last executing test programs: 2m26.139189536s ago: executing program 0 (id=15): socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x400000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x4, 0x3, 0x0, 0x0, 0x7, 0x6], 0x0, 0x2e1090}) creat(&(0x7f0000000380)='./file0\x00', 0x102) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1, 0xa}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m24.656498289s ago: executing program 0 (id=19): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x4, 0x28}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xffffffffffffff64, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0xffffffffffffffff, 0x803, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x9) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = openat$tun(0xffffff9c, &(0x7f0000000180), 0x8000, 0x0) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x1) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000000)={0x4}) sendto$inet(r4, &(0x7f0000001600)="09268a927f1f6588b967481241ba7860fcfaf65ac635ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcec8044ab4ea6f7ae55d88fecf90b1a7511bf746b152124eb38d6c7a207112eb1bf554bc070626792d394df5adf7355fa5f8deb9db3da042d88", 0xfdef, 0x11, 0x0, 0x0) r7 = syz_io_uring_setup(0x5c2, &(0x7f0000000280)={0x0, 0x0, 0x3080, 0x8003, 0x25f}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x3, r7, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) io_uring_enter(r7, 0x6e2, 0x620, 0x1, 0x0, 0x0) 2m17.136239284s ago: executing program 0 (id=35): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r6) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x38, r7, 0x60b, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xe}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x38}}, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000440)={r0, r0, 0x9, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8000007, 'syz0\x00'}) 2m15.246905339s ago: executing program 0 (id=40): socket$igmp(0x2, 0x3, 0x2) syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x2002) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) eventfd(0x80200003) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000a00)=""/126, 0x7e, 0x7) write$6lowpan_control(r2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) lseek(0xffffffffffffffff, 0xfffffffc, 0x4) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, 0x0, 0x0, 0xa3a02308673f1ab4}) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000280)={0x2, r0}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x48, 0x4000, @fd_index=0x3, 0x5, &(0x7f0000001440), 0x0, 0x2}) 2m13.479693937s ago: executing program 0 (id=43): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x115041, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 2m13.236838412s ago: executing program 0 (id=44): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404000c}, 0x40000) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) lsetxattr$security_ima(&(0x7f0000000480)='./file0\x00', &(0x7f0000000100), &(0x7f0000000380)=@v2={0x3, 0x2, 0xfe, 0xe79f, 0x2, 'JE'}, 0xb, 0x1) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x9, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x0, 0x202, 0x2, 0xc}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, 0x1, 0x4, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xfff}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x8844) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 1m58.177382204s ago: executing program 32 (id=44): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404000c}, 0x40000) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) lsetxattr$security_ima(&(0x7f0000000480)='./file0\x00', &(0x7f0000000100), &(0x7f0000000380)=@v2={0x3, 0x2, 0xfe, 0xe79f, 0x2, 'JE'}, 0xb, 0x1) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x9, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x0, 0x202, 0x2, 0xc}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, 0x1, 0x4, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xfff}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x8844) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 20.262029166s ago: executing program 4 (id=404): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x7) ioctl$SIOCAX25OPTRT(r3, 0x89e7, &(0x7f0000000040)={@default, @bcast, 0x2, 0x20}) 17.829902291s ago: executing program 4 (id=413): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14) 15.064723097s ago: executing program 4 (id=423): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x4, 0x28}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xffffffffffffff64, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0xffffffffffffffff, 0x803, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x9) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat$tun(0xffffff9c, &(0x7f0000000180), 0x8000, 0x0) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x1) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000000)={0x4}) sendto$inet(r3, &(0x7f0000001600)="09268a927f1f6588b967481241ba7860fcfaf65ac635ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcec8044ab4ea6f7ae55d88fecf90b1a7511bf746b152124eb38d6c7a207112eb1bf554bc070626792d394df5adf7355fa5f8deb9db3da042d88", 0xfdef, 0x11, 0x0, 0x0) r6 = syz_io_uring_setup(0x5c2, &(0x7f0000000280)={0x0, 0x0, 0x3080, 0x8003, 0x25f}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x3, r6, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) io_uring_enter(r6, 0x6e2, 0x620, 0x1, 0x0, 0x0) 15.022689717s ago: executing program 2 (id=424): madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) close(r0) open(&(0x7f0000000000)='./file0\x00', 0x80000, 0x1a1) r3 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r3, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x401, 0x1, 0x3, 0x6, 0x101, 0x8, 0xffff, 0x60, 0x1}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) 14.803539065s ago: executing program 2 (id=425): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r3 = openat$comedi(0xffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_INSN(r3, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92ff, 0x0, 0x0, 0x4}) 13.298696375s ago: executing program 3 (id=431): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f01726a067818b990b13bfddb7e78270010720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/187], &(0x7f0000000340)='syzkaller\x00'}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2], 0x1, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x3]}}]}}]}, 0x8c}}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) syz_open_dev$tty20(0xc, 0x4, 0x1) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = dup(r3) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x4) syz_io_uring_setup(0x10d, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r5, &(0x7f0000004180)={0x2020}, 0x2020) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r6 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_current(r6, &(0x7f0000000100)=@profile={'changeprofile ', ':\x00\x00\x02'}, 0x12) 12.14472453s ago: executing program 3 (id=433): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r4) r6 = socket(0x1e, 0x1, 0x0) write$binfmt_misc(r6, 0x0, 0x0) sendmsg$TIPC_NL_NET_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x20, r5, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) waitid(0x1, 0x0, 0x0, 0x1, 0x0) 10.875957513s ago: executing program 2 (id=437): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x800, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000004000"/28], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x0, 0x1, 0x0, 0x4, 0x0, 0x4}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = openat$vcsa(0xffffff9c, &(0x7f0000000340), 0x28900, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000380)={0x0, 0x2, 0x8}) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) socket$packet(0x11, 0x2, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 8.49479375s ago: executing program 4 (id=447): mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, 0x0) mount(0x0, 0x0, &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a7000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94) 7.410348098s ago: executing program 1 (id=448): move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000100)=0x4) openat$mice(0xffffffffffffff9c, 0x0, 0x101) openat$mice(0xffffffffffffff9c, 0x0, 0x40) fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r1, &(0x7f0000048040)=""/102392, 0x18ff8) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x80, 0x0) write$proc_mixer(r2, 0x0, 0x9f) 7.358040123s ago: executing program 4 (id=449): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r4) socket(0x1e, 0x1, 0x0) sendmsg$TIPC_NL_NET_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x20, r5, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) waitid(0x1, 0x0, 0x0, 0x1, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) 7.130568704s ago: executing program 1 (id=451): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f01726a067818b990b13bfddb7e78270010720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/187], &(0x7f0000000340)='syzkaller\x00'}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) syz_open_dev$tty20(0xc, 0x4, 0x1) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = dup(r3) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x4) syz_io_uring_setup(0x10d, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r5, &(0x7f0000004180)={0x2020}, 0x2020) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r6 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_current(r6, &(0x7f0000000100)=@profile={'changeprofile ', ':\x00\x00\x02'}, 0x12) 6.874913877s ago: executing program 3 (id=452): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c6300008b6f07d442bf2fcbac0b6c6d75ce4e2fe0a1e795feaa062d04bda4c7e23285ae93e08fb19b939517dc25d7ddbeda2ba522058b2734547271c3842f8034181f3314e01eb0425b3a98bfac7b0321da15089bdda06bb06ba6162f694d6b43ac", @ANYRES16=r0, @ANYBLOB="01002cbd7000000000008900000008000300", @ANYRES32, @ANYBLOB="20001d801c00008006000500e700000005000c000100000005000b00010000"], 0x3c}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000040)={@multicast2, @empty}, &(0x7f00000000c0)=0xc) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r1, &(0x7f0000048040)=""/102392, 0x18ff8) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x428}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000ac0)=@ccm_128={{0x304}, "5c000002010400", "ccaa54dbfef3216ec09b63757e98ed63", "cde21de0", "bcad0b2f6d5df9b2"}, 0x28) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 6.016854606s ago: executing program 5 (id=455): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket(0xa, 0x3, 0x3a) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, 0x0, 0x0, 0x40800) recvmsg$qrtr(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000700)=""/192, 0xc0}], 0x1, 0x0, 0x0, 0x10000}, 0x38, 0x2) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x40082) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 5.969420486s ago: executing program 5 (id=456): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x161102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SNDCTL_TMR_TIMEBASE(0xffffffffffffffff, 0xc0045401, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x100, 0x4, 0x1d}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000002240)=0x10000) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r4, 0x0, 0x0, 0x0, 0x322, 0x1, {0x1}}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 5.890669937s ago: executing program 2 (id=457): socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x4040001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x29) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, 0x0, 0x0) 5.794980598s ago: executing program 5 (id=458): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ftruncate(0xffffffffffffffff, 0xffff) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r2, &(0x7f0000000040)={0x1a, 0x104, 0x1, 0x0, 0x6, 0x4a, @random="4b68ab02e0c4"}, 0x10) 5.188978033s ago: executing program 3 (id=459): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) msgget$private(0x0, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) socket(0x10, 0x3, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r4, &(0x7f00000001c0)={0x2c, 0x8, r6}, 0x10) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, &(0x7f0000000200), &(0x7f0000000280)=0x30) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r7, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0x1, 0x70, 0x20000}, 0x20) bind$can_raw(r3, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0), 0xf00) 4.16008447s ago: executing program 3 (id=460): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14) 3.696789835s ago: executing program 4 (id=461): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f01726a067818b990b13bfddb7e78270010720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/187], &(0x7f0000000340)='syzkaller\x00'}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2], 0x1, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x3]}}]}}]}, 0x8c}}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) syz_open_dev$tty20(0xc, 0x4, 0x1) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = dup(r3) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x4) syz_io_uring_setup(0x10d, 0x0, &(0x7f0000000340), 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') read$FUSE(r5, &(0x7f0000004180)={0x2020}, 0x2020) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r6 = openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_current(r6, &(0x7f0000000100)=@profile={'changeprofile ', ':\x00\x00\x02'}, 0x12) 3.503728237s ago: executing program 1 (id=462): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x83, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000000)) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.249994131s ago: executing program 3 (id=463): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r4) r6 = socket(0x1e, 0x1, 0x0) write$binfmt_misc(r6, 0x0, 0x0) sendmsg$TIPC_NL_NET_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x20, r5, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) waitid(0x1, 0x0, 0x0, 0x1, 0x0) 2.683939418s ago: executing program 1 (id=464): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3e2}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000040), 0x4) 2.573443852s ago: executing program 5 (id=465): openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x304e, 0x0, 0x1, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r1, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) 2.404479603s ago: executing program 1 (id=466): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000001000850000002a0000008500000023000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x0, 0xe, 0x0, &(0x7f0000000400)="00000000000000000580a997553b", 0x0, 0x224e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.360635658s ago: executing program 5 (id=467): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket(0xa, 0x3, 0x3a) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, 0x0, 0x0, 0x40800) recvmsg$qrtr(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000700)=""/192, 0xc0}], 0x1, 0x0, 0x0, 0x10000}, 0x38, 0x2) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x40082) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 2.269500612s ago: executing program 5 (id=468): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x800, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000004000"/28], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x0, 0x1, 0x0, 0x4, 0x0, 0x4}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = openat$vcsa(0xffffff9c, &(0x7f0000000340), 0x28900, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000380)={0x0, 0x2, 0x8}) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) socket$packet(0x11, 0x2, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 1.756924409s ago: executing program 1 (id=469): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_icmp_raw(0x2, 0x3, 0x1) kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x41000000}], 0x0) 1.233365916s ago: executing program 2 (id=470): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) msgget$private(0x0, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) socket(0x10, 0x3, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r4, &(0x7f00000001c0)={0x2c, 0x8, r6}, 0x10) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, &(0x7f0000000200), &(0x7f0000000280)=0x30) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r7, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0x1, 0x70, 0x20000}, 0x20) bind$can_raw(r3, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0), 0xf00) 0s ago: executing program 2 (id=471): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r4) socket(0x1e, 0x1, 0x0) sendmsg$TIPC_NL_NET_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x20, r5, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) waitid(0x1, 0x0, 0x0, 0x1, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.67' (ED25519) to the list of known hosts. [ 81.199911][ T5811] cgroup: Unknown subsys name 'net' [ 81.306769][ T5811] cgroup: Unknown subsys name 'cpuset' [ 81.316841][ T5811] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.994653][ T5811] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.871796][ T5825] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.892709][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.901175][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.913181][ T5145] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.923015][ T5145] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.930337][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.938688][ T5145] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.946049][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.956219][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.972482][ T5145] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.008571][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.024292][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.032334][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.041784][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.050152][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.058520][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.067612][ T5145] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.081709][ T5145] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.094256][ T5145] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.102390][ T5145] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.111294][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.119998][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.128296][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.137925][ T5825] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.147841][ T5825] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.838639][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 87.890545][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 88.094934][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 88.177042][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 88.227985][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.235685][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.243765][ T5821] bridge_slave_0: entered allmulticast mode [ 88.251883][ T5821] bridge_slave_0: entered promiscuous mode [ 88.301887][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.309307][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.317658][ T5821] bridge_slave_1: entered allmulticast mode [ 88.325008][ T5821] bridge_slave_1: entered promiscuous mode [ 88.343851][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.351547][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.359496][ T5826] bridge_slave_0: entered allmulticast mode [ 88.366872][ T5826] bridge_slave_0: entered promiscuous mode [ 88.425611][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.434225][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.441501][ T5826] bridge_slave_1: entered allmulticast mode [ 88.449159][ T5826] bridge_slave_1: entered promiscuous mode [ 88.478618][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.528740][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.601673][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 88.622060][ T5821] team0: Port device team_slave_0 added [ 88.644464][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.654677][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.662011][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.669602][ T5832] bridge_slave_0: entered allmulticast mode [ 88.677175][ T5832] bridge_slave_0: entered promiscuous mode [ 88.697496][ T5821] team0: Port device team_slave_1 added [ 88.718913][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.745827][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.753110][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.760288][ T5832] bridge_slave_1: entered allmulticast mode [ 88.767835][ T5832] bridge_slave_1: entered promiscuous mode [ 88.799169][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.806704][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.814124][ T5831] bridge_slave_0: entered allmulticast mode [ 88.821548][ T5831] bridge_slave_0: entered promiscuous mode [ 88.873293][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.880688][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.888060][ T5831] bridge_slave_1: entered allmulticast mode [ 88.895400][ T5831] bridge_slave_1: entered promiscuous mode [ 88.920855][ T5826] team0: Port device team_slave_0 added [ 88.946671][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.953832][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.980594][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.003265][ T52] Bluetooth: hci1: command tx timeout [ 89.003270][ T5825] Bluetooth: hci0: command tx timeout [ 89.018025][ T5826] team0: Port device team_slave_1 added [ 89.026592][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.042052][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.049144][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.075268][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.089867][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.099703][ T5825] Bluetooth: hci2: command tx timeout [ 89.110378][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.134438][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.218337][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.226172][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.234327][ T5834] bridge_slave_0: entered allmulticast mode [ 89.241635][ T5834] bridge_slave_0: entered promiscuous mode [ 89.248081][ T5825] Bluetooth: hci3: command tx timeout [ 89.253622][ T52] Bluetooth: hci4: command tx timeout [ 89.267173][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.274273][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.300515][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.327050][ T5832] team0: Port device team_slave_0 added [ 89.333576][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.340929][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.348484][ T5834] bridge_slave_1: entered allmulticast mode [ 89.356185][ T5834] bridge_slave_1: entered promiscuous mode [ 89.365776][ T5831] team0: Port device team_slave_0 added [ 89.372827][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.379791][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.406236][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.420027][ T5832] team0: Port device team_slave_1 added [ 89.487282][ T5831] team0: Port device team_slave_1 added [ 89.501068][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.509082][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.535326][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.603390][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.610395][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.637591][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.665130][ T5821] hsr_slave_0: entered promiscuous mode [ 89.671956][ T5821] hsr_slave_1: entered promiscuous mode [ 89.682055][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.694036][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.701156][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.727359][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.775023][ T5826] hsr_slave_0: entered promiscuous mode [ 89.781967][ T5826] hsr_slave_1: entered promiscuous mode [ 89.788797][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 89.795112][ T5826] Cannot create hsr debugfs directory [ 89.804187][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.814530][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.821557][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.848158][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.944606][ T5832] hsr_slave_0: entered promiscuous mode [ 89.951093][ T5832] hsr_slave_1: entered promiscuous mode [ 89.957676][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 89.964907][ T5832] Cannot create hsr debugfs directory [ 90.020285][ T5834] team0: Port device team_slave_0 added [ 90.029618][ T5834] team0: Port device team_slave_1 added [ 90.138333][ T5831] hsr_slave_0: entered promiscuous mode [ 90.144855][ T5831] hsr_slave_1: entered promiscuous mode [ 90.151019][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 90.157131][ T5831] Cannot create hsr debugfs directory [ 90.204788][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.212051][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.238570][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.278087][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.285331][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.332568][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.536220][ T5834] hsr_slave_0: entered promiscuous mode [ 90.543143][ T5834] hsr_slave_1: entered promiscuous mode [ 90.549842][ T5834] debugfs: 'hsr0' already exists in 'hsr' [ 90.555950][ T5834] Cannot create hsr debugfs directory [ 90.898098][ T5821] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.919502][ T5821] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.939091][ T5821] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.954221][ T5821] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.035949][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.046754][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.061018][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.075496][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.082822][ T5825] Bluetooth: hci0: command tx timeout [ 91.084738][ T52] Bluetooth: hci1: command tx timeout [ 91.163223][ T52] Bluetooth: hci2: command tx timeout [ 91.186683][ T5832] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.206205][ T5832] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.218950][ T5832] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.230511][ T5832] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.324135][ T52] Bluetooth: hci3: command tx timeout [ 91.330189][ T5825] Bluetooth: hci4: command tx timeout [ 91.356078][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.387015][ T5831] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.407686][ T5831] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.420438][ T5831] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.435358][ T5831] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.567360][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.579031][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.598149][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.608408][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.629842][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.671392][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.681031][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.688472][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.740301][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.747638][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.779939][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.829339][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.838929][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.846223][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.875976][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.883418][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.938654][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.959871][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.967180][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.017374][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.028474][ T2912] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.035869][ T2912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.115543][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.135788][ T1214] cfg80211: failed to load regulatory.db [ 92.187793][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.195138][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.255230][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.262635][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.331968][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.412202][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.476465][ T5831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.508114][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.515410][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.627877][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.635361][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.691835][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.713654][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.936239][ T5821] veth0_vlan: entered promiscuous mode [ 92.980519][ T5821] veth1_vlan: entered promiscuous mode [ 93.027268][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.051400][ T5826] veth0_vlan: entered promiscuous mode [ 93.074917][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.120542][ T5826] veth1_vlan: entered promiscuous mode [ 93.165061][ T5825] Bluetooth: hci1: command tx timeout [ 93.170806][ T5825] Bluetooth: hci0: command tx timeout [ 93.248179][ T5825] Bluetooth: hci2: command tx timeout [ 93.259316][ T5821] veth0_macvtap: entered promiscuous mode [ 93.297162][ T5821] veth1_macvtap: entered promiscuous mode [ 93.325832][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.403962][ T5825] Bluetooth: hci4: command tx timeout [ 93.409538][ T5825] Bluetooth: hci3: command tx timeout [ 93.410797][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.456223][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.465538][ T5826] veth0_macvtap: entered promiscuous mode [ 93.488026][ T5832] veth0_vlan: entered promiscuous mode [ 93.507726][ T5826] veth1_macvtap: entered promiscuous mode [ 93.519594][ T144] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.536414][ T5832] veth1_vlan: entered promiscuous mode [ 93.557215][ T144] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.566943][ T144] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.590119][ T144] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.625499][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.658876][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.724900][ T144] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.735579][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.777646][ T1337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.787203][ T1337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.788467][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.805800][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.846280][ T5834] veth0_vlan: entered promiscuous mode [ 93.864318][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.886625][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.899511][ T5834] veth1_vlan: entered promiscuous mode [ 93.928458][ T5831] veth0_vlan: entered promiscuous mode [ 93.965924][ T5832] veth0_macvtap: entered promiscuous mode [ 93.980230][ T5832] veth1_macvtap: entered promiscuous mode [ 93.991872][ T5821] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.020064][ T5831] veth1_vlan: entered promiscuous mode [ 94.118863][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.157574][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.168091][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.172048][ T5834] veth0_macvtap: entered promiscuous mode [ 94.187439][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.209671][ T5834] veth1_macvtap: entered promiscuous mode [ 94.234903][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.246236][ T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.312439][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.335255][ T5831] veth0_macvtap: entered promiscuous mode [ 94.346459][ T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.391329][ T5831] veth1_macvtap: entered promiscuous mode [ 94.440573][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.453994][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.470015][ T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.486810][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.543952][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.554883][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.586103][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.594330][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.624591][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.662040][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.770596][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.794722][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.829377][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.977095][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.057914][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.089846][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.225047][ T2912] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.254477][ T52] Bluetooth: hci1: command tx timeout [ 95.260065][ T5825] Bluetooth: hci0: command tx timeout [ 95.272936][ T2912] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.316808][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.333868][ T5825] Bluetooth: hci2: command tx timeout [ 95.344150][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.433038][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.453080][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.462795][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 95.482786][ T52] Bluetooth: hci4: command tx timeout [ 95.488533][ T5825] Bluetooth: hci3: command tx timeout [ 95.614234][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.622209][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.633036][ T2912] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.640893][ T2912] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.548269][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.623832][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.770659][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.813099][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.132975][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.141667][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.150356][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.159426][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.169405][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 98.674680][ T5971] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10'. [ 99.923844][ T5980] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 101.712993][ T5912] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 102.279073][ T5912] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 102.357411][ T5912] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 102.392552][ T5912] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 102.449679][ T5995] Zero length message leads to an empty skb [ 102.606576][ T5912] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 103.342846][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.462954][ T5912] usb 3-1: Product: syz [ 103.467199][ T5912] usb 3-1: Manufacturer: syz [ 103.471832][ T5912] usb 3-1: SerialNumber: syz [ 103.540765][ T5912] usb 3-1: can't set config #1, error -71 [ 103.578685][ T5912] usb 3-1: USB disconnect, device number 2 [ 103.754432][ T794] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 103.935395][ T794] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 103.960650][ T794] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 103.991058][ T794] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 104.026973][ T794] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 104.027039][ T794] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 104.027062][ T794] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.032702][ T5912] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 104.053051][ T794] usb 5-1: config 0 descriptor?? [ 104.197902][ T5912] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 104.197925][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.197937][ T5912] usb 3-1: Product: syz [ 104.197946][ T5912] usb 3-1: Manufacturer: syz [ 104.197954][ T5912] usb 3-1: SerialNumber: syz [ 104.229508][ T5912] usb 3-1: config 0 descriptor?? [ 104.495675][ T794] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 104.522423][ T794] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 104.540139][ T794] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 104.622038][ T6019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18'. [ 104.671032][ T794] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 104.721891][ T794] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 104.770555][ T794] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 104.838232][ T794] usb 5-1: USB disconnect, device number 2 [ 105.031426][ T6022] fido_id[6022]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 105.104264][ T6024] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 105.117058][ T6024] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 106.874566][ T5912] usb 3-1: USB disconnect, device number 3 [ 108.943030][ T5912] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 109.162838][ T5912] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 109.220363][ T5912] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 109.241765][ T5912] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 109.274594][ T5912] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 109.304050][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.320691][ T5912] usb 5-1: Product: syz [ 109.325285][ T5912] usb 5-1: Manufacturer: syz [ 109.337219][ T5912] usb 5-1: SerialNumber: syz [ 113.283975][ T6084] process 'syz.3.39' launched '/dev/fd/4' with NULL argv: empty string added [ 114.711289][ T6090] nvme_fabrics: missing parameter 'transport=%s' [ 114.815995][ T5873] udevd[5873]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 114.821925][ T5835] usb 5-1: USB disconnect, device number 3 [ 114.850068][ T6090] nvme_fabrics: missing parameter 'nqn=%s' [ 115.453296][ T5835] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 115.671856][ T5835] usb 5-1: Using ep0 maxpacket: 32 [ 115.676710][ T5835] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.676756][ T5835] usb 5-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 115.676770][ T5835] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.682358][ T5835] usb 5-1: config 0 descriptor?? [ 115.691741][ T5835] dvb-usb: found a 'TeVii S662' in warm state. [ 115.691792][ T5835] dw2102: su3000_power_ctrl: 1, initialized 0 [ 115.692022][ T5835] dvb-usb: bulk message failed: -22 (2/0) [ 115.772277][ T5835] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 115.773510][ T5835] dvbdev: DVB: registering new adapter (TeVii S662) [ 115.773562][ T5835] usb 5-1: media controller created [ 115.773847][ T5835] dvb-usb: bulk message failed: -22 (6/0) [ 115.773866][ T5835] dw2102: i2c transfer failed. [ 115.773912][ T5835] dvb-usb: bulk message failed: -22 (6/0) [ 115.773920][ T5835] dw2102: i2c transfer failed. [ 115.773930][ T5835] dvb-usb: bulk message failed: -22 (6/0) [ 115.773938][ T5835] dw2102: i2c transfer failed. [ 115.773947][ T5835] dvb-usb: bulk message failed: -22 (6/0) [ 115.773955][ T5835] dw2102: i2c transfer failed. [ 115.773963][ T5835] dvb-usb: bulk message failed: -22 (6/0) [ 115.773971][ T5835] dw2102: i2c transfer failed. [ 115.773979][ T5835] dvb-usb: bulk message failed: -22 (6/0) [ 115.773987][ T5835] dw2102: i2c transfer failed. [ 115.773993][ T5835] dvb-usb: MAC address: 02:02:02:02:02:02 [ 115.889438][ T5835] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 115.892012][ T6097] dvb-usb: bulk message failed: -22 (5/0) [ 115.892043][ T6097] dw2102: i2c transfer failed. [ 115.999332][ T5835] dvb-usb: bulk message failed: -22 (3/0) [ 115.999352][ T5835] dw2102: command 0x0e transfer failed. [ 115.999381][ T5835] dvb-usb: bulk message failed: -22 (3/0) [ 115.999390][ T5835] dw2102: command 0x0e transfer failed. [ 116.308069][ T5835] dvb-usb: bulk message failed: -22 (3/0) [ 116.308091][ T5835] dw2102: command 0x0e transfer failed. [ 116.308098][ T5835] dvb-usb: bulk message failed: -22 (3/0) [ 116.308106][ T5835] dw2102: command 0x0e transfer failed. [ 116.308112][ T5835] dvb-usb: bulk message failed: -22 (1/0) [ 116.308119][ T5835] dw2102: command 0x51 transfer failed. [ 116.308125][ T5835] dvb-usb: bulk message failed: -22 (5/0) [ 116.308133][ T5835] dw2102: i2c probe for address 0x68 failed. [ 116.308140][ T5835] dvb-usb: bulk message failed: -22 (5/0) [ 116.308148][ T5835] dw2102: i2c probe for address 0x69 failed. [ 116.308155][ T5835] dvb-usb: bulk message failed: -22 (5/0) [ 116.308163][ T5835] dw2102: i2c probe for address 0x6a failed. [ 116.308169][ T5835] dw2102: probing for demodulator failed. Is the external power switched on? [ 116.308176][ T5835] dvb-usb: no frontend was attached by 'TeVii S662' [ 116.502805][ T5835] rc_core: IR keymap rc-tt-1500 not found [ 116.502828][ T5835] Registered IR keymap rc-empty [ 116.504668][ T5835] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 116.507442][ T5835] input: TeVii S662 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input5 [ 116.632629][ T5835] dvb-usb: schedule remote query interval to 250 msecs. [ 116.632656][ T5835] dw2102: su3000_power_ctrl: 0, initialized 1 [ 116.632671][ T5835] dvb-usb: TeVii S662 successfully initialized and connected. [ 116.671715][ T5835] usb 5-1: USB disconnect, device number 4 [ 116.996105][ T6117] bridge_slave_0: left allmulticast mode [ 116.996135][ T6117] bridge_slave_0: left promiscuous mode [ 116.996494][ T6117] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.072027][ T6117] bridge_slave_1: left allmulticast mode [ 117.072048][ T6117] bridge_slave_1: left promiscuous mode [ 117.072212][ T6117] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.098686][ T5835] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 117.194060][ T6117] bond0: (slave bond_slave_0): Releasing backup interface [ 117.204059][ T6117] bond0: (slave bond_slave_1): Releasing backup interface [ 117.211045][ T6117] team0: Port device team_slave_0 removed [ 117.224692][ T6117] team0: Port device team_slave_1 removed [ 117.228363][ T6117] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.228385][ T6117] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.232130][ T6117] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.232155][ T6117] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.239314][ T6117] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 117.280814][ T6119] team0: Mode changed to "loadbalance" [ 123.307950][ T6158] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 125.038277][ T6168] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.131877][ T6171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.60'. [ 125.133069][ T6171] netlink: 16 bytes leftover after parsing attributes in process `syz.4.60'. [ 125.670042][ T6168] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.002470][ T6168] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.842359][ T6168] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.178180][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.181392][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.181466][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.181522][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.531627][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 131.533481][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 131.534481][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 131.536083][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 131.537103][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 133.156128][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.156256][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.905776][ T52] Bluetooth: hci5: command tx timeout [ 135.500290][ T6202] chnl_net:caif_netlink_parms(): no params data found [ 135.964499][ T52] Bluetooth: hci5: command tx timeout [ 136.645389][ T6202] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.732020][ T6202] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.756839][ T6202] bridge_slave_0: entered allmulticast mode [ 136.765983][ T6202] bridge_slave_0: entered promiscuous mode [ 136.780337][ T6202] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.787935][ T6202] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.795616][ T6202] bridge_slave_1: entered allmulticast mode [ 136.804791][ T6202] bridge_slave_1: entered promiscuous mode [ 138.011319][ T6202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.052736][ T52] Bluetooth: hci5: command tx timeout [ 138.349802][ T6202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.940974][ T6249] nvme_fabrics: missing parameter 'transport=%s' [ 139.098798][ T6249] nvme_fabrics: missing parameter 'nqn=%s' [ 140.191591][ T52] Bluetooth: hci5: command tx timeout [ 141.254391][ T6202] team0: Port device team_slave_0 added [ 141.433383][ T6202] team0: Port device team_slave_1 added [ 141.767481][ T76] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.026402][ T6270] ALSA: mixer_oss: invalid OSS volume '' [ 142.400189][ T76] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.467349][ T6202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.481823][ T6202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.608485][ T6202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.952795][ T43] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 144.130331][ T43] usb 5-1: config 7 has an invalid interface number: 252 but max is 0 [ 144.200536][ T43] usb 5-1: config 7 has no interface number 0 [ 144.207659][ T43] usb 5-1: config 7 interface 252 has no altsetting 0 [ 144.223184][ T43] usb 5-1: string descriptor 0 read error: -22 [ 144.235303][ T43] usb 5-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 144.244964][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.408226][ T6280] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.415986][ T6280] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.160276][ T6280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.274105][ T5905] usb 5-1: USB disconnect, device number 5 [ 146.359397][ T6280] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.256577][ T6300] nvme_fabrics: missing parameter 'transport=%s' [ 147.300022][ T76] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.321563][ T6300] nvme_fabrics: missing parameter 'nqn=%s' [ 148.060600][ T6202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.068105][ T6202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 148.094866][ T6202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.806084][ T2912] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.832831][ T2912] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.859790][ T6320] ucma_write: process 69 (syz.2.99) changed security contexts after opening file descriptor, this is not allowed. [ 148.964099][ T76] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.317660][ T2912] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.331393][ T2912] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.554507][ T6330] netlink: 16 bytes leftover after parsing attributes in process `syz.1.103'. [ 150.563894][ T6322] ALSA: mixer_oss: invalid OSS volume '' [ 151.923337][ T6345] nvme_fabrics: missing parameter 'transport=%s' [ 152.000890][ T6345] nvme_fabrics: missing parameter 'nqn=%s' [ 152.661278][ T6202] hsr_slave_0: entered promiscuous mode [ 152.673653][ T6202] hsr_slave_1: entered promiscuous mode [ 152.683090][ T6202] debugfs: 'hsr0' already exists in 'hsr' [ 152.690191][ T6202] Cannot create hsr debugfs directory [ 153.813638][ T76] bridge_slave_1: left allmulticast mode [ 153.870364][ T76] bridge_slave_1: left promiscuous mode [ 153.911247][ T76] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.042035][ T76] bridge_slave_0: left allmulticast mode [ 154.072751][ T76] bridge_slave_0: left promiscuous mode [ 154.093325][ T76] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.387334][ T6375] random: crng reseeded on system resumption [ 156.471113][ T6392] nvme_fabrics: missing parameter 'transport=%s' [ 156.623808][ T6392] nvme_fabrics: missing parameter 'nqn=%s' [ 160.100188][ T76] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.125035][ T76] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.144928][ T76] bond0 (unregistering): Released all slaves [ 160.792794][ T5961] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 162.024967][ T5961] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 162.043420][ T5961] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.072242][ T5961] usb 4-1: Product: syz [ 162.083374][ T5961] usb 4-1: Manufacturer: syz [ 162.088040][ T5961] usb 4-1: SerialNumber: syz [ 162.138066][ T5961] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 162.221215][ T5835] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 162.233431][ T6202] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 162.278196][ T6461] netlink: 'syz.2.138': attribute type 6 has an invalid length. [ 162.328089][ T6461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.138'. [ 162.478109][ T5961] usb 4-1: USB disconnect, device number 2 [ 162.561824][ T6202] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 162.639061][ T6202] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 162.679074][ T6202] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 163.941433][ T5835] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 163.952884][ T5835] ath9k_htc: Failed to initialize the device [ 164.042957][ T5961] usb 4-1: ath9k_htc: USB layer deinitialized [ 164.501116][ T76] hsr_slave_0: left promiscuous mode [ 164.531840][ T76] hsr_slave_1: left promiscuous mode [ 164.548678][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.563222][ T76] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.575600][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.584598][ T76] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.609146][ T76] veth1_macvtap: left promiscuous mode [ 164.796553][ T76] veth0_macvtap: left promiscuous mode [ 164.802557][ T76] veth1_vlan: left promiscuous mode [ 164.808914][ T76] veth0_vlan: left promiscuous mode [ 168.854406][ T5961] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 169.223522][ T5961] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 169.242547][ T5961] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.258619][ T5961] usb 3-1: Product: syz [ 169.263435][ T5961] usb 3-1: Manufacturer: syz [ 169.285879][ T5961] usb 3-1: SerialNumber: syz [ 169.303823][ T5961] usb 3-1: config 0 descriptor?? [ 169.304583][ T76] team0 (unregistering): Port device team_slave_1 removed [ 169.393430][ T76] team0 (unregistering): Port device team_slave_0 removed [ 170.371569][ T5961] airspy 3-1:0.0: usb_control_msg() failed -110 request 09 [ 170.407601][ T5961] airspy 3-1:0.0: Could not detect board [ 170.430214][ T5961] airspy 3-1:0.0: probe with driver airspy failed with error -110 [ 170.608927][ T6202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.816439][ T5961] usb 3-1: USB disconnect, device number 4 [ 170.825985][ T6202] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.894092][ T6202] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 170.920732][ T6202] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 171.024923][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.032111][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.254940][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.262254][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.609446][ T6202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.086882][ T6588] ALSA: mixer_oss: invalid OSS volume '' [ 176.735022][ T6202] veth0_vlan: entered promiscuous mode [ 176.795480][ T6202] veth1_vlan: entered promiscuous mode [ 176.819724][ T6622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.176'. [ 176.964370][ T6202] veth0_macvtap: entered promiscuous mode [ 177.018929][ T6202] veth1_macvtap: entered promiscuous mode [ 177.715567][ T6202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.800342][ T6202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.830064][ T76] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.895967][ T76] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.950335][ T76] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.970831][ T76] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.822007][ T6638] ALSA: mixer_oss: invalid OSS volume '' [ 178.871315][ T6649] 9p: Bad value for 'cache' [ 179.005431][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.048183][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.154240][ T2912] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.192149][ T2912] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.342999][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 179.512872][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 179.531995][ T9] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 179.554431][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 179.577237][ T9] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 179.602920][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.661063][ T9] usb 3-1: config 0 descriptor?? [ 180.829371][ T6655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.184'. [ 181.112124][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 181.127616][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 181.184140][ T9] usb 3-1: USB disconnect, device number 5 [ 181.336986][ T6684] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.344767][ T6684] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.613615][ T6684] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.658189][ T6684] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.211337][ T50] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.234416][ T50] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.415870][ T50] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.441494][ T50] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.610920][ T6728] netlink: 12 bytes leftover after parsing attributes in process `syz.5.204'. [ 185.673401][ T30] audit: type=1326 audit(1763056835.385:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6735 comm="syz.3.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f544d98f6c9 code=0x7ffc0000 [ 185.721413][ T6738] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 185.775238][ T6738] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 185.793254][ T30] audit: type=1326 audit(1763056835.465:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6735 comm="syz.3.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f544d98f6c9 code=0x7ffc0000 [ 185.793308][ T30] audit: type=1326 audit(1763056835.465:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6735 comm="syz.3.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f544d98f6c9 code=0x7ffc0000 [ 185.793350][ T30] audit: type=1326 audit(1763056835.465:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6735 comm="syz.3.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f544d98f6c9 code=0x7ffc0000 [ 185.941447][ T30] audit: type=1326 audit(1763056835.465:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6735 comm="syz.3.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f544d98f6c9 code=0x7ffc0000 [ 186.624063][ T30] audit: type=1326 audit(1763056835.465:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6735 comm="syz.3.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f544d98f6c9 code=0x7ffc0000 [ 186.962635][ T30] audit: type=1326 audit(1763056835.565:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6735 comm="syz.3.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f544d98f6c9 code=0x7ffc0000 [ 187.069908][ T30] audit: type=1326 audit(1763056835.565:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6735 comm="syz.3.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f544d98f6c9 code=0x7ffc0000 [ 187.182677][ T30] audit: type=1326 audit(1763056835.705:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6735 comm="syz.3.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f544d98f6c9 code=0x7ffc0000 [ 187.289988][ T30] audit: type=1326 audit(1763056835.705:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6735 comm="syz.3.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f544d98f6c9 code=0x7ffc0000 [ 194.549679][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.556678][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.561803][ T6918] overlayfs: failed to clone upperpath [ 198.388665][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 198.388686][ T30] audit: type=1326 audit(1763056848.095:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6923 comm="syz.2.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046798f6c9 code=0x7ffc0000 [ 198.445801][ T6917] 8021q: adding VLAN 0 to HW filter on device bond2 [ 198.517175][ T30] audit: type=1326 audit(1763056848.105:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6923 comm="syz.2.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046798f6c9 code=0x7ffc0000 [ 198.548323][ T30] audit: type=1326 audit(1763056848.155:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6923 comm="syz.2.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f046798f6c9 code=0x7ffc0000 [ 198.674851][ T30] audit: type=1326 audit(1763056848.155:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6923 comm="syz.2.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046798f6c9 code=0x7ffc0000 [ 198.709758][ T30] audit: type=1326 audit(1763056848.155:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6923 comm="syz.2.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046798f6c9 code=0x7ffc0000 [ 198.905886][ T6934] capability: warning: `syz.3.263' uses deprecated v2 capabilities in a way that may be insecure [ 199.020337][ T6934] overlayfs: missing 'lowerdir' [ 199.103852][ T30] audit: type=1326 audit(1763056848.155:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6923 comm="syz.2.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f046798f6c9 code=0x7ffc0000 [ 199.423596][ T30] audit: type=1326 audit(1763056848.155:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6923 comm="syz.2.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046798f6c9 code=0x7ffc0000 [ 199.468454][ T30] audit: type=1326 audit(1763056848.155:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6923 comm="syz.2.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046798f6c9 code=0x7ffc0000 [ 199.601495][ T30] audit: type=1326 audit(1763056848.155:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6923 comm="syz.2.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f046798f6c9 code=0x7ffc0000 [ 199.680703][ T30] audit: type=1326 audit(1763056848.155:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6923 comm="syz.2.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046798f6c9 code=0x7ffc0000 [ 202.172560][ T6978] tipc: Started in network mode [ 202.177540][ T6978] tipc: Node identity 4, cluster identity 4711 [ 202.183993][ T6978] tipc: Node number set to 4 [ 202.723726][ T6993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.277'. [ 202.732707][ T6993] netlink: 16 bytes leftover after parsing attributes in process `syz.4.277'. [ 205.232920][ T7048] netlink: 48 bytes leftover after parsing attributes in process `syz.3.292'. [ 206.218937][ T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 207.572598][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 207.615697][ T24] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 207.983308][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.991636][ T24] usb 4-1: Product: syz [ 208.006064][ T24] usb 4-1: Manufacturer: syz [ 208.011056][ T24] usb 4-1: SerialNumber: syz [ 208.052680][ T24] usb 4-1: config 0 descriptor?? [ 208.103364][ T24] gspca_main: se401-2.14.0 probing 047d:5003 [ 208.117369][ T52] Bluetooth: hci2: ISO packet for unknown connection handle 1550 [ 208.282675][ T7059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.347329][ T7059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.180494][ T7095] bond2: option mode: unable to set because the bond device is up [ 209.233415][ T7095] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 209.255496][ T7095] bond2: (slave macvlan2): Enslaving as a backup interface with an up link [ 209.323429][ T36] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 209.360097][ T36] bond2: (slave macvlan2): link status up again after 0 ms [ 209.401920][ T24] gspca_se401: read req failed req 0x06 error -19 [ 209.875971][ T36] bond2: (slave macvlan2): failed to get link speed/duplex [ 210.030702][ T24] usb 4-1: USB disconnect, device number 3 [ 210.057866][ T36] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 210.315796][ T5973] bond2: (slave macvlan2): failed to get link speed/duplex [ 210.472729][ T50] bond2: (slave macvlan2): failed to get link speed/duplex [ 210.596068][ T6304] bond2: (slave macvlan2): failed to get link speed/duplex [ 210.732642][ T6304] bond2: (slave macvlan2): failed to get link speed/duplex [ 210.862693][ T6304] bond2: (slave macvlan2): failed to get link speed/duplex [ 210.993630][ T12] bond2: (slave macvlan2): failed to get link speed/duplex [ 211.971435][ T5827] Bluetooth: hci4: command 0x0406 tx timeout [ 211.978443][ T5827] Bluetooth: hci0: command 0x0406 tx timeout [ 211.987142][ T5827] Bluetooth: hci2: command 0x0406 tx timeout [ 211.994980][ T5827] Bluetooth: hci3: command 0x0406 tx timeout [ 214.466060][ T5973] net_ratelimit: 12 callbacks suppressed [ 214.466079][ T5973] bond2: (slave macvlan2): failed to get link speed/duplex [ 214.632602][ T6304] bond2: (slave macvlan2): failed to get link speed/duplex [ 214.652973][ T7176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.337'. [ 214.662696][ T7176] netlink: 16 bytes leftover after parsing attributes in process `syz.3.337'. [ 214.793542][ T6304] bond2: (slave macvlan2): failed to get link speed/duplex [ 214.924949][ T12] bond2: (slave macvlan2): failed to get link speed/duplex [ 215.112787][ T5973] bond2: (slave macvlan2): failed to get link speed/duplex [ 215.344011][ T6304] bond2: (slave macvlan2): failed to get link speed/duplex [ 215.483149][ T6304] bond2: (slave macvlan2): failed to get link speed/duplex [ 215.722951][ T50] bond2: (slave macvlan2): failed to get link speed/duplex [ 215.738881][ T7192] 9p: Bad value for 'cache' [ 216.042725][ T5973] bond2: (slave macvlan2): failed to get link speed/duplex [ 216.182621][ T36] bond2: (slave macvlan2): failed to get link speed/duplex [ 217.958649][ T7219] 9p: Bad value for 'cache' [ 219.487420][ T36] net_ratelimit: 13 callbacks suppressed [ 219.487444][ T36] bond2: (slave macvlan2): failed to get link speed/duplex [ 219.526406][ T7243] netlink: 4 bytes leftover after parsing attributes in process `syz.5.362'. [ 219.678183][ T36] bond2: (slave macvlan2): failed to get link speed/duplex [ 220.275793][ T6304] bond2: (slave macvlan2): failed to get link speed/duplex [ 220.636514][ T6304] bond2: (slave macvlan2): failed to get link speed/duplex [ 220.668371][ T7254] 9p: Bad value for 'cache' [ 220.870335][ T6304] bond2: (slave macvlan2): failed to get link speed/duplex [ 220.954163][ T7260] tipc: Started in network mode [ 220.981935][ T7260] tipc: Node identity 4, cluster identity 4711 [ 220.998779][ T7260] tipc: Node number set to 4 [ 221.041595][ T5973] bond2: (slave macvlan2): failed to get link speed/duplex [ 221.182608][ T5973] bond2: (slave macvlan2): failed to get link speed/duplex [ 221.392733][ T12] bond2: (slave macvlan2): failed to get link speed/duplex [ 222.194101][ T12] bond2: (slave macvlan2): failed to get link speed/duplex [ 222.302842][ T12] bond2: (slave macvlan2): failed to get link speed/duplex [ 223.634142][ T7288] 8021q: adding VLAN 0 to HW filter on device bond1 [ 223.844255][ T7299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.378'. [ 227.356598][ T7299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.367286][ T7299] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.387178][ T7299] net_ratelimit: 7 callbacks suppressed [ 227.387190][ T7299] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 227.442951][ T50] bond2: (slave macvlan2): failed to get link speed/duplex [ 227.587794][ T7341] 8021q: adding VLAN 0 to HW filter on device bond1 [ 227.725428][ T5989] bond2: (slave macvlan2): failed to get link speed/duplex [ 227.872591][ T5989] bond2: (slave macvlan2): failed to get link speed/duplex [ 228.032133][ T5989] bond2: (slave macvlan2): failed to get link speed/duplex [ 228.094475][ T7358] netlink: 40 bytes leftover after parsing attributes in process `syz.4.401'. [ 228.192807][ T50] bond2: (slave macvlan2): failed to get link speed/duplex [ 228.263688][ T7356] netlink: 'syz.1.398': attribute type 10 has an invalid length. [ 228.297661][ T7356] batman_adv: batadv0: Adding interface: team0 [ 228.316217][ T7356] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.353681][ T7356] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 228.387619][ T5989] bond2: (slave macvlan2): failed to get link speed/duplex [ 228.434699][ T7373] netlink: 4 bytes leftover after parsing attributes in process `syz.5.406'. [ 228.523598][ T12] bond2: (slave macvlan2): failed to get link speed/duplex [ 228.697213][ T5989] bond2: (slave macvlan2): failed to get link speed/duplex [ 228.833773][ T7379] tipc: Started in network mode [ 228.838663][ T7379] tipc: Node identity 4, cluster identity 4711 [ 228.882920][ T7379] tipc: Node number set to 4 [ 228.912777][ T36] bond2: (slave macvlan2): failed to get link speed/duplex [ 230.245267][ T7392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.409'. [ 232.461267][ T12] net_ratelimit: 10 callbacks suppressed [ 232.461290][ T12] bond2: (slave macvlan2): failed to get link speed/duplex [ 233.372768][ T2912] bond2: (slave macvlan2): failed to get link speed/duplex [ 233.503226][ T5973] bond2: (slave macvlan2): failed to get link speed/duplex [ 233.613429][ T12] bond2: (slave macvlan2): failed to get link speed/duplex [ 233.742717][ T12] bond2: (slave macvlan2): failed to get link speed/duplex [ 233.884225][ T12] bond2: (slave macvlan2): failed to get link speed/duplex [ 233.995863][ T36] bond2: (slave macvlan2): failed to get link speed/duplex [ 234.169424][ T12] bond2: (slave macvlan2): failed to get link speed/duplex [ 234.961980][ T50] bond2: (slave macvlan2): failed to get link speed/duplex [ 235.135014][ T36] bond2: (slave macvlan2): failed to get link speed/duplex [ 236.816845][ T7477] tipc: Started in network mode [ 236.856193][ T7477] tipc: Node identity 4, cluster identity 4711 [ 237.091518][ T7477] tipc: Node number set to 4 [ 237.542640][ T5989] net_ratelimit: 16 callbacks suppressed [ 237.542657][ T5989] bond2: (slave macvlan2): failed to get link speed/duplex [ 237.738512][ T5989] bond2: (slave macvlan2): failed to get link speed/duplex [ 237.932173][ T5989] bond2: (slave macvlan2): failed to get link speed/duplex [ 237.998725][ T7489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.437'. [ 238.245635][ T7489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.299655][ T7489] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.332252][ T7489] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 238.402686][ T36] bond2: (slave macvlan2): failed to get link speed/duplex [ 238.543422][ T36] bond2: (slave macvlan2): failed to get link speed/duplex [ 238.652591][ T36] bond2: (slave macvlan2): failed to get link speed/duplex [ 238.812618][ T6304] bond2: (slave macvlan2): failed to get link speed/duplex [ 239.052144][ T6304] bond2: (slave macvlan2): failed to get link speed/duplex [ 239.777630][ T36] bond2: (slave macvlan2): failed to get link speed/duplex [ 242.650920][ T76] net_ratelimit: 19 callbacks suppressed [ 242.650943][ T76] bond2: (slave macvlan2): failed to get link speed/duplex [ 242.991830][ T7517] bond2: (slave macvlan2): failed to get link speed/duplex [ 243.133894][ T7517] bond2: (slave macvlan2): failed to get link speed/duplex [ 243.245113][ T2912] bond2: (slave macvlan2): failed to get link speed/duplex [ 243.395235][ T2912] bond2: (slave macvlan2): failed to get link speed/duplex [ 244.424408][ T7517] bond2: (slave macvlan2): failed to get link speed/duplex [ 244.562613][ T7517] bond2: (slave macvlan2): failed to get link speed/duplex [ 244.701775][ T12] bond2: (slave macvlan2): failed to get link speed/duplex [ 244.832612][ T7517] bond2: (slave macvlan2): failed to get link speed/duplex [ 244.975483][ T7517] bond2: (slave macvlan2): failed to get link speed/duplex [ 246.633084][ T7587] netlink: 8 bytes leftover after parsing attributes in process `syz.5.468'. [ 248.416228][ T6304] net_ratelimit: 21 callbacks suppressed [ 248.416245][ T6304] bond2: (slave macvlan2): failed to get link speed/duplex [ 248.582833][ T7517] bond2: (slave macvlan2): failed to get link speed/duplex [ 255.969722][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.976289][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.042640][ T5830] Bluetooth: hci5: command 0x0406 tx timeout [ 353.612432][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 353.619725][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7572/1:b..l [ 353.627917][ C0] rcu: (detected by 0, t=10502 jiffies, g=22137, q=245 ncpus=2) [ 353.635626][ C0] task:syz.3.463 state:R running task stack:25704 pid:7572 tgid:7570 ppid:5821 task_flags:0x40044c flags:0x00080001 [ 353.650090][ C0] Call Trace: [ 353.653377][ C0] [ 353.656490][ C0] __schedule+0x1836/0x4ed0 [ 353.661095][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 353.666291][ C0] ? __pfx___schedule+0x10/0x10 [ 353.671170][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 353.676365][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 353.681649][ C0] preempt_schedule_irq+0xb5/0x150 [ 353.686862][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 353.692677][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 353.698829][ C0] ? arch_stack_walk+0xfc/0x150 [ 353.703820][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 353.709646][ C0] irqentry_exit+0x5b5/0x640 [ 353.714591][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 353.720657][ C0] RIP: 0010:lock_release+0x2ac/0x3d0 [ 353.725946][ C0] Code: 51 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 75 56 f7 c3 00 02 00 00 74 01 fb 65 48 8b 05 34 76 d7 10 <48> 3b 44 24 28 0f 85 8b 00 00 00 48 83 c4 30 5b 41 5c 41 5d 41 5e [ 353.746065][ C0] RSP: 0018:ffffc900042eecf0 EFLAGS: 00000206 [ 353.752214][ C0] RAX: 04025ea6458b8d00 RBX: 0000000000000206 RCX: 04025ea6458b8d00 [ 353.760294][ C0] RDX: 0000000000000000 RSI: ffffffff8d97220c RDI: ffffffff8bbf70e0 [ 353.768507][ C0] RBP: ffff88807eb3a9b0 R08: ffffc900042ef960 R09: 0000000000000000 [ 353.776583][ C0] R10: ffffc900042eee78 R11: fffff5200085ddd1 R12: 0000000000000000 [ 353.784654][ C0] R13: 0000000000000000 R14: ffffffff8df3d560 R15: ffff88807eb39e80 [ 353.793452][ C0] ? unwind_next_frame+0xa5/0x2390 [ 353.798677][ C0] ? unwind_next_frame+0xa5/0x2390 [ 353.804070][ C0] unwind_next_frame+0x19a9/0x2390 [ 353.809357][ C0] ? unwind_next_frame+0xa5/0x2390 [ 353.814567][ C0] ? dput+0x19f/0x2b0 [ 353.818662][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 353.825006][ C0] arch_stack_walk+0x11c/0x150 [ 353.829802][ C0] ? __fput+0x68e/0xa70 [ 353.833981][ C0] stack_trace_save+0x9c/0xe0 [ 353.838764][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 353.844676][ C0] save_stack+0xf5/0x1f0 [ 353.849015][ C0] ? __pfx_save_stack+0x10/0x10 [ 353.853871][ C0] ? free_unref_folios+0xd22/0x1470 [ 353.859415][ C0] ? folios_put_refs+0x584/0x670 [ 353.864400][ C0] ? shmem_undo_range+0x49e/0x1490 [ 353.869603][ C0] ? shmem_evict_inode+0x26e/0xa70 [ 353.874710][ C0] ? evict+0x5f4/0xae0 [ 353.878946][ C0] ? __dentry_kill+0x209/0x660 [ 353.883794][ C0] ? dput+0x19f/0x2b0 [ 353.887776][ C0] ? page_ext_put+0x97/0xc0 [ 353.892275][ C0] __reset_page_owner+0x71/0x1f0 [ 353.897302][ C0] free_unref_folios+0xd22/0x1470 [ 353.902333][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 353.908772][ C0] ? __page_cache_release+0x8a6/0xbb0 [ 353.914148][ C0] folios_put_refs+0x584/0x670 [ 353.919042][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 353.924409][ C0] ? folio_batch_remove_exceptionals+0x18c/0x1f0 [ 353.930995][ C0] shmem_undo_range+0x49e/0x1490 [ 353.936148][ C0] ? __pfx_shmem_undo_range+0x10/0x10 [ 353.941575][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 353.946967][ C0] ? percpu_counter_add_batch+0xea/0x1e0 [ 353.952692][ C0] shmem_evict_inode+0x26e/0xa70 [ 353.957714][ C0] ? inode_wait_for_writeback+0x14d/0x370 [ 353.963617][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 353.969074][ C0] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 353.975231][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 353.980596][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 353.986057][ C0] evict+0x5f4/0xae0 [ 353.990039][ C0] ? __pfx_evict+0x10/0x10 [ 353.994535][ C0] ? _raw_spin_unlock+0x28/0x50 [ 353.999475][ C0] ? iput+0xcea/0x1050 [ 354.003749][ C0] __dentry_kill+0x209/0x660 [ 354.008513][ C0] ? dput+0x37/0x2b0 [ 354.012411][ C0] dput+0x19f/0x2b0 [ 354.016498][ C0] __fput+0x68e/0xa70 [ 354.020569][ C0] task_work_run+0x1d4/0x260 [ 354.025172][ C0] ? __pfx_task_work_run+0x10/0x10 [ 354.030533][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 354.035727][ C0] do_exit+0x6bd/0x2300 [ 354.039879][ C0] ? do_raw_spin_lock+0x121/0x290 [ 354.044901][ C0] ? __pfx_do_exit+0x10/0x10 [ 354.049491][ C0] do_group_exit+0x21c/0x2d0 [ 354.054195][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 354.059404][ C0] get_signal+0x1285/0x1340 [ 354.063914][ C0] arch_do_signal_or_restart+0x9a/0x7a0 [ 354.069546][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 354.075700][ C0] ? exit_to_user_mode_loop+0x55/0x4f0 [ 354.081699][ C0] exit_to_user_mode_loop+0x87/0x4f0 [ 354.087288][ C0] ? rcu_is_watching+0x15/0xb0 [ 354.092251][ C0] do_syscall_64+0x2e9/0xfa0 [ 354.096960][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.103307][ C0] ? clear_bhb_loop+0x60/0xb0 [ 354.108337][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.114224][ C0] RIP: 0033:0x7f544d98f6c9 [ 354.118657][ C0] RSP: 002b:00007f544e8c8038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 354.127237][ C0] RAX: 0000000000010106 RBX: 00007f544dbe6090 RCX: 00007f544d98f6c9 [ 354.135208][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 354.143259][ C0] RBP: 00007f544da11f91 R08: 0000000000000000 R09: 0000000000000000 [ 354.151222][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 354.159187][ C0] R13: 00007f544dbe6128 R14: 00007f544dbe6090 R15: 00007ffc6e10b198 [ 354.167160][ C0] [ 354.170188][ C0] rcu: rcu_preempt kthread starved for 10231 jiffies! g22137 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 354.181631][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 354.191682][ C0] rcu: RCU grace-period kthread stack dump: [ 354.197648][ C0] task:rcu_preempt state:R running task stack:27032 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 354.211467][ C0] Call Trace: [ 354.214829][ C0] [ 354.217846][ C0] __schedule+0x1836/0x4ed0 [ 354.222533][ C0] ? __lock_acquire+0xab9/0xd20 [ 354.227381][ C0] ? __pfx___schedule+0x10/0x10 [ 354.232325][ C0] ? schedule+0x91/0x360 [ 354.236873][ C0] schedule+0x165/0x360 [ 354.241070][ C0] schedule_timeout+0x12b/0x270 [ 354.245962][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 354.251521][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 354.257435][ C0] ? __pfx_process_timeout+0x10/0x10 [ 354.262896][ C0] ? prepare_to_swait_event+0x341/0x380 [ 354.268616][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 354.273509][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 354.278696][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 354.284936][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 354.290320][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 354.295711][ C0] ? finish_swait+0xcd/0x1f0 [ 354.300304][ C0] rcu_gp_kthread+0x99/0x390 [ 354.304907][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 354.310143][ C0] ? __kthread_parkme+0x7b/0x200 [ 354.315256][ C0] ? __kthread_parkme+0x1a1/0x200 [ 354.320384][ C0] kthread+0x711/0x8a0 [ 354.324504][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 354.329717][ C0] ? __pfx_kthread+0x10/0x10 [ 354.334309][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 354.339616][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 354.344805][ C0] ? __pfx_kthread+0x10/0x10 [ 354.349384][ C0] ret_from_fork+0x599/0xb30 [ 354.353967][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 354.359074][ C0] ? __switch_to_asm+0x39/0x70 [ 354.363827][ C0] ? __switch_to_asm+0x33/0x70 [ 354.368582][ C0] ? __pfx_kthread+0x10/0x10 [ 354.373160][ C0] ret_from_fork_asm+0x1a/0x30 [ 354.377980][ C0] [ 354.381081][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 354.387657][ C0] Sending NMI from CPU 0 to CPUs 1: [ 354.392867][ C1] NMI backtrace for cpu 1 [ 354.392881][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 354.392898][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 354.392906][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 354.392926][ C1] Code: 83 f1 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 be 0d 00 f3 0f 1e fa fb f4 58 f1 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 354.392937][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 354.392953][ C1] RAX: 589b1c47a6013300 RBX: ffffffff81977ec7 RCX: 589b1c47a6013300 [ 354.392964][ C1] RDX: 0000000000000001 RSI: ffffffff8d78b7d7 RDI: ffffffff8bbf70e0 [ 354.392974][ C1] RBP: ffffc90000197f10 R08: ffff8880b873339b R09: 1ffff110170e6673 [ 354.392985][ C1] R10: dffffc0000000000 R11: ffffed10170e6674 R12: ffffffff8f7dd070 [ 354.392996][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039dcb70 [ 354.393006][ C1] FS: 0000000000000000(0000) GS:ffff888125fc1000(0000) knlGS:0000000000000000 [ 354.393019][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 354.393030][ C1] CR2: 00007f31f7a92e6c CR3: 0000000031e2c000 CR4: 00000000003526f0 [ 354.393047][ C1] Call Trace: [ 354.393054][ C1] [ 354.393059][ C1] default_idle+0x13/0x20 [ 354.393077][ C1] default_idle_call+0x73/0xb0 [ 354.393095][ C1] do_idle+0x1e7/0x510 [ 354.393115][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 354.393140][ C1] ? __pfx_do_idle+0x10/0x10 [ 354.393163][ C1] ? do_idle+0x15/0x510 [ 354.393184][ C1] cpu_startup_entry+0x44/0x60 [ 354.393203][ C1] start_secondary+0x101/0x110 [ 354.393221][ C1] common_startup_64+0x13e/0x147 [ 354.393243][ C1]