f607fd35f80 R15: 00007ffc27abff38 [ 88.003509][ T5511] [ 88.195686][ T8] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 88.405636][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 88.429737][ T8] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 88.444782][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.470741][ T8] usb 5-1: Product: syz [ 88.480035][ T8] usb 5-1: Manufacturer: syz [ 88.484717][ T8] usb 5-1: SerialNumber: syz [ 88.756935][ T5526] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 88.786319][ T5496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.834576][ T5496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.963795][ T8] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 89.199639][ T5496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.230146][ T5531] Zero length message leads to an empty skb [ 89.255027][ T5496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.421285][ T46] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 89.647291][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.683480][ T46] usb 2-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00 [ 89.718929][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.761133][ T46] usb 2-1: config 0 descriptor?? [ 89.881584][ T5544] unsupported nla_type 25944 [ 91.663981][ T25] usb 5-1: USB disconnect, device number 2 [ 91.721210][ T25] usblp0: removed [ 91.820781][ T46] aquacomputer_d5next 0003:0C70:F00B.0001: hidraw0: USB HID v0.00 Device [HID 0c70:f00b] on usb-dummy_hcd.1-1/input0 [ 92.042318][ T46] usb 2-1: USB disconnect, device number 6 [ 92.101390][ T5557] mmap: syz.0.65 (5557) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 92.259271][ T5550] 9pnet_fd: Insufficient options for proto=fd [ 92.852270][ T5570] netlink: 40 bytes leftover after parsing attributes in process `syz.3.72'. [ 93.869868][ T5576] FAULT_INJECTION: forcing a failure. [ 93.869868][ T5576] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.452004][ T5579] Illegal XDP return value 4294967274 on prog (id 23) dev N/A, expect packet loss! [ 94.898309][ T5576] CPU: 1 UID: 0 PID: 5576 Comm: syz.4.75 Not tainted 6.11.0-rc7-syzkaller-00017-gbc83b4d1f086 #0 [ 94.908869][ T5576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 94.918947][ T5576] Call Trace: [ 94.922246][ T5576] [ 94.925199][ T5576] dump_stack_lvl+0x241/0x360 [ 94.929995][ T5576] ? __pfx_dump_stack_lvl+0x10/0x10 [ 94.935222][ T5576] ? __pfx__printk+0x10/0x10 [ 94.939839][ T5576] should_fail_ex+0x3b0/0x4e0 [ 94.944516][ T5576] _copy_from_user+0x2f/0xe0 [ 94.949109][ T5576] move_addr_to_kernel+0x82/0x150 [ 94.954155][ T5576] __sys_sendto+0x2a3/0x4f0 [ 94.958656][ T5576] ? __pfx___sys_sendto+0x10/0x10 [ 94.963690][ T5576] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 94.969676][ T5576] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 94.976030][ T5576] __x64_sys_sendto+0xde/0x100 [ 94.980798][ T5576] do_syscall_64+0xf3/0x230 [ 94.985299][ T5576] ? clear_bhb_loop+0x35/0x90 [ 94.990076][ T5576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.995965][ T5576] RIP: 0033:0x7fe3f4b7def9 [ 95.000374][ T5576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.019972][ T5576] RSP: 002b:00007fe3f5a1c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 95.028469][ T5576] RAX: ffffffffffffffda RBX: 00007fe3f4d35f80 RCX: 00007fe3f4b7def9 [ 95.036695][ T5576] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 95.044744][ T5576] RBP: 00007fe3f5a1c090 R08: 0000000020000140 R09: 0000000000000014 [ 95.052706][ T5576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.060667][ T5576] R13: 0000000000000000 R14: 00007fe3f4d35f80 R15: 00007ffdfad44878 [ 95.068646][ T5576] [ 95.071702][ C1] vkms_vblank_simulate: vblank timer overrun [ 95.225385][ T5224] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 95.464665][ T5224] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.500890][ T5224] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.639283][ T5224] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 95.648873][ T5224] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.664492][ T5224] usb 4-1: config 0 descriptor?? [ 98.012169][ T5224] uclogic 0003:256C:006D.0002: failed retrieving Huion firmware version: -71 [ 98.048098][ T5224] uclogic 0003:256C:006D.0002: failed probing parameters: -71 [ 98.069941][ T5224] uclogic 0003:256C:006D.0002: probe with driver uclogic failed with error -71 [ 98.108984][ T5224] usb 4-1: USB disconnect, device number 3 [ 100.200499][ T5632] netlink: 40 bytes leftover after parsing attributes in process `syz.0.86'. [ 101.969992][ T5639] cannot load conntrack support for proto=3 [ 103.387078][ T5650] cannot load conntrack support for proto=3 [ 104.408436][ T5320] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 104.679069][ T5320] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.730639][ T5320] usb 4-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f [ 104.774825][ T5320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.797491][ T5224] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 104.850617][ T5320] usb 4-1: config 0 descriptor?? [ 104.872653][ T5320] rndis_host 4-1:0.0: skipping garbage [ 104.878824][ T5320] rndis_host 4-1:0.0: probe with driver rndis_host failed with error -22 [ 104.910279][ T5320] cdc_acm 4-1:0.0: skipping garbage [ 104.928764][ T5320] cdc_acm 4-1:0.0: Control and data interfaces are not separated! [ 104.949851][ T5320] cdc_acm 4-1:0.0: This needs exactly 3 endpoints [ 104.959869][ T5320] cdc_acm 4-1:0.0: probe with driver cdc_acm failed with error -22 [ 105.007011][ T5224] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.025357][ T5224] usb 3-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f [ 105.034435][ T5224] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.097907][ T5224] usb 3-1: config 0 descriptor?? [ 105.136173][ T5224] rndis_host 3-1:0.0: skipping garbage [ 105.191500][ T5224] rndis_host 3-1:0.0: probe with driver rndis_host failed with error -22 [ 105.492084][ T5224] cdc_acm 3-1:0.0: skipping garbage [ 105.497532][ T5224] cdc_acm 3-1:0.0: Control and data interfaces are not separated! [ 105.506051][ T5224] cdc_acm 3-1:0.0: This needs exactly 3 endpoints [ 105.514367][ T5224] cdc_acm 3-1:0.0: probe with driver cdc_acm failed with error -22 [ 107.001413][ T5665] sched: RT throttling activated [ 110.325726][ T9] usb 3-1: USB disconnect, device number 6 [ 110.430341][ T25] usb 4-1: USB disconnect, device number 4 [ 110.902350][ T5681] netlink: 40 bytes leftover after parsing attributes in process `syz.3.100'. [ 111.521581][ T5685] syzkaller1: entered promiscuous mode [ 111.538991][ T5685] syzkaller1: entered allmulticast mode [ 111.872327][ T5692] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 112.726305][ T5704] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 113.208120][ T5703] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 113.416673][ T5712] fuse: Bad value for 'fd' [ 114.393353][ T5721] ptrace attach of "./syz-executor exec"[5229] was attempted by " [ 115.795402][ T5741] netlink: 40 bytes leftover after parsing attributes in process `syz.3.116'. [ 117.133113][ T5757] cannot load conntrack support for proto=3 [ 117.312809][ T5758] netlink: 40 bytes leftover after parsing attributes in process `syz.0.120'. [ 117.322981][ T5758] futex_wake_op: syz.0.120 tries to shift op by -1; fix this program [ 118.307823][ T5769] netlink: 40 bytes leftover after parsing attributes in process `syz.0.125'. [ 118.321171][ T5769] futex_wake_op: syz.0.125 tries to shift op by -1; fix this program [ 120.011568][ T25] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 120.019186][ T46] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 120.245336][ T46] usb 2-1: Using ep0 maxpacket: 8 [ 120.254855][ T46] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 120.271862][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.280079][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 120.292519][ T25] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 120.305108][ T46] usb 2-1: Product: syz [ 120.315523][ T46] usb 2-1: Manufacturer: syz [ 120.322688][ T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.342702][ T46] usb 2-1: SerialNumber: syz [ 120.361607][ T25] usb 4-1: config 0 has no interfaces? [ 120.378956][ T25] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 120.417349][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.456665][ T25] usb 4-1: config 0 descriptor?? [ 122.253881][ T46] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 122.268162][ T46] usb 2-1: USB disconnect, device number 7 [ 122.281560][ T46] usblp0: removed [ 122.436823][ T5803] cannot load conntrack support for proto=3 [ 123.263824][ T9] usb 4-1: USB disconnect, device number 5 [ 123.817526][ T5813] netlink: 40 bytes leftover after parsing attributes in process `syz.1.135'. [ 123.827434][ T5813] futex_wake_op: syz.1.135 tries to shift op by -1; fix this program [ 124.338039][ T5822] netlink: 40 bytes leftover after parsing attributes in process `syz.3.136'. [ 124.349095][ T5822] futex_wake_op: syz.3.136 tries to shift op by -1; fix this program [ 124.406682][ T5824] netlink: 12 bytes leftover after parsing attributes in process `syz.4.138'. [ 126.867359][ T25] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 127.006400][ T5855] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 127.705900][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 127.716765][ T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.729835][ T25] usb 2-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=2c.ae [ 127.745688][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.753794][ T25] usb 2-1: Product: syz [ 127.775406][ T25] usb 2-1: Manufacturer: syz [ 127.780201][ T25] usb 2-1: SerialNumber: syz [ 127.787317][ T25] usb 2-1: config 0 descriptor?? [ 127.796079][ T25] gspca_main: etoms-2.14.0 probing 102c:6151 [ 127.923441][ T5861] netlink: 12 bytes leftover after parsing attributes in process `syz.0.150'. [ 128.147646][ T5869] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.152'. [ 129.150823][ T5873] netlink: 40 bytes leftover after parsing attributes in process `syz.3.149'. [ 129.485380][ T25] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 129.555305][ T46] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 129.597589][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 129.667892][ T5224] usb 2-1: USB disconnect, device number 8 [ 129.687221][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.722006][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 129.751799][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.768398][ T25] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 129.783539][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.794022][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.802332][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 129.805140][ T46] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 129.837817][ T25] usb 1-1: config 0 descriptor?? [ 129.848612][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.864254][ T9] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 129.869135][ T25] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 129.881133][ T46] usb 5-1: Product: syz [ 129.893287][ T46] usb 5-1: Manufacturer: syz [ 129.905751][ T46] usb 5-1: SerialNumber: syz [ 129.915079][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.932627][ T46] usb 5-1: config 0 descriptor?? [ 129.950516][ T46] usb 5-1: Found UVC 0.00 device syz (18ec:3288) [ 129.958525][ T9] usb 3-1: config 0 has no interfaces? [ 129.958570][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 129.958591][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.982904][ T9] usb 3-1: config 0 descriptor?? [ 130.020527][ T46] usb 5-1: No valid video chain found. [ 131.449939][ T5224] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 131.639858][ T5224] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.651637][ T5224] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.662326][ T5224] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 131.674263][ T5224] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.687139][ T5224] usb 2-1: config 0 descriptor?? [ 132.199410][ T46] usb 5-1: USB disconnect, device number 3 [ 132.320818][ T9] usb 3-1: USB disconnect, device number 7 [ 132.473058][ T5320] usb 1-1: USB disconnect, device number 3 [ 133.241827][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.251261][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.528076][ T5224] uclogic 0003:256C:006D.0003: failed retrieving Huion firmware version: -71 [ 133.548548][ T5224] uclogic 0003:256C:006D.0003: failed probing parameters: -71 [ 133.562493][ T5224] uclogic 0003:256C:006D.0003: probe with driver uclogic failed with error -71 [ 133.601491][ T5224] usb 2-1: USB disconnect, device number 9 [ 133.705400][ T5320] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 133.917019][ T5320] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.130723][ T5320] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.242630][ T5320] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 134.342521][ T5320] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.366588][ T5320] usb 1-1: config 0 descriptor?? [ 134.371822][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 134.585576][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 134.599400][ T9] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 134.628473][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.655154][ T9] usb 5-1: config 0 has no interfaces? [ 134.665019][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 134.714634][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.757904][ T9] usb 5-1: config 0 descriptor?? [ 134.906376][ T5954] netlink: 40 bytes leftover after parsing attributes in process `syz.1.179'. [ 134.916163][ T5954] futex_wake_op: syz.1.179 tries to shift op by -1; fix this program [ 135.667264][ T5320] uclogic 0003:256C:006D.0004: failed retrieving Huion firmware version: -71 [ 135.678761][ T5945] 9pnet_fd: Insufficient options for proto=fd [ 135.688597][ T5320] uclogic 0003:256C:006D.0004: failed probing parameters: -71 [ 135.701193][ T5320] uclogic 0003:256C:006D.0004: probe with driver uclogic failed with error -71 [ 135.737052][ T5320] usb 1-1: USB disconnect, device number 4 [ 138.088577][ T9] usb 5-1: USB disconnect, device number 4 [ 138.411379][ T5985] netlink: 44 bytes leftover after parsing attributes in process `syz.4.188'. [ 138.435542][ T5985] netlink: 24 bytes leftover after parsing attributes in process `syz.4.188'. [ 138.471850][ T5987] netlink: 44 bytes leftover after parsing attributes in process `syz.4.188'. [ 138.591703][ T5987] netlink: 24 bytes leftover after parsing attributes in process `syz.4.188'. [ 138.629838][ T5979] warning: `syz.2.186' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 139.278565][ T6004] netlink: 40 bytes leftover after parsing attributes in process `syz.0.192'. [ 139.288614][ T6004] futex_wake_op: syz.0.192 tries to shift op by -1; fix this program [ 140.219730][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 140.764987][ T9] usb 3-1: config 0 has an invalid interface number: 10 but max is 0 [ 140.989798][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.075508][ T9] usb 3-1: config 0 has no interface number 0 [ 141.497679][ T9] usb 3-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice=38.1d [ 141.528528][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.537881][ T9] usb 3-1: Product: syz [ 141.545679][ T9] usb 3-1: Manufacturer: syz [ 141.556376][ T9] usb 3-1: SerialNumber: syz [ 141.582439][ T9] usb 3-1: config 0 descriptor?? [ 141.629721][ T9] snd-usb-caiaq 3-1:0.10: can't set alt interface. [ 141.658136][ T9] usb 3-1: unable to init card! (ret=-5) [ 141.700363][ T9] snd-usb-caiaq 3-1:0.10: probe with driver snd-usb-caiaq failed with error -5 [ 141.888420][ T6028] FAULT_INJECTION: forcing a failure. [ 141.888420][ T6028] name failslab, interval 1, probability 0, space 0, times 1 [ 141.932458][ T6028] CPU: 1 UID: 0 PID: 6028 Comm: syz.3.202 Not tainted 6.11.0-rc7-syzkaller-00017-gbc83b4d1f086 #0 [ 141.943121][ T6028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 141.953296][ T6028] Call Trace: [ 141.956594][ T6028] [ 141.959531][ T6028] dump_stack_lvl+0x241/0x360 [ 141.964303][ T6028] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.969520][ T6028] ? __pfx__printk+0x10/0x10 [ 141.974103][ T6028] ? fs_reclaim_acquire+0x93/0x140 [ 141.979202][ T6028] ? __pfx___might_resched+0x10/0x10 [ 141.984478][ T6028] should_fail_ex+0x3b0/0x4e0 [ 141.989151][ T6028] should_failslab+0xac/0x100 [ 141.993827][ T6028] ? smk_import_entry+0x2ec/0x610 [ 141.998851][ T6028] __kmalloc_cache_noprof+0x6c/0x2c0 [ 142.004216][ T6028] ? full_name_hash+0xb1/0xe0 [ 142.008885][ T6028] smk_import_entry+0x2ec/0x610 [ 142.013757][ T6028] smk_write_net6addr+0x700/0x18b0 [ 142.018867][ T6028] ? __pfx_smk_write_net6addr+0x10/0x10 [ 142.024395][ T6028] ? rcu_read_lock_any_held+0xb7/0x160 [ 142.029867][ T6028] ? __pfx_smk_write_net6addr+0x10/0x10 [ 142.035427][ T6028] vfs_write+0x2a2/0xc90 [ 142.039696][ T6028] ? __pfx_vfs_write+0x10/0x10 [ 142.044477][ T6028] ? __fget_files+0x29/0x470 [ 142.049057][ T6028] ? __fget_files+0x3f6/0x470 [ 142.053731][ T6028] ksys_write+0x1a0/0x2c0 [ 142.058073][ T6028] ? __pfx_ksys_write+0x10/0x10 [ 142.062913][ T6028] ? do_syscall_64+0x100/0x230 [ 142.067688][ T6028] ? do_syscall_64+0xb6/0x230 [ 142.072379][ T6028] do_syscall_64+0xf3/0x230 [ 142.076873][ T6028] ? clear_bhb_loop+0x35/0x90 [ 142.081538][ T6028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.087418][ T6028] RIP: 0033:0x7fed8197def9 [ 142.091826][ T6028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.111503][ T6028] RSP: 002b:00007fed8279d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 142.119908][ T6028] RAX: ffffffffffffffda RBX: 00007fed81b35f80 RCX: 00007fed8197def9 [ 142.127862][ T6028] RDX: 0000000000000109 RSI: 0000000020000280 RDI: 0000000000000003 [ 142.135816][ T6028] RBP: 00007fed8279d090 R08: 0000000000000000 R09: 0000000000000000 [ 142.143789][ T6028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.151759][ T6028] R13: 0000000000000000 R14: 00007fed81b35f80 R15: 00007ffd0297a3d8 [ 142.159737][ T6028] [ 142.162893][ C1] vkms_vblank_simulate: vblank timer overrun [ 142.257743][ T6029] syzkaller1: entered promiscuous mode [ 142.295382][ T6029] syzkaller1: entered allmulticast mode [ 143.055438][ T9] usb 3-1: USB disconnect, device number 8 [ 143.088408][ T6046] msdos: Bad value for 'gid' [ 143.132991][ T6046] msdos: Bad value for 'gid' [ 143.354335][ T6053] netlink: 40 bytes leftover after parsing attributes in process `syz.2.207'. [ 143.364402][ T6053] futex_wake_op: syz.2.207 tries to shift op by -1; fix this program [ 149.989882][ T6069] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 150.040036][ T5226] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 150.050508][ T5226] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 150.064312][ T5226] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 150.079160][ T5226] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 150.087503][ T5226] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 150.100321][ T5226] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 151.065455][ T46] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 151.818337][ T46] usb 4-1: Using ep0 maxpacket: 8 [ 151.848949][ T46] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 151.870772][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.898929][ T2516] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.918256][ T46] usb 4-1: config 0 descriptor?? [ 152.019372][ T2516] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.090133][ T2516] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.112374][ T6071] chnl_net:caif_netlink_parms(): no params data found [ 152.167670][ T2516] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.195649][ T5231] Bluetooth: hci5: command tx timeout [ 152.224604][ T6071] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.232134][ T6071] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.240112][ T6071] bridge_slave_0: entered allmulticast mode [ 152.248695][ T6071] bridge_slave_0: entered promiscuous mode [ 152.259596][ T6071] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.267602][ T6071] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.274871][ T6071] bridge_slave_1: entered allmulticast mode [ 152.287153][ T6071] bridge_slave_1: entered promiscuous mode [ 152.331566][ T6071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.349298][ T6071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.428310][ T6071] team0: Port device team_slave_0 added [ 152.448091][ T6071] team0: Port device team_slave_1 added [ 152.504804][ T2516] bridge_slave_1: left allmulticast mode [ 152.511018][ T2516] bridge_slave_1: left promiscuous mode [ 152.523463][ T2516] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.542308][ T2516] bridge_slave_0: left allmulticast mode [ 152.548177][ T2516] bridge_slave_0: left promiscuous mode [ 152.553970][ T2516] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.554498][ T46] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 152.571551][ T46] asix 4-1:0.0: probe with driver asix failed with error -61 [ 152.911981][ T2516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.927402][ T2516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.939760][ T2516] bond0 (unregistering): Released all slaves [ 152.952001][ T6071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.959421][ T6071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.985479][ T6071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.008241][ T6071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.022123][ T6071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.055286][ T6071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.107151][ T6071] hsr_slave_0: entered promiscuous mode [ 153.114102][ T6071] hsr_slave_1: entered promiscuous mode [ 153.121964][ T6071] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 153.132121][ T6071] Cannot create hsr debugfs directory [ 153.413537][ T2516] hsr_slave_0: left promiscuous mode [ 153.427030][ T2516] hsr_slave_1: left promiscuous mode [ 153.433391][ T2516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.444054][ T2516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.454976][ T2516] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.465578][ T2516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.489213][ T2516] veth1_macvtap: left promiscuous mode [ 153.495149][ T2516] veth0_macvtap: left promiscuous mode [ 153.501615][ T2516] veth1_vlan: left promiscuous mode [ 153.508710][ T2516] veth0_vlan: left promiscuous mode [ 153.839728][ T5320] usb 4-1: USB disconnect, device number 6 [ 154.111133][ T2516] team0 (unregistering): Port device team_slave_1 removed [ 154.154857][ T2516] team0 (unregistering): Port device team_slave_0 removed [ 154.278736][ T5231] Bluetooth: hci5: command tx timeout [ 154.999659][ T6071] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 155.020431][ T6071] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 155.038037][ T6071] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 155.061285][ T6071] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 155.164997][ T6071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.190252][ T6071] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.210889][ T5381] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.218101][ T5381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.233385][ T772] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.240572][ T772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.472151][ T6071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.553178][ T6071] veth0_vlan: entered promiscuous mode [ 155.574719][ T6071] veth1_vlan: entered promiscuous mode [ 155.624861][ T6071] veth0_macvtap: entered promiscuous mode [ 155.644702][ T6071] veth1_macvtap: entered promiscuous mode [ 155.673455][ T6071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.685887][ T6071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.697361][ T6071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.709170][ T6071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.719377][ T6071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.730779][ T6071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.741268][ T6071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.752066][ T6071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.763936][ T6071] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.789302][ T6071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.808173][ T6071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.823089][ T6071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.839929][ T6071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.850357][ T6071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.861314][ T6071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.884739][ T6071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.897607][ T6071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.917648][ T6071] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.934534][ T6071] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.943873][ T6071] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.953316][ T6071] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.962950][ T6071] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.073924][ T2516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.096617][ T2516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.117474][ T2553] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.127044][ T2553] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.357446][ T5231] Bluetooth: hci5: command tx timeout [ 159.888081][ T5226] Bluetooth: hci5: command tx timeout [ 160.184457][ T6180] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 163.075062][ T5226] Bluetooth: hci5: command 0x0405 tx timeout [ 167.785563][ T5352] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 167.887476][ T6231] syzkaller1: entered promiscuous mode [ 167.894829][ T6231] syzkaller1: entered allmulticast mode [ 168.051680][ T6235] futex_wake_op: syz.0.233 tries to shift op by -1; fix this program [ 168.082252][ T5352] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.095305][ T5320] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 168.120567][ T5352] usb 4-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f [ 168.139849][ T5352] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.743359][ T5320] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.753725][ T5320] usb 2-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f [ 168.763446][ T5320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.769814][ T5352] usb 4-1: config 0 descriptor?? [ 168.793014][ T5352] usb 4-1: can't set config #0, error -71 [ 168.805133][ T5352] usb 4-1: USB disconnect, device number 7 [ 168.852406][ T5320] usb 2-1: config 0 descriptor?? [ 169.616142][ T5320] rndis_host 2-1:0.0: skipping garbage [ 169.685556][ T5320] rndis_host 2-1:0.0: probe with driver rndis_host failed with error -22 [ 169.700505][ T5320] cdc_acm 2-1:0.0: skipping garbage [ 169.708445][ T5320] cdc_acm 2-1:0.0: Control and data interfaces are not separated! [ 169.725064][ T5320] cdc_acm 2-1:0.0: This needs exactly 3 endpoints [ 169.744449][ T5320] cdc_acm 2-1:0.0: probe with driver cdc_acm failed with error -22 [ 171.431374][ T6266] futex_wake_op: syz.0.241 tries to shift op by -1; fix this program [ 172.761359][ T6272] syzkaller1: entered promiscuous mode [ 172.818473][ T6272] syzkaller1: entered allmulticast mode [ 174.652605][ T5320] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 174.928101][ T25] usb 2-1: USB disconnect, device number 10 [ 175.156204][ T6301] cannot load conntrack support for proto=3 [ 175.214001][ T5320] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.916641][ T5320] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.935641][ T5320] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 175.990033][ T5320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.005126][ T6303] binder_alloc: 6302: binder_alloc_buf, no vma [ 176.006079][ T5320] usb 4-1: config 0 descriptor?? [ 177.761056][ T5320] uclogic 0003:256C:006D.0005: failed retrieving Huion firmware version: -71 [ 177.790357][ T5320] uclogic 0003:256C:006D.0005: failed probing parameters: -71 [ 177.812303][ T5320] uclogic 0003:256C:006D.0005: probe with driver uclogic failed with error -71 [ 177.845912][ T8] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 177.898393][ T5320] usb 4-1: USB disconnect, device number 8 [ 178.081764][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.103372][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.133181][ T8] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 178.163260][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.230992][ T8] usb 2-1: config 0 descriptor?? [ 178.420055][ T6325] tipc: Started in network mode [ 178.426437][ T6325] tipc: Node identity 2ad4579de311, cluster identity 4711 [ 178.436752][ T6325] tipc: Enabled bearer , priority 0 [ 178.463975][ T6325] €Â: renamed from syzkaller0 [ 178.478503][ T6325] tipc: Disabling bearer [ 181.368171][ T8] usb 2-1: string descriptor 0 read error: -71 [ 181.383938][ T8] uclogic 0003:256C:006D.0006: failed retrieving string descriptor #200: -71 [ 181.396416][ T6343] pimreg: entered allmulticast mode [ 181.407671][ T8] uclogic 0003:256C:006D.0006: failed retrieving pen parameters: -71 [ 181.423892][ T8] uclogic 0003:256C:006D.0006: failed probing pen v2 parameters: -71 [ 181.432588][ T8] uclogic 0003:256C:006D.0006: failed probing parameters: -71 [ 181.449700][ T8] uclogic 0003:256C:006D.0006: probe with driver uclogic failed with error -71 [ 181.499983][ T8] usb 2-1: USB disconnect, device number 11 [ 181.638318][ T6351] hsr0: entered promiscuous mode [ 181.643412][ T6351] hsr0: entered allmulticast mode [ 181.658793][ T6351] hsr_slave_0: entered allmulticast mode [ 181.664486][ T6351] hsr_slave_1: entered allmulticast mode [ 181.735457][ T6354] cannot load conntrack support for proto=3 [ 181.746379][ T5224] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 182.502817][ T5224] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.544833][ T5224] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 182.573388][ T5224] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 182.603328][ T5224] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.647806][ T5224] usb 4-1: config 0 descriptor?? [ 182.674300][ T5224] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 182.724835][ T6356] ======================================================= [ 182.724835][ T6356] WARNING: The mand mount option has been deprecated and [ 182.724835][ T6356] and is ignored by this kernel. Remove the mand [ 182.724835][ T6356] option from the mount to silence this warning. [ 182.724835][ T6356] ======================================================= [ 184.532134][ T6403] ------------[ cut here ]------------ [ 184.537763][ T6403] Please remove unsupported % in format string [ 184.544723][ T6403] WARNING: CPU: 0 PID: 6403 at lib/vsprintf.c:2680 format_decode+0x1193/0x1bb0 [ 184.553793][ T6403] Modules linked in: [ 184.557756][ T6403] CPU: 0 UID: 0 PID: 6403 Comm: syz.4.283 Not tainted 6.11.0-rc7-syzkaller-00017-gbc83b4d1f086 #0 [ 184.568388][ T6403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 184.578501][ T6403] RIP: 0010:format_decode+0x1193/0x1bb0 [ 184.584118][ T6403] Code: 36 e9 f5 c6 05 03 dd 36 04 01 90 43 0f b6 04 34 84 c0 0f 85 14 0a 00 00 41 0f b6 75 00 48 c7 c7 60 9a 13 8d e8 7e 59 ab f5 90 <0f> 0b 90 90 e9 0e fd ff ff 48 8b 4c 24 10 80 e1 07 38 c1 0f 8c 14 [ 184.603795][ T6403] RSP: 0018:ffffc9000482f5c0 EFLAGS: 00010246 [ 184.609963][ T6403] RAX: 7b29b603b4b3a500 RBX: 0000000000000000 RCX: 0000000000040000 [ 184.618009][ T6403] RDX: ffffc90009451000 RSI: 000000000000518c RDI: 000000000000518d [ 184.626021][ T6403] RBP: ffffc9000482f6b0 R08: ffffffff8155b292 R09: 1ffff1101710519a [ 184.633983][ T6403] R10: dffffc0000000000 R11: ffffed101710519b R12: 1ffff92000905f1d [ 184.641974][ T6403] R13: ffffc9000482f8ec R14: dffffc0000000000 R15: ffff0000ffffff00 [ 184.649966][ T6403] FS: 00007fe3f5a1c6c0(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 184.658908][ T6403] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 184.665508][ T6403] CR2: 00005555916db808 CR3: 0000000030e2e000 CR4: 00000000003506f0 [ 184.673593][ T6403] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 184.681592][ T6403] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 184.689578][ T6403] Call Trace: [ 184.692845][ T6403] [ 184.695814][ T6403] ? __warn+0x163/0x4e0 [ 184.699957][ T6403] ? format_decode+0x1193/0x1bb0 [ 184.704885][ T6403] ? report_bug+0x2b3/0x500 [ 184.709469][ T6403] ? format_decode+0x1193/0x1bb0 [ 184.714409][ T6403] ? handle_bug+0x3e/0x70 [ 184.718778][ T6403] ? exc_invalid_op+0x1a/0x50 [ 184.723441][ T6403] ? asm_exc_invalid_op+0x1a/0x20 [ 184.728574][ T6403] ? __warn_printk+0x292/0x360 [ 184.733321][ T6403] ? format_decode+0x1193/0x1bb0 [ 184.738275][ T6403] ? __pfx_format_decode+0x10/0x10 [ 184.743374][ T6403] ? bstr_printf+0x721/0x1210 [ 184.748078][ T6403] bstr_printf+0x137/0x1210 [ 184.752571][ T6403] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 184.758915][ T6403] ? __pfx_bstr_printf+0x10/0x10 [ 184.763837][ T6403] ? timekeeping_get_ns+0x5c/0x420 [ 184.768957][ T6403] ? lockdep_hardirqs_on+0x99/0x150 [ 184.774146][ T6403] ? bpf_trace_printk+0x115/0x230 [ 184.779292][ T6403] bpf_trace_printk+0x1a1/0x230 [ 184.784131][ T6403] ? sched_clock+0x41/0x70 [ 184.788561][ T6403] ? __pfx_bpf_trace_printk+0x10/0x10 [ 184.793957][ T6403] ? sched_clock+0x41/0x70 [ 184.798390][ T6403] ? bpf_test_run+0x370/0xa90 [ 184.803058][ T6403] bpf_prog_12183cdb1cd51dab+0x36/0x3a [ 184.808611][ T6403] bpf_test_run+0x7b8/0xa90 [ 184.813096][ T6403] ? do_syscall_64+0xf3/0x230 [ 184.817782][ T6403] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.823838][ T6403] ? bpf_test_run+0x370/0xa90 [ 184.828534][ T6403] ? __pfx_bpf_test_run+0x10/0x10 [ 184.833549][ T6403] ? eth_type_trans+0x3d1/0x7a0 [ 184.838442][ T6403] ? __pfx_eth_type_trans+0x10/0x10 [ 184.843629][ T6403] ? convert___skb_to_skb+0x41/0x620 [ 184.848937][ T6403] bpf_prog_test_run_skb+0xc97/0x1820 [ 184.854306][ T6403] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 184.860124][ T6403] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 184.865941][ T6403] bpf_prog_test_run+0x33a/0x3b0 [ 184.870871][ T6403] __sys_bpf+0x48d/0x810 [ 184.875132][ T6403] ? __pfx___sys_bpf+0x10/0x10 [ 184.879935][ T6403] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 184.885928][ T6403] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 184.892245][ T6403] ? do_syscall_64+0x100/0x230 [ 184.897029][ T6403] __x64_sys_bpf+0x7c/0x90 [ 184.901437][ T6403] do_syscall_64+0xf3/0x230 [ 184.905978][ T6403] ? clear_bhb_loop+0x35/0x90 [ 184.910734][ T6403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.916639][ T6403] RIP: 0033:0x7fe3f4b7def9 [ 184.921129][ T6403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.940750][ T6403] RSP: 002b:00007fe3f5a1c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 184.949197][ T6403] RAX: ffffffffffffffda RBX: 00007fe3f4d35f80 RCX: 00007fe3f4b7def9 [ 184.957196][ T6403] RDX: 0000000000000028 RSI: 0000000020000080 RDI: 000000000000000a [ 184.965150][ T6403] RBP: 00007fe3f4bf09f6 R08: 0000000000000000 R09: 0000000000000000 [ 184.973155][ T6403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.981157][ T6403] R13: 0000000000000000 R14: 00007fe3f4d35f80 R15: 00007ffdfad44878 [ 184.989155][ T6403] [ 184.992160][ T6403] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 184.999422][ T6403] CPU: 0 UID: 0 PID: 6403 Comm: syz.4.283 Not tainted 6.11.0-rc7-syzkaller-00017-gbc83b4d1f086 #0 [ 185.009987][ T6403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 185.020025][ T6403] Call Trace: [ 185.023299][ T6403] [ 185.026217][ T6403] dump_stack_lvl+0x241/0x360 [ 185.030909][ T6403] ? __pfx_dump_stack_lvl+0x10/0x10 [ 185.036110][ T6403] ? __pfx__printk+0x10/0x10 [ 185.040702][ T6403] ? vscnprintf+0x5d/0x90 [ 185.045020][ T6403] panic+0x349/0x860 [ 185.048907][ T6403] ? __warn+0x172/0x4e0 [ 185.053050][ T6403] ? __pfx_panic+0x10/0x10 [ 185.057462][ T6403] __warn+0x346/0x4e0 [ 185.061431][ T6403] ? format_decode+0x1193/0x1bb0 [ 185.066357][ T6403] report_bug+0x2b3/0x500 [ 185.070679][ T6403] ? format_decode+0x1193/0x1bb0 [ 185.075607][ T6403] handle_bug+0x3e/0x70 [ 185.079754][ T6403] exc_invalid_op+0x1a/0x50 [ 185.084247][ T6403] asm_exc_invalid_op+0x1a/0x20 [ 185.089201][ T6403] RIP: 0010:format_decode+0x1193/0x1bb0 [ 185.094734][ T6403] Code: 36 e9 f5 c6 05 03 dd 36 04 01 90 43 0f b6 04 34 84 c0 0f 85 14 0a 00 00 41 0f b6 75 00 48 c7 c7 60 9a 13 8d e8 7e 59 ab f5 90 <0f> 0b 90 90 e9 0e fd ff ff 48 8b 4c 24 10 80 e1 07 38 c1 0f 8c 14 [ 185.114482][ T6403] RSP: 0018:ffffc9000482f5c0 EFLAGS: 00010246 [ 185.120538][ T6403] RAX: 7b29b603b4b3a500 RBX: 0000000000000000 RCX: 0000000000040000 [ 185.128501][ T6403] RDX: ffffc90009451000 RSI: 000000000000518c RDI: 000000000000518d [ 185.136476][ T6403] RBP: ffffc9000482f6b0 R08: ffffffff8155b292 R09: 1ffff1101710519a [ 185.144552][ T6403] R10: dffffc0000000000 R11: ffffed101710519b R12: 1ffff92000905f1d [ 185.152512][ T6403] R13: ffffc9000482f8ec R14: dffffc0000000000 R15: ffff0000ffffff00 [ 185.160477][ T6403] ? __warn_printk+0x292/0x360 [ 185.165245][ T6403] ? __pfx_format_decode+0x10/0x10 [ 185.170347][ T6403] ? bstr_printf+0x721/0x1210 [ 185.175044][ T6403] bstr_printf+0x137/0x1210 [ 185.179549][ T6403] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 185.185905][ T6403] ? __pfx_bstr_printf+0x10/0x10 [ 185.190834][ T6403] ? timekeeping_get_ns+0x5c/0x420 [ 185.195932][ T6403] ? lockdep_hardirqs_on+0x99/0x150 [ 185.201115][ T6403] ? bpf_trace_printk+0x115/0x230 [ 185.206133][ T6403] bpf_trace_printk+0x1a1/0x230 [ 185.210972][ T6403] ? sched_clock+0x41/0x70 [ 185.215549][ T6403] ? __pfx_bpf_trace_printk+0x10/0x10 [ 185.220925][ T6403] ? sched_clock+0x41/0x70 [ 185.225465][ T6403] ? bpf_test_run+0x370/0xa90 [ 185.230143][ T6403] bpf_prog_12183cdb1cd51dab+0x36/0x3a [ 185.235611][ T6403] bpf_test_run+0x7b8/0xa90 [ 185.240104][ T6403] ? do_syscall_64+0xf3/0x230 [ 185.244759][ T6403] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.250904][ T6403] ? bpf_test_run+0x370/0xa90 [ 185.255574][ T6403] ? __pfx_bpf_test_run+0x10/0x10 [ 185.260586][ T6403] ? eth_type_trans+0x3d1/0x7a0 [ 185.265425][ T6403] ? __pfx_eth_type_trans+0x10/0x10 [ 185.270610][ T6403] ? convert___skb_to_skb+0x41/0x620 [ 185.275878][ T6403] bpf_prog_test_run_skb+0xc97/0x1820 [ 185.281251][ T6403] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 185.287051][ T6403] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 185.292863][ T6403] bpf_prog_test_run+0x33a/0x3b0 [ 185.297813][ T6403] __sys_bpf+0x48d/0x810 [ 185.302053][ T6403] ? __pfx___sys_bpf+0x10/0x10 [ 185.306807][ T6403] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 185.312776][ T6403] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 185.319090][ T6403] ? do_syscall_64+0x100/0x230 [ 185.323839][ T6403] __x64_sys_bpf+0x7c/0x90 [ 185.328244][ T6403] do_syscall_64+0xf3/0x230 [ 185.332758][ T6403] ? clear_bhb_loop+0x35/0x90 [ 185.337424][ T6403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.343301][ T6403] RIP: 0033:0x7fe3f4b7def9 [ 185.347749][ T6403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.367361][ T6403] RSP: 002b:00007fe3f5a1c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 185.375761][ T6403] RAX: ffffffffffffffda RBX: 00007fe3f4d35f80 RCX: 00007fe3f4b7def9 [ 185.383721][ T6403] RDX: 0000000000000028 RSI: 0000000020000080 RDI: 000000000000000a [ 185.391684][ T6403] RBP: 00007fe3f4bf09f6 R08: 0000000000000000 R09: 0000000000000000 [ 185.399749][ T6403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.408248][ T6403] R13: 0000000000000000 R14: 00007fe3f4d35f80 R15: 00007ffdfad44878 [ 185.416231][ T6403] [ 185.419345][ T6403] Kernel Offset: disabled [ 185.423718][ T6403] Rebooting in 86400 seconds..