last executing test programs: 6m43.822485328s ago: executing program 3 (id=4): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40001) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000080)) preadv(0xffffffffffffffff, 0x0, 0x0, 0xc9, 0x1) sched_setattr(0x0, 0x0, 0x0) clock_adjtime(0x0, 0x0) waitid(0x2, 0xffffffffffffffff, 0x0, 0x2, 0x0) mlock(&(0x7f0000646000/0x3000)=nil, 0x3000) openat$tun(0xffffffffffffff9c, 0x0, 0x2241, 0x0) r2 = mq_open(&(0x7f0000000000)='eth0\x00', 0x42, 0x0, 0x0) r3 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x11, 0x0) r4 = syz_io_uring_setup(0xce, &(0x7f0000000440)={0x0, 0x1b69, 0x800, 0xfffffffe, 0x337}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x3, 0x0}) io_uring_enter(r4, 0x47ba, 0x98f1, 0x20, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x6, 0x0) 6m30.117592356s ago: executing program 4 (id=25): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8080c61) r3 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f00000002c0)={0x80000000, 0x0, &(0x7f0000002c40)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000280)={0x80000000, 0x0, 0x0}) ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f000000a300)={{0x80000000, 0x0, 0x2, [0x40000020, 0x8]}, {0x80000000, r4, 0x0, [0xc1b, 0x4]}, 0x1, [0x7e, 0x8]}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000005c0)={'#! ', './file1/../file0', [], 0xa, "0002783348b29e7bcaf3e29c2593b929f38db16e33ea96f57d49c226f35df5a073e47a165b0074fbf80de701b0728381f07c35183b8242af6ed8d42a819bf58c54c074"}, 0x57) write$UHID_INPUT(r5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 6m28.661484288s ago: executing program 4 (id=28): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) read$FUSE(0xffffffffffffffff, &(0x7f0000002400)={0x2020}, 0xfffffec2) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000400)={{0x8, 0x4, 0x4, 0x2, 'syz0\x00', 0x40}, 0x3, 0x10000000, 0x1, r0, 0x2, 0x5, 'syz1\x00', &(0x7f0000000000)=['\x85--\x00', 'rcu_utilization\x00'], 0x14}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x56d141) setresuid(0xee01, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0xfffffffffffffffb) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, 0x0) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x6}], 0x18}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$kcm(0x2b, 0x1, 0x0) listen(r6, 0x6) setsockopt$sock_attach_bpf(r6, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r6) 6m27.558907693s ago: executing program 32 (id=4): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40001) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000080)) preadv(0xffffffffffffffff, 0x0, 0x0, 0xc9, 0x1) sched_setattr(0x0, 0x0, 0x0) clock_adjtime(0x0, 0x0) waitid(0x2, 0xffffffffffffffff, 0x0, 0x2, 0x0) mlock(&(0x7f0000646000/0x3000)=nil, 0x3000) openat$tun(0xffffffffffffff9c, 0x0, 0x2241, 0x0) r2 = mq_open(&(0x7f0000000000)='eth0\x00', 0x42, 0x0, 0x0) r3 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x11, 0x0) r4 = syz_io_uring_setup(0xce, &(0x7f0000000440)={0x0, 0x1b69, 0x800, 0xfffffffe, 0x337}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x3, 0x0}) io_uring_enter(r4, 0x47ba, 0x98f1, 0x20, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x6, 0x0) 6m26.456239796s ago: executing program 4 (id=33): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) shutdown(r5, 0x1) 6m22.012035738s ago: executing program 4 (id=37): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = semget$private(0x0, 0x4, 0x29b) semop(r4, 0x0, 0x0) semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000240)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x50, 0xd49}, 0xfffffffffffffffc, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x3}) semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000000)) semctl$IPC_RMID(r4, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup3(r7, r6, 0x80000) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x6, 0x9, &(0x7f00000001c0)={{0x1, @rand_addr, 0x0, 0x0, 'lblc\x00', 0x8, 0x3, 0x2000000}, {@private=0xa010102, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x44) 6m18.523239435s ago: executing program 4 (id=40): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ppoll(0x0, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0) sendmsg$nl_xfrm(r1, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000000180)={0x2020}, 0x143b) 6m15.517539647s ago: executing program 4 (id=42): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x4000, 0x0) sendmmsg$unix(r2, &(0x7f0000001a40), 0x0, 0x40) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="3b1c1b2098f0bc154c9778a9229a7d", 0xf) sched_setaffinity(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/18], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="ca02016eba2d52b5f2ac03cc9f38f9d9", 0x10) syz_open_dev$audion(0x0, 0x7, 0x400) r6 = fsopen(&(0x7f0000000340)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0x1) 6m6.639721365s ago: executing program 0 (id=52): openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x10, 0x140b, 0x11fcbe16f5dc6f71, 0x70bd29, 0xfffffffe}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prctl$PR_GET_IO_FLUSHER(0x4) r4 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r4, 0xc06c4124, 0x0) syz_clone(0x25000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(0x0) creat(&(0x7f0000000440)='./file0\x00', 0x0) 6m5.504784411s ago: executing program 0 (id=53): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) socket$alg(0x26, 0x5, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0xc) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x8100, 0x0, 0x37) write$cgroup_subtree(r5, &(0x7f0000000980)={[{0x2d, 'pids'}]}, 0x1f) 6m3.655407635s ago: executing program 0 (id=56): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000004c0)=r0, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001600)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) pipe2$9p(0x0, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x400, 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) mount$9p_unix(0x0, 0x0, 0x0, 0x8, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix_mp={0x0, 0x0, 0x50323234, 0x6, 0x0, [{}, {0x0, 0xfffffffd}, {0x0, 0xfffff001}, {}, {0x8b44, 0x578}, {}, {}, {0x0, 0xffffffff}], 0x0, 0x0, 0x0, 0x2}}) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r3, r4, 0x0, 0x8000fb00) 5m59.54300735s ago: executing program 33 (id=42): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x4000, 0x0) sendmmsg$unix(r2, &(0x7f0000001a40), 0x0, 0x40) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="3b1c1b2098f0bc154c9778a9229a7d", 0xf) sched_setaffinity(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/18], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="ca02016eba2d52b5f2ac03cc9f38f9d9", 0x10) syz_open_dev$audion(0x0, 0x7, 0x400) r6 = fsopen(&(0x7f0000000340)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0x1) 5m59.395784706s ago: executing program 0 (id=64): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) futex(0xfffffffffffffffe, 0x6, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x801, 0x0) listen(r1, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000040)={@initdev, @loopback, 0x0}, &(0x7f00000001c0)=0xc) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000280)={@rand_addr=' \x01\x00', r3}, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x44010) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r6, 0x0, 0x7ffff000, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001a40)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x2004e101}, 0x0) 5m57.457029259s ago: executing program 0 (id=67): ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, &(0x7f0000000000)={0xf00001, 0x8}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18050000000000"], &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0x9, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)={0x24, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40004) brk(0x689d80000000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0, 0xffffffff}, 0x50) unshare(0x22020600) 5m55.12215135s ago: executing program 0 (id=69): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = open(0x0, 0x80ff, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0x332, &(0x7f0000000080)={0x0, 0x21e, 0x10}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x28c81, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) socket$isdn(0x22, 0x3, 0x10) accept4$llc(r1, &(0x7f0000000100), 0x0, 0x80000) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffd74, 0x40004, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='westwood', 0x8) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 5m38.981153619s ago: executing program 34 (id=69): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = open(0x0, 0x80ff, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0x332, &(0x7f0000000080)={0x0, 0x21e, 0x10}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x28c81, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) socket$isdn(0x22, 0x3, 0x10) accept4$llc(r1, &(0x7f0000000100), 0x0, 0x80000) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffd74, 0x40004, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='westwood', 0x8) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 3m40.173581092s ago: executing program 7 (id=175): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r4, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x880) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={0x0, 0xddf}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000380)={r7, 0x3}, 0x8) io_uring_setup(0x4aec, &(0x7f0000000140)={0x0, 0x81fa, 0x1000, 0x1, 0x7a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14, 0x2, 0x6, 0x1, 0x6000000}, 0x14}}, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 3m38.852738563s ago: executing program 7 (id=176): openat$autofs(0xffffffffffffff9c, &(0x7f0000001100), 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) dup(r0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780d206050086dd6018232500182c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa"], 0x0) syz_emit_ethernet(0x56, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018012500202c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2b00020100000000b9365394fc379af00659ab39e65121dd3e8c7219b1f783b2"], 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r3, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x3a9e9908}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x6, 0x2, 0x1, 0x0, 0xc6}) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r4, &(0x7f0000000780)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x2c2) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0xf, {"a2e3ad21e08eeb661b5d300987f70e06d038e7ff7fc6e5539b0d650e8b089b3f313b6c090890e0878f0e1ac6e7049b3b46959b649a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07410936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) socket(0x11, 0xa, 0x0) r5 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) r6 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x100, 0x1}, &(0x7f0000000040)=0x0, &(0x7f0000002a00)) syz_clone(0x20042400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffa, 0x0, 0x4) io_uring_enter(r6, 0xdb4, 0x0, 0x0, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f0000000040)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x0, 0x9, "00000000020000000000002100", "00004702", "0300", "97ad3700", ["fdffffff84a438dfc5d5c010", "d78cb8b0211a83be12ff0bff", "0000efffffffffffbfff00"]}) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, 0x0) 3m31.947475099s ago: executing program 7 (id=186): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69703000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r5 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x2, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private=0x1, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0xe0000000, 0x5e4b0422, 0x3, 0xffff, 0x5, 0x9, 0x0, 0x0, 0x80, 0x80000001}}, 0x50) syz_fuse_handle_req(r6, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x0, 0x0, {0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xffffffffffffffff, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x8000, 0x0, 0x0, r8, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r6, 0x0, 0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$binfmt_elf64(r9, 0x0, 0x78) 3m29.886136556s ago: executing program 7 (id=188): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x48) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x593802, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040), 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$misdntimer(0xffffff9c, 0x0, 0x4000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000140)={0x48}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r5, 0x3ba0, &(0x7f0000000280)={0x48, 0x1, 0x0, 0x0, 0x6, 0x40000000009}) ioctl$IOMMU_IOAS_IOVA_RANGES(r5, 0x3b84, &(0x7f0000000240)={0x20, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, &(0x7f0000000280)={0x18}) r6 = accept4$alg(r4, 0x0, 0x0, 0x0) sendfile(r3, r6, 0x0, 0x10ffff) 3m28.255926003s ago: executing program 7 (id=189): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x54d}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f00003cd000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c9a000/0x2000)=nil) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x400c004) 3m27.235684278s ago: executing program 7 (id=190): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ptrace$peek(0x1, 0x0, &(0x7f00000005c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000100)=0xb9) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x80080) syz_io_uring_setup(0x7660, &(0x7f0000000240)={0x0, 0x684a, 0x2, 0x1, 0x175}, &(0x7f0000000180), &(0x7f00000001c0)) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x1ce) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r5, 0x0, 0xff2e) ioctl$TCFLSH(r5, 0x540b, 0x0) socket(0x2a, 0x80001, 0x6) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x33}}) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000140)={'wlan1\x00', @random="0300000000eb"}) io_setup(0x6, &(0x7f0000000540)=0x0) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r6, 0x1, &(0x7f0000000880)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, r7, 0x0}]) 3m11.552569561s ago: executing program 35 (id=190): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ptrace$peek(0x1, 0x0, &(0x7f00000005c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000100)=0xb9) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x80080) syz_io_uring_setup(0x7660, &(0x7f0000000240)={0x0, 0x684a, 0x2, 0x1, 0x175}, &(0x7f0000000180), &(0x7f00000001c0)) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x1ce) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r5, 0x0, 0xff2e) ioctl$TCFLSH(r5, 0x540b, 0x0) socket(0x2a, 0x80001, 0x6) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x33}}) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000140)={'wlan1\x00', @random="0300000000eb"}) io_setup(0x6, &(0x7f0000000540)=0x0) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r6, 0x1, &(0x7f0000000880)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, r7, 0x0}]) 52.531662377s ago: executing program 5 (id=432): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000840)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x8000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) syz_open_dev$usbmon(&(0x7f00000001c0), 0xfff, 0x101000) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800"/14], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000400)=@id={0x1e, 0x3, 0x0, {0x4e24, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2041, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x890}, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000040)={0x2}) dup3(0xffffffffffffffff, r0, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000180)=@id={0x1e, 0x3, 0x2, {0x4e21, 0x3}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) r6 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r6, 0xab00, r7) ioctl$NBD_DO_IT(r6, 0xab03) ioctl$NBD_CLEAR_SOCK(r6, 0xab04) 39.640835186s ago: executing program 5 (id=435): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x28, r2, 0x5, 0x4000, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="03"}, @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x4}]]}, 0x28}}, 0x0) 39.073817621s ago: executing program 5 (id=440): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ff000040720501cb6526010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0xffffffffffffffd4, 0x3, 0x200a}}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f00)={0x24, 0x0, &(0x7f0000000d80)={0x0, 0x3, 0x4, @lang_id={0xd, 0x3, 0x2c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, &(0x7f0000000900)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 38.247709262s ago: executing program 5 (id=446): r0 = landlock_create_ruleset(&(0x7f00000000c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r1, 0x5450, 0x3) 28.315151876s ago: executing program 5 (id=448): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000000000000b5000040"]) 27.820806944s ago: executing program 5 (id=452): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) 25.041605666s ago: executing program 1 (id=467): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), 0x0, 0x0}) 24.703630115s ago: executing program 8 (id=470): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x60, 0x10, 0x1, 0x470bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x64e10, 0x36a01}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x28, 0x5, 0x0, 0x1, [@IFLA_BRPORT_FLUSH={0x4}, @IFLA_BRPORT_STATE={0x5, 0x1, 0x3}, @IFLA_BRPORT_PROTECT={0x5, 0x6, 0x1}, @IFLA_BRPORT_PROXYARP_WIFI={0x5, 0xc, 0x1}, @IFLA_BRPORT_GROUP_FWD_MASK={0x6, 0x1f, 0xf}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x400c080}, 0x8002) 24.541793246s ago: executing program 1 (id=471): capset(0x0, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x220c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r8) 24.443083784s ago: executing program 6 (id=472): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prctl$PR_GET_IO_FLUSHER(0x4) syz_clone(0x2045080, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x6) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) ioprio_set$uid(0x3, 0x0, 0x0) open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) 22.093868477s ago: executing program 8 (id=474): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000500)=r0, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000240)={0x2, 0x4e1f, @loopback}, 0x10, 0x0}, 0x556816456254c86d) 22.080237983s ago: executing program 6 (id=475): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x20, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x4}]}, 0x20}}, 0x0) 20.951812678s ago: executing program 1 (id=476): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r1, 0x0) readv(r0, &(0x7f0000001440)=[{&(0x7f00000010c0)=""/137, 0x89}, {&(0x7f0000002bc0)=""/4096, 0x1000}], 0x2) 20.784876196s ago: executing program 1 (id=477): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) recvmmsg(r1, &(0x7f0000007900)=[{{0x0, 0x0, 0x0}}], 0xd, 0x0, 0x0) write(r0, 0x0, 0x0) 20.468469315s ago: executing program 1 (id=478): ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f00000000c0)={&(0x7f0000000780)={{@local}, {@my=0x0, 0x800000}, 0x400, "884fbe2726aa0a32f3e65f909acda971a093228292456e0332e6c11577b514f0bb8db731789d860e9589c4cbdd60b7a851a8a3c55ada2f90c51a69bf4a5c3e32296535dc838ef00dc18a32a79118dc858628f741f107552021e5a81d38e4374a8a717a7ca9015083cfff5d16156ef9cabf4f60c0da46870a10bf520cc5abcf9e3a437761ea75776763139fadd55c46daf5338870951822f6a803ccfbab9c3f507672d7c39ea9ccf81d9bc2b4649e7b44ed9fd7cb9bd389240cd41c415113d1caac4536f05c07e596d6addad2a4d27ba21a3b655753c508caedcc812ca235a7cd1686426b208bdecf8a4265ba8f6824aa60306e2d623481eed301b6dc21041fa8b6592be00bb74de1989a45a5aa32c189e9f5a5bb878281d0129afcfb8410cd1fa5acd080993d2d084213130a9b8d517d13251e6605a03d9b8faf507e820205a1f471af7b261419e79e09c547f7c10fd3f1ad876f59fdcc5e07d0ff4dee6ea2e3856616a352d648b9b5261b6263020fc3ae8eb404bc25703b3d3b83172d07ff22907d6631d226c8247c92c1826ff814590dfe8c7fc54dfb265e906f756846546316b20e0105e2a5355a210b2b7f5db61d8f90bb783b41ce368233bd08044e9283531fffe49e3d305ecfb16075a047557f57bb7baf8babfc02975ad0d60ed8de9cb8adc9f667bc6826cbea8e260e4bff28a5ec19d38d1fc019db3cfaf310e764d78619cb27fb17af05a0e8ae831ce8413721e71138e62cc4ad8e7974d1506b4fb581c549a3dd7b7ef44ac37201aa3bce6f37f648d781bcb4f329fd45ffa640f1b04efb38a36e0ed0e2abcb07e4ad88ae3edfb6d840d75340204243d0e1c1c3139823b0d5ad196430bf4566619a1a97df4376a7e9a9e9c1d97b9f773c921778f2cb5165c02da1423305c502076177e4af50cb3343c10b01b78e3fe5520bdfae2b3dbe42db0f0eb55bbcb19038018d45ccdb8b0df400085a02c61b033f430fb6a7408e090c65798bc49d35e049d276fd1952d2b3dfd92a2548411e21be26216fe68fc3cf1c6625031260153708a53255b3d3d0411d5f0e8ab2102a97e539c34e9c769a7dafb87c5918deb59ef05e928c2c52775de467fa843cbcdabc290097eeb2ee7c58d86e3fccc39a5b694c18a4cc0d6af1e61d9c69e6466bc0cbef15365109e4f67a6268625f8c3f358fb7d567cbea52e1bc289bd8effda4e362a729e8cd3064970b97e3f72535d9ba88e97a14834cfd8dc86b5d2f9b35425a4162e6abe8b785ef462883e716c91b8eb281d81f68f606f16fcbc5cddfdec3b515818a647d86a4c17bae6ad525e95598052c49cdee821ceb45b2350dda13628db0dd266f30285241a2b147d65113b8ed3665a3451f7a56cf430ec98aeac702d9b9f776d97520a9d039e5b2fff34ac4d4e0a32e1f35c8f38e4f4fe1b3212a70f185ad71ec86b8c9"}, 0x418}) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) 19.739286646s ago: executing program 1 (id=480): syz_open_dev$video4linux(&(0x7f0000000040), 0xffffffffffffffff, 0x80140) io_setup(0x81, &(0x7f0000000180)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000002340)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, r1, 0x0}]) 19.477991246s ago: executing program 6 (id=482): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, 0x0}}], 0x1, 0x2000c000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0xc, &(0x7f0000000480)=@ccm_128={{0x304}, "6fa66229a7a91abc", "7694f16d07de390be2bdc631fd1b7e76", "271a6330", "f6593472d1b0d4e4"}, 0x28) 19.219577493s ago: executing program 8 (id=483): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x20000000) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf25030000000c0006000200000000000000080001"], 0xc0}}, 0xc0) 18.911822755s ago: executing program 6 (id=485): r0 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000040)=0xfffffff5, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local, 0x1}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28, 0x7ffffff7}}], 0x1, 0x0) 18.839858194s ago: executing program 8 (id=486): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='stack\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 18.51587749s ago: executing program 8 (id=488): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 18.47174193s ago: executing program 6 (id=489): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x16, 0x0, &(0x7f00000002c0)) 18.096397516s ago: executing program 8 (id=491): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1fffffc}, [@call={0x85, 0x0, 0x0, 0xbc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8002}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5c298795369ca04f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xc00, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 18.034047691s ago: executing program 6 (id=492): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002ec0)=ANY=[@ANYBLOB="02000000040000000700000009"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0d00000003000000040000000100000000000000", @ANYRES32=r0], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x1, r2, 0x1000000}, 0x38) 17.080326299s ago: executing program 2 (id=494): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'sit0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r2}, 0x10) 16.829871851s ago: executing program 2 (id=495): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) close(0xffffffffffffffff) syz_usb_connect(0x3, 0x114, &(0x7f0000000f80)={{0x12, 0x1, 0x110, 0xb3, 0x16, 0xc9, 0x10, 0x1ace, 0xe9b2, 0x5c3d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x102, 0x2, 0x0, 0x2a, 0x10, 0x0, [{{0x9, 0x4, 0xec, 0x6, 0x4, 0xfe, 0x2, 0x0, 0x3, [], [{{0x9, 0x5, 0x2, 0x4, 0x40, 0xbf, 0xe, 0x7}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x5, 0x9, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7f, 0x5}]}}, {{0x9, 0x5, 0xd, 0x10, 0x0, 0xd, 0x81, 0xff}}, {{0x9, 0x5, 0x9, 0x4, 0x8, 0x9, 0x8, 0x10}}]}}, {{0x9, 0x4, 0x81, 0x4, 0x0, 0xe, 0x1, 0x0, 0xa8, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x26, 0x2, 0x4}]}, @generic={0xb5, 0xd, "eb90a94aef33e509c09a395d4f850474c3824fecfb7c2c8d30495d0ae163d6f1cae5091c6b69cea856fda0e3ce57ea845012ffb3806bdad245133ce43f0ebd94447100db2c42634ffca01050c55f18c94d7636bfbb107f6073c2e7cfcfbc8da5e0f6d35458068c849c873db135f3d0e3a4e15c38e8bb18507cf4be2346fae5811c1114f4917c4b835b0abfedee690d65a859e412d65580820a85fe210789168319faec26cf2f613af43c4dbebd36f9b1ac47bc"}]}}]}}]}}, 0x0) 16.112064688s ago: executing program 2 (id=496): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000100b060a5000000000000109022400010000500009040002010300000009210000000122f80409058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000706000000ff0309"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 15.500886643s ago: executing program 2 (id=497): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @dev, 0x4}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) getsockopt$sock_buf(r0, 0x1, 0x19, &(0x7f0000002f80)=""/217, &(0x7f0000003080)=0xd9) 15.311864718s ago: executing program 2 (id=498): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x9, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x81, 0x39cc191a, 0x10005f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5e, 0x1, 0x3, 0x5, 0x1, 0x1f461e2c, 0x0, 0xe661, 0x4, 0x7, 0x101, 0x7fff, 0x4c75, 0x800, 0x242, 0x1003, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x7, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x131, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x8, 0x2, 0x3, 0x0, 0x7, 0x5, 0x4800, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x0, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0x10, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xa, 0x3, 0x9, 0xc, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x3010, 0x3, 0x9, 0x1, 0x7, 0x3, 0xa, 0x7, 0x42, 0x2], [0x7, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x7f, 0x3, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x7, 0xa, 0x3e7, 0x9, 0x5, 0x2, 0x102, 0x3, 0x800, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa4, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x1, 0x938, 0x7, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x0, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x1fd, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 15.214169556s ago: executing program 2 (id=499): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4280}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_bond\x00'}, @IFLA_MASTER={0x8, 0x3a}, @IFLA_GSO_MAX_SEGS={0x8}]}, 0x44}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x5, 0x0, 0x4000000f, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x400}, 0xac) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x20}, 0x0) 12.01983379s ago: executing program 36 (id=452): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) 4.506779983s ago: executing program 37 (id=480): syz_open_dev$video4linux(&(0x7f0000000040), 0xffffffffffffffff, 0x80140) io_setup(0x81, &(0x7f0000000180)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000002340)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, r1, 0x0}]) 2.488124207s ago: executing program 38 (id=491): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1fffffc}, [@call={0x85, 0x0, 0x0, 0xbc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8002}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5c298795369ca04f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xc00, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 2.362706733s ago: executing program 39 (id=492): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002ec0)=ANY=[@ANYBLOB="02000000040000000700000009"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0d00000003000000040000000100000000000000", @ANYRES32=r0], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x1, r2, 0x1000000}, 0x38) 0s ago: executing program 40 (id=499): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4280}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_bond\x00'}, @IFLA_MASTER={0x8, 0x3a}, @IFLA_GSO_MAX_SEGS={0x8}]}, 0x44}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x5, 0x0, 0x4000000f, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x400}, 0xac) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x20}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.187' (ED25519) to the list of known hosts. [ 81.791052][ T5800] cgroup: Unknown subsys name 'net' [ 82.076980][ T5800] cgroup: Unknown subsys name 'cpuset' [ 82.132919][ T5800] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.803389][ T5800] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.888502][ T9] cfg80211: failed to load regulatory.db [ 86.896663][ T5819] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.900369][ T5819] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.901160][ T5819] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.902888][ T5819] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.903726][ T5819] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.935010][ T5824] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.973530][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.983673][ T5830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.992577][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.010465][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.022614][ T5830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.023921][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.024357][ T5830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.026689][ T5130] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.028989][ T5130] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.031649][ T5130] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.032457][ T5130] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.038425][ T5130] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.038916][ T5130] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.039571][ T5130] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.040190][ T5830] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.041286][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.043292][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.103663][ T5827] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.104434][ T5827] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.060780][ T5815] chnl_net:caif_netlink_parms(): no params data found [ 88.101996][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 88.128691][ T5814] chnl_net:caif_netlink_parms(): no params data found [ 88.171070][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 88.384818][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 89.075379][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.076793][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.077236][ T5815] bridge_slave_0: entered allmulticast mode [ 89.078926][ T5815] bridge_slave_0: entered promiscuous mode [ 89.124570][ T59] Bluetooth: hci3: command tx timeout [ 89.124694][ T59] Bluetooth: hci0: command tx timeout [ 89.124765][ T59] Bluetooth: hci4: command tx timeout [ 89.202719][ T59] Bluetooth: hci2: command tx timeout [ 89.202884][ T5834] Bluetooth: hci1: command tx timeout [ 89.335301][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.335538][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.335824][ T5815] bridge_slave_1: entered allmulticast mode [ 89.338594][ T5815] bridge_slave_1: entered promiscuous mode [ 89.341255][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.341331][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.341450][ T5816] bridge_slave_0: entered allmulticast mode [ 89.390603][ T5816] bridge_slave_0: entered promiscuous mode [ 89.407805][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.407941][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.408124][ T5814] bridge_slave_0: entered allmulticast mode [ 89.410862][ T5814] bridge_slave_0: entered promiscuous mode [ 89.553961][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.554120][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.554311][ T5816] bridge_slave_1: entered allmulticast mode [ 89.556978][ T5816] bridge_slave_1: entered promiscuous mode [ 89.633219][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.633837][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.633961][ T5814] bridge_slave_1: entered allmulticast mode [ 89.635410][ T5814] bridge_slave_1: entered promiscuous mode [ 89.637541][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.637669][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.637842][ T5818] bridge_slave_0: entered allmulticast mode [ 89.639304][ T5818] bridge_slave_0: entered promiscuous mode [ 89.954811][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.954974][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.955162][ T5818] bridge_slave_1: entered allmulticast mode [ 89.957833][ T5818] bridge_slave_1: entered promiscuous mode [ 89.964845][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.034702][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.034837][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.035027][ T5820] bridge_slave_0: entered allmulticast mode [ 90.036626][ T5820] bridge_slave_0: entered promiscuous mode [ 90.186490][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.253132][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.253371][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.253515][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.253688][ T5820] bridge_slave_1: entered allmulticast mode [ 90.255407][ T5820] bridge_slave_1: entered promiscuous mode [ 90.260277][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.478104][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.577893][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.680143][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.894773][ T5815] team0: Port device team_slave_0 added [ 90.897588][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.966314][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.057463][ T5815] team0: Port device team_slave_1 added [ 91.141275][ T5816] team0: Port device team_slave_0 added [ 91.145894][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.148202][ T5814] team0: Port device team_slave_0 added [ 91.212690][ T59] Bluetooth: hci0: command tx timeout [ 91.212698][ T5827] Bluetooth: hci3: command tx timeout [ 91.212812][ T5834] Bluetooth: hci4: command tx timeout [ 91.282630][ T59] Bluetooth: hci2: command tx timeout [ 91.282805][ T5834] Bluetooth: hci1: command tx timeout [ 91.336805][ T5816] team0: Port device team_slave_1 added [ 91.424688][ T5814] team0: Port device team_slave_1 added [ 91.715878][ T5818] team0: Port device team_slave_0 added [ 91.934866][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.934877][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.934891][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.938211][ T5818] team0: Port device team_slave_1 added [ 92.024999][ T5820] team0: Port device team_slave_0 added [ 92.088154][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.088170][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.088194][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.174966][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.174982][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.175008][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.179404][ T5820] team0: Port device team_slave_1 added [ 92.180827][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.180840][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.180864][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.276388][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.276404][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.276428][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.364134][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.364149][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.364174][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.367019][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.367031][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.367045][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.470216][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.470228][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.470243][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.473380][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.473394][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.473418][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.591510][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.591521][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.591535][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.858229][ T5815] hsr_slave_0: entered promiscuous mode [ 92.859195][ T5815] hsr_slave_1: entered promiscuous mode [ 93.067906][ T5816] hsr_slave_0: entered promiscuous mode [ 93.068682][ T5816] hsr_slave_1: entered promiscuous mode [ 93.069340][ T5816] debugfs: 'hsr0' already exists in 'hsr' [ 93.069417][ T5816] Cannot create hsr debugfs directory [ 93.078060][ T5814] hsr_slave_0: entered promiscuous mode [ 93.079279][ T5814] hsr_slave_1: entered promiscuous mode [ 93.080068][ T5814] debugfs: 'hsr0' already exists in 'hsr' [ 93.080089][ T5814] Cannot create hsr debugfs directory [ 93.282551][ T59] Bluetooth: hci0: command tx timeout [ 93.282558][ T5827] Bluetooth: hci3: command tx timeout [ 93.282659][ T5834] Bluetooth: hci4: command tx timeout [ 93.290529][ T5818] hsr_slave_0: entered promiscuous mode [ 93.291827][ T5818] hsr_slave_1: entered promiscuous mode [ 93.293703][ T5818] debugfs: 'hsr0' already exists in 'hsr' [ 93.293727][ T5818] Cannot create hsr debugfs directory [ 93.362550][ T5834] Bluetooth: hci1: command tx timeout [ 93.362565][ T5827] Bluetooth: hci2: command tx timeout [ 93.549285][ T5820] hsr_slave_0: entered promiscuous mode [ 93.550075][ T5820] hsr_slave_1: entered promiscuous mode [ 93.550567][ T5820] debugfs: 'hsr0' already exists in 'hsr' [ 93.550588][ T5820] Cannot create hsr debugfs directory [ 95.111570][ T5815] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.163440][ T5815] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.204899][ T5815] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.257482][ T5815] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.362505][ T5827] Bluetooth: hci3: command tx timeout [ 95.373647][ T5827] Bluetooth: hci4: command tx timeout [ 95.373677][ T5827] Bluetooth: hci0: command tx timeout [ 95.376824][ T5816] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.417953][ T5816] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.442538][ T5834] Bluetooth: hci2: command tx timeout [ 95.443412][ T5827] Bluetooth: hci1: command tx timeout [ 95.470820][ T5816] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.501601][ T5816] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.615547][ T5814] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.655596][ T5814] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.706353][ T5814] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.743736][ T5814] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.883782][ T5818] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.932814][ T5818] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.985059][ T5818] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 96.039905][ T5818] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 96.178146][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.205107][ T5820] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.250104][ T5820] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.284150][ T5820] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.331749][ T5820] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.407056][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.456196][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.456820][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.505115][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.523402][ T2852] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.523538][ T2852] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.620853][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.696244][ T3543] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.696452][ T3543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.724925][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.759812][ T4467] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.760034][ T4467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.858630][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.879022][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.937518][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.937790][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.017860][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.018004][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.056774][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.095526][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.149979][ T3543] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.150134][ T3543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.229835][ T3543] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.229977][ T3543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.294951][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.341585][ T4467] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.341819][ T4467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.399412][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.399639][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.499527][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.730114][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.853001][ T5815] veth0_vlan: entered promiscuous mode [ 97.956596][ T5815] veth1_vlan: entered promiscuous mode [ 98.065129][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.139277][ T5816] veth0_vlan: entered promiscuous mode [ 98.208679][ T5816] veth1_vlan: entered promiscuous mode [ 98.226348][ T5815] veth0_macvtap: entered promiscuous mode [ 98.285293][ T5815] veth1_macvtap: entered promiscuous mode [ 98.290618][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.365279][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.448479][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.468000][ T5814] veth0_vlan: entered promiscuous mode [ 98.499043][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.517736][ T5816] veth0_macvtap: entered promiscuous mode [ 98.549796][ T5814] veth1_vlan: entered promiscuous mode [ 98.574910][ T68] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.579628][ T5816] veth1_macvtap: entered promiscuous mode [ 98.591358][ T68] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.609280][ T68] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.621282][ T68] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.840026][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.914561][ T5820] veth0_vlan: entered promiscuous mode [ 98.931792][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.953181][ T5814] veth0_macvtap: entered promiscuous mode [ 98.989585][ T3543] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.014744][ T3543] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.033459][ T5814] veth1_macvtap: entered promiscuous mode [ 99.035062][ T3543] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.063886][ T5820] veth1_vlan: entered promiscuous mode [ 99.068316][ T3543] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.183583][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.184153][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.298855][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.406206][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.407451][ T4467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.407469][ T4467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.496526][ T5818] veth0_vlan: entered promiscuous mode [ 99.527735][ T3543] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.550426][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.550447][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.559421][ T3543] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.566640][ T3543] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.567930][ T5820] veth0_macvtap: entered promiscuous mode [ 99.587411][ T3543] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.624771][ T5818] veth1_vlan: entered promiscuous mode [ 99.691848][ T5820] veth1_macvtap: entered promiscuous mode [ 99.821264][ T4467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.821283][ T4467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.037272][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.115620][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.211047][ T5818] veth0_macvtap: entered promiscuous mode [ 100.222396][ T87] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.222413][ T87] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.223888][ T68] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.907144][ T3543] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.909090][ T3543] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.936822][ T3543] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.939770][ T5818] veth1_macvtap: entered promiscuous mode [ 103.042377][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.042405][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.896606][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.994877][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.025924][ T3563] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.025972][ T3563] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.026007][ T3563] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.026042][ T3563] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.028883][ T3563] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.028901][ T3563] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.903966][ T5959] ======================================================= [ 104.903966][ T5959] WARNING: The mand mount option has been deprecated and [ 104.903966][ T5959] and is ignored by this kernel. Remove the mand [ 104.903966][ T5959] option from the mount to silence this warning. [ 104.903966][ T5959] ======================================================= [ 105.406897][ T5950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.406918][ T5950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.177620][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.177641][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.504903][ T87] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.504923][ T87] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.276259][ T5989] process 'syz.1.13' launched './file0' with NULL argv: empty string added [ 113.693577][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 117.592297][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 117.592366][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 117.592422][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 117.592510][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 117.592562][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 117.592597][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 117.592615][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 117.592732][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 117.592759][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 121.011795][ C0] vkms_vblank_simulate: vblank timer overrun [ 121.276766][ C0] vkms_vblank_simulate: vblank timer overrun [ 121.983375][ C0] vkms_vblank_simulate: vblank timer overrun [ 122.504877][ C0] vkms_vblank_simulate: vblank timer overrun [ 122.702875][ C0] vkms_vblank_simulate: vblank timer overrun [ 123.242992][ C0] vkms_vblank_simulate: vblank timer overrun [ 124.055929][ C0] vkms_vblank_simulate: vblank timer overrun [ 124.258902][ C0] vkms_vblank_simulate: vblank timer overrun [ 125.085907][ C0] vkms_vblank_simulate: vblank timer overrun [ 125.277729][ C0] vkms_vblank_simulate: vblank timer overrun [ 125.665787][ C0] vkms_vblank_simulate: vblank timer overrun [ 125.789831][ C0] vkms_vblank_simulate: vblank timer overrun [ 130.414174][ T6091] syz.4.33 (6091) used greatest stack depth: 18648 bytes left [ 133.938790][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.938889][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.713073][ T6117] binder: 6116:6117 ioctl c0306201 0 returned -14 [ 135.823050][ T6123] binder: 6116:6123 ioctl c0306201 0 returned -14 [ 137.517194][ T5827] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 137.712545][ T5827] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 137.782554][ T5827] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 137.812999][ T5827] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 138.771080][ T5827] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 140.992049][ T5827] Bluetooth: hci5: command tx timeout [ 143.573052][ T5827] Bluetooth: hci5: command tx timeout [ 144.182758][ T6160] could not allocate digest TFM handle blake2s-128-generic [ 145.572523][ T5834] Bluetooth: hci0: Malformed HCI Event: 0x22 [ 145.607492][ T5834] Bluetooth: hci5: command tx timeout [ 146.442860][ T6181] capability: warning: `syz.1.51' uses 32-bit capabilities (legacy support in use) [ 147.684835][ T5834] Bluetooth: hci5: command tx timeout [ 152.408998][ T6219] autofs: Unknown parameter 'contention_end' [ 152.530841][ T1227] Process accounting resumed [ 157.880208][ T87] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.384399][ T5827] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 159.401524][ T5827] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 159.406989][ T5827] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 159.416850][ T5827] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 159.424268][ T5827] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 159.637864][ T6265] Zero length message leads to an empty skb [ 159.826610][ T6264] Set syz1 is full, maxelem 6117 reached [ 160.233264][ T6127] chnl_net:caif_netlink_parms(): no params data found [ 161.395809][ T87] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.166048][ T5827] Bluetooth: hci4: command tx timeout [ 162.777841][ T6283] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 165.184128][ T5827] Bluetooth: hci4: command tx timeout [ 165.332082][ T87] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.212694][ T5827] Bluetooth: hci4: command tx timeout [ 169.288503][ T5827] Bluetooth: hci4: command tx timeout [ 170.615300][ T87] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.611229][ T6333] Bluetooth: MGMT ver 1.23 [ 173.912853][ T6127] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.912997][ T6127] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.913230][ T6127] bridge_slave_0: entered allmulticast mode [ 173.944688][ T6127] bridge_slave_0: entered promiscuous mode [ 174.061139][ T6127] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.061360][ T6127] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.061665][ T6127] bridge_slave_1: entered allmulticast mode [ 174.067351][ T6127] bridge_slave_1: entered promiscuous mode [ 178.727430][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 178.734501][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 178.735802][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 178.737058][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 178.737869][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 178.913400][ T6127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.296518][ T37] audit: type=1326 audit(1759208407.313:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6361 comm="syz.2.92" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc8a06ceec9 code=0x0 [ 180.345267][ T6127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.302476][ T5834] Bluetooth: hci1: command tx timeout [ 181.538279][ T6378] fuse: Bad value for 'fd' [ 182.854812][ T6127] team0: Port device team_slave_0 added [ 182.926967][ T6127] team0: Port device team_slave_1 added [ 183.420514][ T5834] Bluetooth: hci1: command tx timeout [ 183.724284][ T6395] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 184.064799][ T6397] overlayfs: failed to clone lowerpath [ 184.720218][ T87] bridge_slave_1: left allmulticast mode [ 184.723194][ T87] bridge_slave_1: left promiscuous mode [ 184.725780][ T87] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.810960][ T87] bridge_slave_0: left allmulticast mode [ 184.810994][ T87] bridge_slave_0: left promiscuous mode [ 184.811179][ T87] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.591513][ T5827] Bluetooth: hci1: command tx timeout [ 189.098686][ T5834] Bluetooth: hci1: command tx timeout [ 189.264005][ T5827] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 189.266360][ T5827] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 189.267363][ T5827] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 189.268452][ T5827] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 189.269177][ T5827] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 189.730780][ T6427] netlink: 452 bytes leftover after parsing attributes in process `syz.1.106'. [ 190.694551][ T6430] tty tty3: ldisc open failed (-12), clearing slot 2 [ 191.903031][ T5834] Bluetooth: hci3: command tx timeout [ 193.960246][ T5834] Bluetooth: hci3: command tx timeout [ 194.424913][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.424987][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.002611][ T5834] Bluetooth: hci3: command tx timeout [ 197.897932][ T6463] Bluetooth: MGMT ver 1.23 [ 198.082809][ T5834] Bluetooth: hci3: command tx timeout [ 201.238627][ T6481] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 201.715739][ T87] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.789372][ T87] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.802688][ T5891] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 201.823925][ T87] bond0 (unregistering): Released all slaves [ 201.879553][ T6127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.879564][ T6127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.879579][ T6127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.962085][ T6259] chnl_net:caif_netlink_parms(): no params data found [ 202.016335][ T5891] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.016361][ T5891] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 202.016401][ T5891] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 202.016425][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.167685][ T5891] usb 3-1: config 0 descriptor?? [ 202.636980][ T5891] usb 3-1: USB disconnect, device number 2 [ 209.769249][ T37] audit: type=1326 audit(1759208437.793:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6525 comm="syz.2.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8a06ceec9 code=0x7ffc0000 [ 209.838977][ T37] audit: type=1326 audit(1759208437.863:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6525 comm="syz.2.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fc8a06ceec9 code=0x7ffc0000 [ 209.839023][ T37] audit: type=1326 audit(1759208437.863:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6525 comm="syz.2.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8a06ceec9 code=0x7ffc0000 [ 209.839046][ T37] audit: type=1326 audit(1759208437.863:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6525 comm="syz.2.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc8a06ceec9 code=0x7ffc0000 [ 211.102316][ T37] audit: type=1326 audit(1759208439.123:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6525 comm="syz.2.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8a06ceec9 code=0x7ffc0000 [ 211.102366][ T37] audit: type=1326 audit(1759208439.133:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6525 comm="syz.2.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8a06ceec9 code=0x7ffc0000 [ 211.702833][ T6543] virtio-fs: tag not found [ 212.320696][ T59] Bluetooth: hci0: command 0x0406 tx timeout [ 212.320919][ T59] Bluetooth: hci2: command 0x0406 tx timeout [ 212.379655][ T6530] mmap: syz.2.128 (6530) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 212.715584][ T6259] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.715662][ T6259] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.715831][ T6259] bridge_slave_0: entered allmulticast mode [ 212.731524][ T6259] bridge_slave_0: entered promiscuous mode [ 213.647243][ T6259] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.647373][ T6259] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.647609][ T6259] bridge_slave_1: entered allmulticast mode [ 213.650303][ T6259] bridge_slave_1: entered promiscuous mode [ 215.512558][ T87] hsr_slave_0: left promiscuous mode [ 215.612492][ T87] hsr_slave_1: left promiscuous mode [ 215.613693][ T87] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.613774][ T87] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.684701][ T87] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.684735][ T87] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.005196][ T87] veth1_macvtap: left promiscuous mode [ 216.005466][ T87] veth0_macvtap: left promiscuous mode [ 216.005650][ T87] veth1_vlan: left promiscuous mode [ 216.005843][ T87] veth0_vlan: left promiscuous mode [ 216.268123][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 216.284813][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 216.285756][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 216.288465][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 216.289065][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 218.369434][ T5827] Bluetooth: hci4: command tx timeout [ 221.748629][ T5827] Bluetooth: hci4: command tx timeout [ 224.437066][ T5827] Bluetooth: hci4: command tx timeout [ 226.815850][ T5827] Bluetooth: hci4: command tx timeout [ 226.827749][ T6636] syz.2.141 (6636) used greatest stack depth: 18376 bytes left [ 230.988207][ T6658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.148'. [ 232.249188][ T6663] fuse: Bad value for 'fd' [ 232.251385][ T6663] fuse: Bad value for 'fd' [ 234.541351][ T87] team0 (unregistering): Port device team_slave_1 removed [ 237.289786][ T87] team0 (unregistering): Port device team_slave_0 removed [ 237.349159][ T5834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 237.378073][ T5834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 237.379282][ T5834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 237.380841][ T5834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 237.428736][ T5834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 237.684302][ T6694] fuse: Bad value for 'fd' [ 237.686263][ T6694] fuse: Bad value for 'fd' [ 239.528609][ T5827] Bluetooth: hci5: command tx timeout [ 240.868979][ T6421] chnl_net:caif_netlink_parms(): no params data found [ 241.612517][ T5827] Bluetooth: hci5: command tx timeout [ 241.772189][ T6421] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.779773][ T6421] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.780047][ T6421] bridge_slave_0: entered allmulticast mode [ 241.790458][ T6421] bridge_slave_0: entered promiscuous mode [ 241.828065][ T6563] chnl_net:caif_netlink_parms(): no params data found [ 241.837026][ T6421] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.837155][ T6421] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.837362][ T6421] bridge_slave_1: entered allmulticast mode [ 241.840031][ T6421] bridge_slave_1: entered promiscuous mode [ 242.187807][ T6421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.190661][ T6684] chnl_net:caif_netlink_parms(): no params data found [ 242.224517][ T6421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.915943][ T6421] team0: Port device team_slave_0 added [ 243.256133][ T6421] team0: Port device team_slave_1 added [ 243.359779][ T6563] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.359911][ T6563] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.360056][ T6563] bridge_slave_0: entered allmulticast mode [ 243.361512][ T6563] bridge_slave_0: entered promiscuous mode [ 243.625866][ T87] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.660039][ T6563] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.660219][ T6563] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.660861][ T6563] bridge_slave_1: entered allmulticast mode [ 243.665994][ T6563] bridge_slave_1: entered promiscuous mode [ 243.682430][ T5827] Bluetooth: hci5: command tx timeout [ 243.944600][ T6421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.944623][ T6421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.944648][ T6421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.290306][ T87] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.327071][ T6421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.327088][ T6421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.327113][ T6421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.327789][ T6684] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.327945][ T6684] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.328132][ T6684] bridge_slave_0: entered allmulticast mode [ 244.331087][ T6684] bridge_slave_0: entered promiscuous mode [ 244.344568][ T6563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.407766][ T6684] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.407998][ T6684] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.408188][ T6684] bridge_slave_1: entered allmulticast mode [ 244.423935][ T6684] bridge_slave_1: entered promiscuous mode [ 244.432069][ T6563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.976744][ T87] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.368063][ T6684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.384512][ T6563] team0: Port device team_slave_0 added [ 245.679601][ T87] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.707337][ T6684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.708798][ T6563] team0: Port device team_slave_1 added [ 245.729877][ T6421] hsr_slave_0: entered promiscuous mode [ 245.731179][ T6421] hsr_slave_1: entered promiscuous mode [ 245.732085][ T6421] debugfs: 'hsr0' already exists in 'hsr' [ 245.732109][ T6421] Cannot create hsr debugfs directory [ 245.762398][ T5834] Bluetooth: hci5: command tx timeout [ 246.115656][ T6684] team0: Port device team_slave_0 added [ 246.124768][ T6563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.124784][ T6563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.124809][ T6563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.128333][ T6684] team0: Port device team_slave_1 added [ 246.143503][ T6563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.143519][ T6563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.143543][ T6563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.657052][ T6684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.657069][ T6684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.657095][ T6684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.684755][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 246.704367][ T5827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 246.712753][ T5827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 246.715470][ T5827] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 246.716229][ T5827] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 246.773624][ T6684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.773642][ T6684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.773667][ T6684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.266233][ T6563] hsr_slave_0: entered promiscuous mode [ 247.267694][ T6563] hsr_slave_1: entered promiscuous mode [ 247.268582][ T6563] debugfs: 'hsr0' already exists in 'hsr' [ 247.268611][ T6563] Cannot create hsr debugfs directory [ 247.597355][ T6684] hsr_slave_0: entered promiscuous mode [ 247.598697][ T6684] hsr_slave_1: entered promiscuous mode [ 247.601891][ T6684] debugfs: 'hsr0' already exists in 'hsr' [ 247.601917][ T6684] Cannot create hsr debugfs directory [ 248.077896][ T87] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.457025][ T87] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.797918][ T87] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.803868][ T5834] Bluetooth: hci1: command tx timeout [ 249.169192][ T87] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.772522][ T6563] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 249.891752][ T6563] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 249.967332][ T6563] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 250.121077][ T6749] chnl_net:caif_netlink_parms(): no params data found [ 250.139863][ T6563] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 250.274784][ T87] bridge_slave_1: left allmulticast mode [ 250.274816][ T87] bridge_slave_1: left promiscuous mode [ 250.275081][ T87] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.344155][ T87] bridge_slave_0: left allmulticast mode [ 250.344185][ T87] bridge_slave_0: left promiscuous mode [ 250.344457][ T87] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.417077][ T87] bridge_slave_1: left allmulticast mode [ 250.417111][ T87] bridge_slave_1: left promiscuous mode [ 250.417350][ T87] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.499835][ T87] bridge_slave_0: left allmulticast mode [ 250.499857][ T87] bridge_slave_0: left promiscuous mode [ 250.500062][ T87] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.596843][ T87] bridge_slave_1: left allmulticast mode [ 250.596875][ T87] bridge_slave_1: left promiscuous mode [ 250.597125][ T87] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.654072][ T87] bridge_slave_0: left allmulticast mode [ 250.654104][ T87] bridge_slave_0: left promiscuous mode [ 250.654347][ T87] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.718684][ T87] bridge_slave_1: left allmulticast mode [ 250.718705][ T87] bridge_slave_1: left promiscuous mode [ 250.718845][ T87] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.794227][ T87] bridge_slave_0: left allmulticast mode [ 250.794259][ T87] bridge_slave_0: left promiscuous mode [ 250.794508][ T87] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.882544][ T5834] Bluetooth: hci1: command tx timeout [ 251.617740][ T87] bond0 (unregistering): Released all slaves [ 251.824950][ T87] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.917279][ T87] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.989638][ T87] bond0 (unregistering): Released all slaves [ 252.963582][ T5834] Bluetooth: hci1: command tx timeout [ 253.565990][ T87] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.662861][ T87] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.686952][ T87] bond0 (unregistering): Released all slaves [ 255.053467][ T5834] Bluetooth: hci1: command tx timeout [ 255.213443][ T87] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.273459][ T87] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.318861][ T87] bond0 (unregistering): Released all slaves [ 255.754768][ T6684] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 255.855089][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.855164][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.937923][ T6684] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 255.968081][ T6749] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.968299][ T6749] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.968494][ T6749] bridge_slave_0: entered allmulticast mode [ 255.973989][ T6749] bridge_slave_0: entered promiscuous mode [ 255.998499][ T6684] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 256.040328][ T6749] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.040487][ T6749] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.040688][ T6749] bridge_slave_1: entered allmulticast mode [ 256.044348][ T6749] bridge_slave_1: entered promiscuous mode [ 256.046556][ T6684] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 256.307523][ T6749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.671384][ T6749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.331959][ T6749] team0: Port device team_slave_0 added [ 257.355992][ T6749] team0: Port device team_slave_1 added [ 258.037756][ T6749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.037771][ T6749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.037795][ T6749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.056492][ T6749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.056509][ T6749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.056533][ T6749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.746185][ T6749] hsr_slave_0: entered promiscuous mode [ 258.747522][ T6749] hsr_slave_1: entered promiscuous mode [ 258.748500][ T6749] debugfs: 'hsr0' already exists in 'hsr' [ 258.748522][ T6749] Cannot create hsr debugfs directory [ 259.064351][ T87] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.215285][ T87] hsr_slave_0: left promiscuous mode [ 259.252519][ T87] hsr_slave_1: left promiscuous mode [ 259.253174][ T87] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.253192][ T87] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.293572][ T87] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.293603][ T87] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.464502][ T87] hsr_slave_0: left promiscuous mode [ 259.492653][ T87] hsr_slave_1: left promiscuous mode [ 259.493580][ T87] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.493608][ T87] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.555290][ T87] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.555322][ T87] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.676004][ T87] veth1_macvtap: left promiscuous mode [ 259.676125][ T87] veth0_macvtap: left promiscuous mode [ 259.676404][ T87] veth1_vlan: left promiscuous mode [ 259.677491][ T87] veth0_vlan: left promiscuous mode [ 259.802933][ T87] veth1_macvtap: left promiscuous mode [ 259.804732][ T87] veth0_macvtap: left promiscuous mode [ 259.804902][ T87] veth1_vlan: left promiscuous mode [ 259.805025][ T87] veth0_vlan: left promiscuous mode [ 260.793231][ T87] team0 (unregistering): Port device team_slave_1 removed [ 260.943424][ T87] team0 (unregistering): Port device team_slave_0 removed [ 263.333356][ T87] team0 (unregistering): Port device team_slave_1 removed [ 263.553150][ T87] team0 (unregistering): Port device team_slave_0 removed [ 268.056013][ T87] team0 (unregistering): Port device team_slave_1 removed [ 268.305158][ T87] team0 (unregistering): Port device team_slave_0 removed [ 270.713392][ T6563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.035210][ T6563] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.116549][ T6587] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.116837][ T6587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.218579][ T6684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.225532][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.225675][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.403957][ T6749] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 271.478665][ T6749] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 271.530727][ T6684] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.532020][ T6749] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 271.586882][ T6749] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 271.660135][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.660389][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.707414][ T6027] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.707652][ T6027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.298974][ T6749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.436728][ T6749] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.495282][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.495428][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.545735][ T3543] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.545879][ T3543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.554961][ T6563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.871665][ T6684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.539847][ T6563] veth0_vlan: entered promiscuous mode [ 273.646073][ T6563] veth1_vlan: entered promiscuous mode [ 273.651860][ T6749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.940882][ T6563] veth0_macvtap: entered promiscuous mode [ 273.948968][ T6684] veth0_vlan: entered promiscuous mode [ 273.955958][ T6563] veth1_macvtap: entered promiscuous mode [ 274.005415][ T6684] veth1_vlan: entered promiscuous mode [ 274.133451][ T6563] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.313045][ T6684] veth0_macvtap: entered promiscuous mode [ 274.364726][ T6684] veth1_macvtap: entered promiscuous mode [ 274.554843][ T6684] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.614686][ T6684] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.726618][ T6587] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.734025][ T6587] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.772909][ T3543] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.781577][ T3543] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.829607][ T6749] veth0_vlan: entered promiscuous mode [ 274.941978][ T5827] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 274.948162][ T5827] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 274.952480][ T5827] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 274.964567][ T5827] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 274.974589][ T5827] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 275.095844][ T6749] veth1_vlan: entered promiscuous mode [ 275.727651][ T6027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.727670][ T6027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.909720][ T6027] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.909741][ T6027] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.950589][ T6749] veth0_macvtap: entered promiscuous mode [ 276.001635][ T6749] veth1_macvtap: entered promiscuous mode [ 276.950946][ T6898] new mount options do not match the existing superblock, will be ignored [ 277.507794][ T37] audit: type=1326 audit(1759208504.983:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6890 comm="syz.1.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeba4feec9 code=0x7ffc0000 [ 277.507852][ T37] audit: type=1326 audit(1759208504.983:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6890 comm="syz.1.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeba4feec9 code=0x7ffc0000 [ 277.507894][ T37] audit: type=1326 audit(1759208504.983:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6890 comm="syz.1.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7feeba4feec9 code=0x7ffc0000 [ 277.507933][ T37] audit: type=1326 audit(1759208504.983:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6890 comm="syz.1.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeba4feec9 code=0x7ffc0000 [ 277.507973][ T37] audit: type=1326 audit(1759208504.983:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6890 comm="syz.1.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeba4feec9 code=0x7ffc0000 [ 277.508012][ T37] audit: type=1326 audit(1759208504.983:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6890 comm="syz.1.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=315 compat=0 ip=0x7feeba4feec9 code=0x7ffc0000 [ 277.508052][ T37] audit: type=1326 audit(1759208504.983:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6890 comm="syz.1.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeba4feec9 code=0x7ffc0000 [ 277.508091][ T37] audit: type=1326 audit(1759208504.983:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6890 comm="syz.1.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeba4feec9 code=0x7ffc0000 [ 277.508131][ T37] audit: type=1326 audit(1759208504.983:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6890 comm="syz.1.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7feeba4feec9 code=0x7ffc0000 [ 277.508171][ T37] audit: type=1326 audit(1759208504.983:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6890 comm="syz.1.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeba4feec9 code=0x7ffc0000 [ 277.508724][ T5834] Bluetooth: hci3: command tx timeout [ 279.942761][ T5827] Bluetooth: hci3: command tx timeout [ 281.141958][ T6918] syz.2.160 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 282.004840][ T5834] Bluetooth: hci3: command tx timeout [ 282.451620][ T6749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.098041][ T5834] Bluetooth: hci3: command tx timeout [ 286.862437][ T5902] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 287.036753][ T5902] usb 8-1: Using ep0 maxpacket: 32 [ 287.050204][ T5902] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.050238][ T5902] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.050278][ T5902] usb 8-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 287.050301][ T5902] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.105077][ T5902] usb 8-1: config 0 descriptor?? [ 287.136003][ T6749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.206935][ T6875] chnl_net:caif_netlink_parms(): no params data found [ 287.269252][ T6958] fuse: Unknown parameter '184467440737095516150xffffffffffffffff' [ 287.437222][ T5902] usbhid 8-1:0.0: can't add hid device: -71 [ 287.437348][ T5902] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 287.459564][ T5902] usb 8-1: USB disconnect, device number 2 [ 292.056672][ T3601] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.061510][ T3601] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.241939][ T3601] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.412657][ T3601] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.303401][ T6875] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.303545][ T6875] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.303780][ T6875] bridge_slave_0: entered allmulticast mode [ 300.311498][ T6875] bridge_slave_0: entered promiscuous mode [ 300.372698][ T6875] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.372859][ T6875] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.373180][ T6875] bridge_slave_1: entered allmulticast mode [ 300.463241][ T6875] bridge_slave_1: entered promiscuous mode [ 300.988627][ T6875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.051187][ T6875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.439463][ C1] vkms_vblank_simulate: vblank timer overrun [ 302.425596][ C1] vkms_vblank_simulate: vblank timer overrun [ 302.448490][ C1] vkms_vblank_simulate: vblank timer overrun [ 303.026236][ C1] vkms_vblank_simulate: vblank timer overrun [ 303.751631][ T7045] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 304.875628][ C1] vkms_vblank_simulate: vblank timer overrun [ 305.066305][ T6875] team0: Port device team_slave_0 added [ 305.079344][ T6875] team0: Port device team_slave_1 added [ 305.634823][ C1] vkms_vblank_simulate: vblank timer overrun [ 305.880339][ T1012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.880360][ T1012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.882482][ T6875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.882494][ T6875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.882514][ T6875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.017049][ T6875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.017062][ T6875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.017077][ T6875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.019470][ T87] bridge_slave_1: left allmulticast mode [ 306.019489][ T87] bridge_slave_1: left promiscuous mode [ 306.019662][ T87] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.176834][ T7067] fuse: Bad value for 'fd' [ 306.224030][ T7067] fuse: Bad value for 'fd' [ 306.379501][ T87] bridge_slave_0: left allmulticast mode [ 306.379534][ T87] bridge_slave_0: left promiscuous mode [ 306.379802][ T87] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.848783][ T87] bridge_slave_1: left allmulticast mode [ 307.848816][ T87] bridge_slave_1: left promiscuous mode [ 307.849057][ T87] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.198093][ T87] bridge_slave_0: left allmulticast mode [ 308.198125][ T87] bridge_slave_0: left promiscuous mode [ 308.198379][ T87] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.534585][ T5827] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 309.540300][ T5827] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 309.541453][ T5827] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 309.543781][ T5827] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 309.555005][ T5827] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 310.828370][ T7096] overlayfs: failed to clone upperpath [ 312.293499][ T5827] Bluetooth: hci4: command tx timeout [ 314.915467][ T5827] Bluetooth: hci4: command tx timeout [ 315.543402][ T87] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.583975][ T87] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.609449][ T87] bond0 (unregistering): Released all slaves [ 315.808810][ T87] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.883180][ T87] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.945810][ T87] bond0 (unregistering): Released all slaves [ 316.052376][ T7084] warning: `syz.7.190' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 316.962995][ T5834] Bluetooth: hci4: command tx timeout [ 317.288714][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.288791][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.868386][ T7133] netlink: 165 bytes leftover after parsing attributes in process `syz.2.202'. [ 320.205150][ T5827] Bluetooth: hci4: command tx timeout [ 321.835148][ T6875] hsr_slave_0: entered promiscuous mode [ 321.836461][ T6875] hsr_slave_1: entered promiscuous mode [ 323.578389][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 323.595820][ T5827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 323.596975][ T5827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 323.598054][ T5827] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 323.599474][ T5827] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 326.271809][ T5827] Bluetooth: hci1: command tx timeout [ 326.430476][ T87] hsr_slave_0: left promiscuous mode [ 326.488156][ T7166] syz.2.210 (7166) used greatest stack depth: 16760 bytes left [ 326.504435][ T87] hsr_slave_1: left promiscuous mode [ 326.505327][ T87] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.505354][ T87] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.823430][ T87] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.742465][ T87] hsr_slave_0: left promiscuous mode [ 327.782377][ T87] hsr_slave_1: left promiscuous mode [ 327.783292][ T87] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.811401][ T87] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.953150][ T87] veth1_macvtap: left promiscuous mode [ 327.953275][ T87] veth0_macvtap: left promiscuous mode [ 327.953565][ T87] veth1_vlan: left promiscuous mode [ 327.953767][ T87] veth0_vlan: left promiscuous mode [ 328.322515][ T5827] Bluetooth: hci1: command tx timeout [ 330.502409][ T5827] Bluetooth: hci1: command tx timeout [ 333.028637][ T5834] Bluetooth: hci1: command tx timeout [ 333.782735][ T7200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.218'. [ 336.881660][ T7217] Malformed UNC in devname [ 336.881660][ T7217] [ 336.881896][ T7217] CIFS: VFS: Malformed UNC in devname [ 337.747289][ T5834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 337.750193][ T5834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 337.751688][ T5834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 337.763181][ T5834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 337.788141][ T5834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 338.215009][ T7230] netlink: 12 bytes leftover after parsing attributes in process `syz.1.223'. [ 340.086349][ T7237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.225'. [ 340.376733][ T5834] Bluetooth: hci5: command tx timeout [ 342.224718][ T7249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.228'. [ 342.402588][ T5827] Bluetooth: hci5: command tx timeout [ 344.506470][ T5827] Bluetooth: hci5: command tx timeout [ 347.989204][ T7272] netlink: 28 bytes leftover after parsing attributes in process `syz.2.233'. [ 348.016934][ T5834] Bluetooth: hci5: command tx timeout [ 348.883234][ T87] team0 (unregistering): Port device team_slave_1 removed [ 353.274106][ T87] team0 (unregistering): Port device team_slave_0 removed [ 355.734975][ T7305] netlink: 104 bytes leftover after parsing attributes in process `syz.1.241'. [ 357.023254][ T87] team0 (unregistering): Port device team_slave_1 removed [ 357.137006][ T87] team0 (unregistering): Port device team_slave_0 removed [ 357.687191][ T7291] lo speed is unknown, defaulting to 1000 [ 357.693804][ T7291] lo speed is unknown, defaulting to 1000 [ 357.755013][ T7291] lo speed is unknown, defaulting to 1000 [ 357.763876][ T7291] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 357.776794][ T7291] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 357.889438][ T7291] lo speed is unknown, defaulting to 1000 [ 357.895126][ T7291] lo speed is unknown, defaulting to 1000 [ 357.898069][ T7291] lo speed is unknown, defaulting to 1000 [ 357.900800][ T7291] lo speed is unknown, defaulting to 1000 [ 357.905212][ T7291] lo speed is unknown, defaulting to 1000 [ 357.907916][ T7291] lo speed is unknown, defaulting to 1000 [ 368.176779][ T7220] lo speed is unknown, defaulting to 1000 [ 368.249869][ T7152] lo speed is unknown, defaulting to 1000 [ 373.018205][ T7391] overlayfs: failed to clone upperpath [ 373.452933][ T7220] chnl_net:caif_netlink_parms(): no params data found [ 373.897189][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 373.910654][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 373.912484][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 373.915497][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 373.922832][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 374.382848][ T7152] chnl_net:caif_netlink_parms(): no params data found [ 374.757826][ T7220] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.758060][ T7220] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.758283][ T7220] bridge_slave_0: entered allmulticast mode [ 374.760453][ T7220] bridge_slave_0: entered promiscuous mode [ 374.826985][ T7396] lo speed is unknown, defaulting to 1000 [ 374.827203][ T7220] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.827315][ T7220] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.827535][ T7220] bridge_slave_1: entered allmulticast mode [ 374.829922][ T7220] bridge_slave_1: entered promiscuous mode [ 375.261898][ T7220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.384013][ T7220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.385032][ T7152] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.385232][ T7152] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.385421][ T7152] bridge_slave_0: entered allmulticast mode [ 375.388123][ T7152] bridge_slave_0: entered promiscuous mode [ 375.493781][ T7152] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.493936][ T7152] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.494127][ T7152] bridge_slave_1: entered allmulticast mode [ 375.498843][ T7152] bridge_slave_1: entered promiscuous mode [ 375.690308][ T7220] team0: Port device team_slave_0 added [ 375.786982][ T7220] team0: Port device team_slave_1 added [ 375.791013][ T7152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.914092][ T7152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.003464][ T5827] Bluetooth: hci3: command tx timeout [ 376.179301][ T7220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.179318][ T7220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.179342][ T7220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.537683][ T7220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.537696][ T7220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.537710][ T7220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.541626][ T7152] team0: Port device team_slave_0 added [ 377.031138][ T7152] team0: Port device team_slave_1 added [ 377.281602][ T87] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.546393][ T7152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.546409][ T7152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.546433][ T7152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.673025][ T7152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.673042][ T7152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.673068][ T7152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.897073][ T87] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.998981][ T7220] hsr_slave_0: entered promiscuous mode [ 378.000367][ T7220] hsr_slave_1: entered promiscuous mode [ 378.001331][ T7220] debugfs: 'hsr0' already exists in 'hsr' [ 378.001354][ T7220] Cannot create hsr debugfs directory [ 378.083373][ T5827] Bluetooth: hci3: command tx timeout [ 378.391139][ T87] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.729888][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.729961][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.897079][ T87] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.021604][ T7152] hsr_slave_0: entered promiscuous mode [ 379.023243][ T7152] hsr_slave_1: entered promiscuous mode [ 379.024077][ T7152] debugfs: 'hsr0' already exists in 'hsr' [ 379.024100][ T7152] Cannot create hsr debugfs directory [ 379.025255][ T7396] chnl_net:caif_netlink_parms(): no params data found [ 379.896749][ T7396] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.896836][ T7396] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.896971][ T7396] bridge_slave_0: entered allmulticast mode [ 379.898455][ T7396] bridge_slave_0: entered promiscuous mode [ 379.984160][ T7396] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.984367][ T7396] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.984589][ T7396] bridge_slave_1: entered allmulticast mode [ 379.989495][ T7396] bridge_slave_1: entered promiscuous mode [ 380.162946][ T5827] Bluetooth: hci3: command tx timeout [ 380.449224][ T7396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.477949][ T7396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.600761][ T87] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.047587][ T87] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.095380][ T7396] team0: Port device team_slave_0 added [ 381.179696][ T7396] team0: Port device team_slave_1 added [ 381.327668][ T87] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.881623][ T87] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.924888][ T7396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.924904][ T7396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.924930][ T7396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.931643][ T7396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.931658][ T7396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.931679][ T7396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.243021][ T5827] Bluetooth: hci3: command tx timeout [ 382.428236][ T7396] hsr_slave_0: entered promiscuous mode [ 382.429581][ T7396] hsr_slave_1: entered promiscuous mode [ 382.430440][ T7396] debugfs: 'hsr0' already exists in 'hsr' [ 382.430463][ T7396] Cannot create hsr debugfs directory [ 382.893788][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 382.898366][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 382.899557][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 382.901104][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 382.903756][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 383.724314][ T7220] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 383.806603][ T7220] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 383.850234][ T7444] lo speed is unknown, defaulting to 1000 [ 383.854986][ T7220] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 383.904759][ T87] bridge_slave_1: left allmulticast mode [ 383.910299][ T87] bridge_slave_1: left promiscuous mode [ 383.910478][ T87] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.985608][ T87] bridge_slave_0: left allmulticast mode [ 383.985641][ T87] bridge_slave_0: left promiscuous mode [ 383.985901][ T87] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.057220][ T87] bridge_slave_1: left allmulticast mode [ 384.057243][ T87] bridge_slave_1: left promiscuous mode [ 384.057402][ T87] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.124224][ T87] bridge_slave_0: left allmulticast mode [ 384.124258][ T87] bridge_slave_0: left promiscuous mode [ 384.124523][ T87] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.200447][ T87] bridge_slave_1: left allmulticast mode [ 384.200470][ T87] bridge_slave_1: left promiscuous mode [ 384.200624][ T87] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.275053][ T87] bridge_slave_0: left allmulticast mode [ 384.275086][ T87] bridge_slave_0: left promiscuous mode [ 384.275325][ T87] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.042630][ T5827] Bluetooth: hci4: command tx timeout [ 385.113421][ T87] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 385.211799][ T87] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 385.266354][ T87] bond0 (unregistering): Released all slaves [ 386.783319][ T87] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 386.853367][ T87] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 386.898807][ T87] bond0 (unregistering): Released all slaves [ 387.135765][ T5827] Bluetooth: hci4: command tx timeout [ 388.453375][ T87] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 388.523391][ T87] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.552922][ T87] bond0 (unregistering): Released all slaves [ 388.584006][ T7220] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 389.214914][ T5827] Bluetooth: hci4: command tx timeout [ 390.736516][ T7444] chnl_net:caif_netlink_parms(): no params data found [ 391.248131][ T7396] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 391.292007][ T7396] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 391.292701][ T5827] Bluetooth: hci4: command tx timeout [ 391.396415][ T7396] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 391.524983][ T7220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.525320][ T7396] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 391.572397][ T7444] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.572541][ T7444] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.572774][ T7444] bridge_slave_0: entered allmulticast mode [ 391.577453][ T7444] bridge_slave_0: entered promiscuous mode [ 391.664059][ T87] hsr_slave_0: left promiscuous mode [ 391.702494][ T87] hsr_slave_1: left promiscuous mode [ 391.703211][ T87] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.731461][ T87] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.908881][ T87] hsr_slave_0: left promiscuous mode [ 391.922567][ T87] hsr_slave_1: left promiscuous mode [ 391.924285][ T87] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.924304][ T87] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.975889][ T87] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.975921][ T87] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.142469][ T87] hsr_slave_0: left promiscuous mode [ 392.182601][ T87] hsr_slave_1: left promiscuous mode [ 392.183541][ T87] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.183568][ T87] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.244999][ T87] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.245037][ T87] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.358335][ T87] veth1_macvtap: left promiscuous mode [ 392.358456][ T87] veth0_macvtap: left promiscuous mode [ 392.358749][ T87] veth1_vlan: left promiscuous mode [ 392.358951][ T87] veth0_vlan: left promiscuous mode [ 392.484327][ T87] veth1_macvtap: left promiscuous mode [ 392.484446][ T87] veth0_macvtap: left promiscuous mode [ 392.485919][ T87] veth1_vlan: left promiscuous mode [ 392.486136][ T87] veth0_vlan: left promiscuous mode [ 393.613343][ T87] team0 (unregistering): Port device team_slave_1 removed [ 393.762987][ T87] team0 (unregistering): Port device team_slave_0 removed [ 396.181385][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 396.193746][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 396.204735][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 396.240296][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 396.241038][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 396.613515][ T87] team0 (unregistering): Port device team_slave_1 removed [ 396.863796][ T87] team0 (unregistering): Port device team_slave_0 removed [ 398.322460][ T5834] Bluetooth: hci1: command tx timeout [ 400.402572][ T5834] Bluetooth: hci1: command tx timeout [ 401.476937][ T87] team0 (unregistering): Port device team_slave_1 removed [ 401.753296][ T87] team0 (unregistering): Port device team_slave_0 removed [ 402.482472][ T5834] Bluetooth: hci1: command tx timeout [ 404.184870][ T7444] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.185075][ T7444] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.185345][ T7444] bridge_slave_1: entered allmulticast mode [ 404.188106][ T7444] bridge_slave_1: entered promiscuous mode [ 404.533767][ T7444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.576797][ T7444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.592444][ T5834] Bluetooth: hci1: command tx timeout [ 405.135959][ T7444] team0: Port device team_slave_0 added [ 405.138855][ T7470] lo speed is unknown, defaulting to 1000 [ 405.161867][ T7444] team0: Port device team_slave_1 added [ 405.514728][ T7444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.514744][ T7444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.514770][ T7444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.532814][ T7444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.532831][ T7444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.532855][ T7444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.895079][ T7444] hsr_slave_0: entered promiscuous mode [ 405.896464][ T7444] hsr_slave_1: entered promiscuous mode [ 406.615438][ T7470] chnl_net:caif_netlink_parms(): no params data found [ 407.032036][ T7396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.145025][ T7470] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.145235][ T7470] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.145468][ T7470] bridge_slave_0: entered allmulticast mode [ 407.148187][ T7470] bridge_slave_0: entered promiscuous mode [ 407.179302][ T7470] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.179509][ T7470] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.179756][ T7470] bridge_slave_1: entered allmulticast mode [ 407.198603][ T7470] bridge_slave_1: entered promiscuous mode [ 407.454814][ T7470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.503622][ T7444] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 407.535281][ T7470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.567171][ T7444] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 407.689714][ T7444] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 407.818619][ T7396] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.819686][ T7444] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 407.874244][ T7470] team0: Port device team_slave_0 added [ 407.906023][ T7470] team0: Port device team_slave_1 added [ 408.098072][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.098209][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.201718][ T7470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.201735][ T7470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.201759][ T7470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.218998][ T7470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.219020][ T7470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.219045][ T7470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.238620][ T6027] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.238759][ T6027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.637744][ T7470] hsr_slave_0: entered promiscuous mode [ 408.639143][ T7470] hsr_slave_1: entered promiscuous mode [ 408.640102][ T7470] debugfs: 'hsr0' already exists in 'hsr' [ 408.640126][ T7470] Cannot create hsr debugfs directory [ 410.507094][ T7444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.700695][ T87] bridge_slave_1: left allmulticast mode [ 410.700728][ T87] bridge_slave_1: left promiscuous mode [ 410.700991][ T87] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.794203][ T87] bridge_slave_0: left allmulticast mode [ 410.794238][ T87] bridge_slave_0: left promiscuous mode [ 410.794572][ T87] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.895353][ T87] bridge_slave_1: left allmulticast mode [ 410.895387][ T87] bridge_slave_1: left promiscuous mode [ 410.895636][ T87] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.003749][ T87] bridge_slave_0: left allmulticast mode [ 411.003782][ T87] bridge_slave_0: left promiscuous mode [ 411.004035][ T87] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.723522][ T87] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 412.803436][ T87] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 412.864847][ T87] bond0 (unregistering): Released all slaves [ 413.093185][ T87] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 413.176948][ T87] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 413.236443][ T87] bond0 (unregistering): Released all slaves [ 413.504026][ T7444] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.609600][ T7396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.654662][ T6027] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.655062][ T6027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.780524][ T6027] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.780674][ T6027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.985811][ T87] hsr_slave_0: left promiscuous mode [ 414.023888][ T87] hsr_slave_1: left promiscuous mode [ 414.024538][ T87] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 414.055483][ T87] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 414.218677][ T87] hsr_slave_0: left promiscuous mode [ 414.259024][ T87] hsr_slave_1: left promiscuous mode [ 414.259642][ T87] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 414.305616][ T87] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 415.013292][ T87] team0 (unregistering): Port device team_slave_1 removed [ 415.143274][ T87] team0 (unregistering): Port device team_slave_0 removed [ 416.344567][ T87] team0 (unregistering): Port device team_slave_1 removed [ 416.463289][ T87] team0 (unregistering): Port device team_slave_0 removed [ 417.698989][ T7396] veth0_vlan: entered promiscuous mode [ 417.725246][ T7470] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 417.848686][ T7470] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 417.901215][ T7470] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 417.953476][ T7470] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 417.996846][ T7396] veth1_vlan: entered promiscuous mode [ 418.159346][ T7444] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.361857][ T7396] veth0_macvtap: entered promiscuous mode [ 418.469713][ T7396] veth1_macvtap: entered promiscuous mode [ 418.586894][ T7396] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.631225][ T7396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.725946][ T7470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.727646][ T2852] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.728259][ T2852] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.728529][ T2852] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.728775][ T2852] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.046000][ T7470] 8021q: adding VLAN 0 to HW filter on device team0 [ 419.254537][ T3601] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.254690][ T3601] bridge0: port 1(bridge_slave_0) entered forwarding state [ 419.359874][ T3601] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.361482][ T3601] bridge0: port 2(bridge_slave_1) entered forwarding state [ 419.405399][ T3601] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.405419][ T3601] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.580494][ T2852] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.580515][ T2852] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.620279][ T7444] veth0_vlan: entered promiscuous mode [ 419.701019][ T7444] veth1_vlan: entered promiscuous mode [ 419.977668][ T7444] veth0_macvtap: entered promiscuous mode [ 420.023138][ T7444] veth1_macvtap: entered promiscuous mode [ 420.234117][ T7444] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 420.351526][ T7444] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 420.429494][ T6587] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.841544][ T87] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.382470][ T57] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.573938][ T57] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.902460][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.902481][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.946846][ T7470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.022059][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.022078][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.686592][ T7608] netlink: 8 bytes leftover after parsing attributes in process `syz.8.204'. [ 430.444914][ T7470] veth0_vlan: entered promiscuous mode [ 430.533823][ T7470] veth1_vlan: entered promiscuous mode [ 430.770237][ T7470] veth0_macvtap: entered promiscuous mode [ 430.783129][ T7470] veth1_macvtap: entered promiscuous mode [ 430.837843][ T7470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.878697][ T7470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.938685][ T6588] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.988751][ T87] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.989325][ T87] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.989410][ T87] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.606021][ T5902] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 432.763033][ T5902] usb 9-1: Using ep0 maxpacket: 8 [ 432.765222][ T5902] usb 9-1: New USB device found, idVendor=10d2, idProduct=0001, bcdDevice= 0.00 [ 432.765250][ T5902] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.791734][ T5902] usb 9-1: config 0 descriptor?? [ 432.804861][ T5902] usblcd 9-1:0.0: Could not find both bulk-in and bulk-out endpoints [ 433.248344][ T5948] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.248365][ T5948] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.278550][ T7678] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 434.643477][ T6156] usb 9-1: USB disconnect, device number 2 [ 435.783846][ T7700] netlink: 'syz.8.281': attribute type 10 has an invalid length. [ 435.839017][ T4467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.839044][ T4467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.269383][ T7700] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 436.275232][ T7697] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 436.568360][ T7711] block nbd5: shutting down sockets [ 439.174218][ T7757] block nbd5: shutting down sockets [ 440.174732][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.174809][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.400245][ T7770] tipc: Enabling of bearer rejected, failed to enable media [ 440.882427][ T6156] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 440.912439][ T7792] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 440.912472][ T7792] overlayfs: missing 'lowerdir' [ 441.069909][ T6156] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 441.069940][ T6156] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.069960][ T6156] usb 6-1: Product: syz [ 441.069975][ T6156] usb 6-1: Manufacturer: syz [ 441.069989][ T6156] usb 6-1: SerialNumber: syz [ 443.241354][ T6156] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 443.343619][ T7838] block nbd8: shutting down sockets [ 443.445547][ T6156] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001000. ret = -EPROTO [ 443.448335][ T6156] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 443.448393][ T6156] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 443.459143][ T6156] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 443.558893][ T6156] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 443.682802][ T6156] usb 6-1: USB disconnect, device number 2 [ 443.889865][ T7846] ip6erspan0: entered allmulticast mode [ 445.800281][ T7888] block nbd8: shutting down sockets [ 446.675740][ T7918] netlink: 'syz.8.339': attribute type 1 has an invalid length. [ 446.924172][ T7926] netlink: 'syz.1.344': attribute type 3 has an invalid length. [ 448.043606][ T7944] fuse: Bad value for 'fd' [ 448.380604][ T5834] Bluetooth: latency 39169 > 499 [ 448.614574][ T7946] block nbd8: shutting down sockets [ 448.997721][ T7973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.357'. [ 449.512483][ T5891] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 449.662388][ T5891] usb 6-1: Using ep0 maxpacket: 32 [ 449.664859][ T5891] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.664892][ T5891] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 449.664931][ T5891] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 449.664960][ T5891] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.670203][ T5891] usb 6-1: config 0 descriptor?? [ 449.995737][ T8004] netlink: 12 bytes leftover after parsing attributes in process `syz.8.368'. [ 450.128333][ T5891] kone 0003:1E7D:2CED.0001: bogus close delimiter [ 450.128354][ T5891] kone 0003:1E7D:2CED.0001: item 0 0 2 10 parsing failed [ 450.129319][ T5891] kone 0003:1E7D:2CED.0001: parse failed [ 450.129395][ T5891] kone 0003:1E7D:2CED.0001: probe with driver kone failed with error -22 [ 450.425192][ T5834] Bluetooth: hci2: command 0x0406 tx timeout [ 450.470217][ T5891] usb 6-1: USB disconnect, device number 3 [ 453.018592][ T8075] capability: warning: `syz.6.392' uses deprecated v2 capabilities in a way that may be insecure [ 453.728870][ T8095] lo speed is unknown, defaulting to 1000 [ 453.763837][ T8098] netlink: 8 bytes leftover after parsing attributes in process `syz.5.399'. [ 454.613910][ T8117] fuse: Bad value for 'fd' [ 454.621955][ T8117] fuse: Bad value for 'fd' [ 454.799746][ T8119] tipc: Started in network mode [ 454.799764][ T8119] tipc: Node identity -, cluster identity 4711 [ 454.799819][ T8119] tipc: Enabling of bearer rejected, failed to enable media [ 456.152697][ T37] kauditd_printk_skb: 14 callbacks suppressed [ 456.152714][ T37] audit: type=1326 audit(1759208685.171:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8130 comm="syz.5.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7d4feec9 code=0x7ffc0000 [ 456.152758][ T37] audit: type=1326 audit(1759208685.191:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8130 comm="syz.5.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7d4feec9 code=0x7ffc0000 [ 456.156167][ T37] audit: type=1326 audit(1759208685.191:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8130 comm="syz.5.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f6f7d4feec9 code=0x7ffc0000 [ 456.156207][ T37] audit: type=1326 audit(1759208685.191:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8130 comm="syz.5.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7d4feec9 code=0x7ffc0000 [ 456.156240][ T37] audit: type=1326 audit(1759208685.191:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8130 comm="syz.5.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7d4feec9 code=0x7ffc0000 [ 456.333199][ T37] audit: type=1326 audit(1759208685.371:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8130 comm="syz.5.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7f6f7d4feec9 code=0x7ffc0000 [ 456.336498][ T37] audit: type=1326 audit(1759208685.371:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8130 comm="syz.5.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7d4feec9 code=0x7ffc0000 [ 456.336547][ T37] audit: type=1326 audit(1759208685.371:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8130 comm="syz.5.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7d4feec9 code=0x7ffc0000 [ 459.141398][ T37] audit: type=1326 audit(1759208688.151:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8172 comm="syz.5.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7d4feec9 code=0x7ffc0000 [ 459.141451][ T37] audit: type=1326 audit(1759208688.171:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8172 comm="syz.5.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7d4feec9 code=0x7ffc0000 [ 459.512299][ C0] sched: DL replenish lagged too much [ 459.587335][ T8179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.426'. [ 473.365146][ T8179] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 473.365352][ T8179] macvlan2: entered allmulticast mode [ 473.365926][ T8179] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 474.201733][ T8219] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 489.057063][ T8298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 493.978203][ T8346] netlink: 4 bytes leftover after parsing attributes in process `syz.2.484'. [ 494.234367][ T8350] 9pnet_fd: Insufficient options for proto=fd [ 499.372808][ T5827] Bluetooth: hci3: command 0x0406 tx timeout [ 501.801021][ T5824] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 501.823202][ T5824] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 501.826061][ T5824] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 501.858206][ T5824] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 501.859064][ T5824] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 501.967476][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.967551][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 509.339933][ T8412] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 509.365810][ T8412] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 509.369360][ T8412] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 509.386947][ T8412] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 509.388819][ T8412] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 510.647998][ T8412] Bluetooth: hci4: command 0x0406 tx timeout [ 511.793962][ T8419] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 511.813260][ T8419] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 511.814466][ T8419] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 511.822043][ T8419] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 511.893234][ T8419] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 512.094525][ T59] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 512.097582][ T59] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 512.098822][ T59] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 512.103960][ T59] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 512.133663][ T59] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 513.995445][ T8423] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 514.020422][ T8423] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 514.030347][ T8423] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 514.031559][ T8423] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 514.042487][ T8423] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 519.052554][ T8428] Bluetooth: hci1: command 0x0406 tx timeout [ 563.628718][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.628797][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 567.705742][ T8432] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 567.759512][ T8432] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 567.772514][ T8432] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 567.798632][ T8432] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 567.799550][ T8432] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 569.441410][ T8437] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 569.454086][ T8426] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 569.456222][ T8426] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 569.457401][ T8426] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 569.460627][ T8426] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 572.305846][ T8442] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 572.321306][ T8442] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 572.339427][ T8442] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 572.340719][ T8442] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 572.341529][ T8442] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 572.511264][ T8437] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 572.531419][ T8437] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 572.539716][ T8437] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 572.554527][ T8437] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 572.565546][ T8437] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 573.993683][ T8392] veth0_to_bond: entered allmulticast mode [ 574.874044][ T8431] lo speed is unknown, defaulting to 1000 [ 575.076130][ T8441] lo speed is unknown, defaulting to 1000 [ 575.152603][ T8443] lo speed is unknown, defaulting to 1000 [ 575.234315][ T8436] lo speed is unknown, defaulting to 1000 [ 576.038418][ T8445] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 576.056280][ T8445] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 576.058004][ T8445] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 576.066384][ T8445] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 576.092955][ T8445] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 576.952451][ T8457] lo speed is unknown, defaulting to 1000 [ 578.471012][ T8443] chnl_net:caif_netlink_parms(): no params data found [ 578.502916][ T8441] chnl_net:caif_netlink_parms(): no params data found [ 578.528249][ T8436] chnl_net:caif_netlink_parms(): no params data found [ 616.162704][ T38] INFO: task kworker/u8:8:3543 blocked for more than 143 seconds. [ 616.162740][ T38] Not tainted syzkaller #0 [ 616.162751][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 616.162763][ T38] task:kworker/u8:8 state:D stack:13080 pid:3543 tgid:3543 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 616.162815][ T38] Workqueue: netns cleanup_net [ 616.162854][ T38] Call Trace: [ 616.162864][ T38] [ 616.162879][ T38] __schedule+0x16f3/0x4c20 [ 616.162933][ T38] ? __lock_acquire+0xab9/0xd20 [ 616.162959][ T38] ? __pfx___schedule+0x10/0x10 [ 616.163003][ T38] ? schedule+0x91/0x360 [ 616.163032][ T38] schedule+0x165/0x360 [ 616.163060][ T38] schedule_timeout+0x9a/0x270 [ 616.163087][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 616.163126][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 616.163144][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 616.163160][ T38] ? wait_for_completion+0x267/0x5d0 [ 616.163189][ T38] wait_for_completion+0x2bf/0x5d0 [ 616.163229][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 616.163263][ T38] ? __init_swait_queue_head+0xa9/0x150 [ 616.163291][ T38] rcu_barrier+0x463/0x570 [ 616.163323][ T38] netdev_run_todo+0x327/0xea0 [ 616.163348][ T38] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 616.163374][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 616.163393][ T38] ? unregister_netdevice_queue+0x1b3/0x380 [ 616.163417][ T38] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 616.163451][ T38] default_device_exit_batch+0x81e/0x890 [ 616.163485][ T38] ? __pfx___might_resched+0x10/0x10 [ 616.163507][ T38] ? __pfx_default_device_exit_batch+0x10/0x10 [ 616.163536][ T38] ? mutex_lock_nested+0x154/0x1d0 [ 616.163568][ T38] ? __pfx_default_device_exit_batch+0x10/0x10 [ 616.163616][ T38] ops_undo_list+0x525/0x990 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 616.163641][ T38] ? __pfx_ops_undo_list+0x10/0x10 [ 616.163670][ T38] cleanup_net+0x4de/0x820 [ 616.163691][ T38] ? __pfx_cleanup_net+0x10/0x10 [ 616.163711][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 616.163728][ [ 616.163728][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 616.163752][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 616.163778][ T38] process_scheduled_works+0xae1/0x17b0 [ 616.163831][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 616.163873][ T38] worker_thread+0x8a0/0xda0 [ 616.163924][ T38] kthread+0x711/0x8a0 [ 616.163946][ T38] ? __pfx_worker_thread+0x10/0x10 [ 616.163969][ T38] ? __pfx_kthread+0x10/0x10 [ 616.163993][ T38] ? __pfx_kthread+0x10/0x10 [ 616.164012][ T38] ret_from_fork+0x436/0x7d0 [ 616.164040][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 616.164071][ T38] ? __switch_to_asm+0x39/0x70 [ 616.164090][ T38] ? __switch_to_asm+0x33/0x70 [ 616.164107][ T38] ? __pfx_kthread+0x10/0x10 [ 616.164126][ T38] ret_from_fork_asm+0x1a/0x30 [ 616.164162][ T38] [ 616.164254][ T38] [ 616.164254][ T38] Showing all locks held in the system: [ 616.164263][ T38] 3 locks held by kworker/u8:0/12: [ 616.164274][ T38] #0: ffff888019481138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 616.164329][ T38] #1: ffffc90000117bc0 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 616.164377][ T38] #2: ffffffff8d3af6f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 616.164422][ T38] 2 locks held by ksoftirqd/0/15: [ 616.164436][ T38] 1 lock held by khungtaskd/38: [ 616.164446][ T38] #0: ffffffff8d3a9d40 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 616.164493][ T38] 3 locks held by kworker/u8:2/43: [ 616.164503][ T38] #0: ffff88814cd0a138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 616.164551][ T38] #1: ffffc90000b47bc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 616.164606][ T38] #2: ffffffff8e6662f8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x119/0x15a0 [ 616.164654][ T38] 3 locks held by kworker/u8:3/57: [ 616.164665][ T38] #0: ffff888019481138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 616.164713][ T38] #1: ffffc9000123fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 616.164760][ T38] #2: ffffffff8e6662f8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 616.164805][ T38] 4 locks held by kworker/u9:0/59: [ 616.164816][ T38] #0: ffff88803571f138 ((wq_completion)hci9#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 616.164867][ T38] #1: ffffc9000125fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 616.164915][ T38] #2: ffff88804aa900a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 616.164963][ T38] #3: ffffffff8e7cdd98 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 616.165012][ T38] 2 locks held by kworker/u8:4/68: [ 616.165028][ T38] 3 locks held by kworker/u8:6/1012: [ 616.165052][ T38] 4 locks held by kworker/u8:8/3543: [ 616.165062][ T38] #0: ffff88801a2ec138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 616.165110][ T38] #1: ffffc9000d837bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 616.165158][ T38] #2: ffffffff8e6593a0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820 [ 616.165199][ T38] #3: ffffffff8d3af6f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 616.165244][ T38] 3 locks held by kworker/u8:10/3574: [ 616.165254][ T38] #0: ffff888019481138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 616.165301][ T38] #1: ffffc9000da17bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 616.165349][ T38] #2: ffff88805afe0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 616.165402][ T38] 1 lock held by dhcpcd/5476: [ 616.165412][ T38] #0: ffffffff8e6662f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 616.165459][ T38] 2 locks held by getty/5574: [ 616.165469][ T38] #0: ffff88823bf368a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 616.165514][ T38] #1: ffffc90003e832e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 616.165564][ T38] 6 locks held by kworker/u9:3/5824: [ 616.165574][ T38] #0: ffff88803d27d938 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 616.165628][ T38] #1: ffffc90004cffbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 616.165676][ T38] #2: ffff88805fa70e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 616.165723][ T38] #3: ffff88805fa700a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 616.165764][ T38] #4: ffffffff8e7cdd98 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 616.165806][ T38] #5: ffff88805f508b58 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 616.165853][ T38] 4 locks held by kworker/u9:4/5827: [ 616.165864][ T38] #0: ffff88805dcf2138 ((wq_completion)hci5#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 616.165916][ T38] #1: ffffc90004d2fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 616.165964][ T38] #2: ffff888061c680a8 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xb1/0x1500 [ 616.166015][ T38] #3: ffffffff8e7cdd98 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 616.166064][ T38] 4 locks held by kworker/u9:7/5834: [ 616.166075][ T38] #0: ffff88805c783938 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 616.166122][ T38] #1: ffffc90004e1fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 616.166170][ T38] #2: ffff888064340e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 616.166216][ T38] #3: ffff8880643400a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 616.166261][ T38] 2 locks held by kworker/0:9/6157: [ 616.166273][ T38] 3 locks held by kworker/u8:19/6588: [ 616.166283][ T38] #0: ffff888019481138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 616.166331][ T38] #1: ffffc90004a2fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 616.166379][ T38] #2: ffff88805e900898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 616.166434][ T38] 7 locks held by kworker/0:11/8221: [ 616.166446][ T38] 4 locks held by kworker/0:12/8222: [ 616.166456][ T38] #0: ffff8880398df138 ((wq_completion)wg-crypt-wg0#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 616.166509][ T38] #1: ffffc9000a78fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 616.166571][ T38] #2: ffffffff8d24a6a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 616.166624][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 616.166673][ T38] 1 lock held by syz.8.491/8363: [ 616.166683][ T38] #0: ffffffff8e669598 (bpf_dispatcher_xdp.mutex){+.+.}-{4:4}, at: bpf_dispatcher_change_prog+0x9c/0xc90 [ 616.166738][ T38] 1 lock held by dhcpcd/8406: [ 616.166749][ T38] #0: ffff88805c995078 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 616.166801][ T38] 1 lock held by dhcpcd/8407: [ 616.166811][ T38] #0: ffff88805c994378 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 616.166862][ T38] 4 locks held by kworker/u9:1/8409: [ 616.166873][ T38] #0: ffff88805e0fc138 ((wq_completion)hci6#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 616.166925][ T38] #1: ffffc90007f2fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 616.166973][ T38] #2: ffff88806c0e00a8 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xb1/0x1500 [ 616.167024][ T38] #3: ffffffff8e7cdd98 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 616.167074][ T38] 4 locks held by kworker/u9:2/8412: [ 616.167084][ T38] #0: ffff888036f6a938 ((wq_completion)hci7#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 616.167137][ T38] #1: ffffc9000cef7bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 616.167185][ T38] #2: ffff88804a4980a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 616.167232][ T38] #3: ffffffff8e7cdd98 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 616.167281][ T38] 4 locks held by kworker/u9:5/8419: [ 616.167291][ T38] #0: ffff888060993138 ((wq_completion)hci8#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 616.167343][ T38] #1: ffffc9000d1f7bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 616.167391][ T38] #2: ffff8880385cc0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 616.167439][ T38] #3: ffffffff8e7cdd98 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 616.167487][ T38] 5 locks held by kworker/u9:6/8423: [ 616.167498][ T38] #0: ffff888037eba138 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 616.167545][ T38] #1: ffffc9000d217bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 616.167599][ T38] #2: ffff88805de64e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 616.167645][ T38] #3: ffff88805de640a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 616.167687][ T38] #4: ffffffff8e7cdd98 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 616.167729][ T38] 4 locks held by kworker/u9:8/8426: [ 616.167739][ T38] #0: ffff88805bbf0938 ((wq_completion)hci12#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 616.167791][ T38] #1: ffffc9000d227bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 616.167839][ T38] #2: ffff8880a0b6c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 616.167886][ T38] #3: ffffffff8e7cdd98 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 616.167935][ T38] 4 locks held by kworker/u9:9/8428: [ 616.167945][ T38] #0: ffff888066ee3938 ((wq_completion)hci11#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 616.167997][ T38] #1: ffffc9000d237bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 616.168045][ T38] #2: ffff88809e65c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 616.168092][ T38] #3: ffffffff8e7cdd98 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 616.168141][ T38] 1 lock held by syz-executor/8431: [ 616.168151][ T38] #0: ffffffff8e6662f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 616.168201][ T38] 4 locks held by kworker/u9:10/8432: [ 616.168212][ T38] #0: ffff8880981cb938 ((wq_completion)hci10#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 616.168264][ T38] #1: ffffc9000d257bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 616.168312][ T38] #2: ffff888098ea40a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 616.168359][ T38] #3: ffffffff8e7cdd98 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 616.168407][ T38] 2 locks held by syz-executor/8436: [ 616.168418][ T38] #0: ffffffff8ddce360 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 616.168464][ T38] #1: ffffffff8e6662f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 616.168514][ T38] 4 locks held by kworker/u9:11/8437: [ 616.168524][ T38] #0: ffff88805fabf938 ((wq_completion)hci14#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 616.168576][ T38] #1: ffffc9000d277bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 616.168629][ T38] #2: ffff88807d0e40a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 616.168677][ T38] #3: ffffffff8e7cdd98 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 616.168726][ T38] 2 locks held by syz-executor/8441: [ 616.168737][ T38] #0: ffffffff8ddce360 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 616.168782][ T38] #1: ffffffff8e6662f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 616.168832][ T38] 4 locks held by kworker/u9:12/8442: [ 616.168842][ T38] #0: ffff88805bbf0138 ((wq_completion)hci13#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 616.168893][ T38] #1: ffffc9000d2a7bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 616.168939][ T38] #2: ffff8880a0f740a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 616.168987][ T38] #3: ffffffff8e7cdd98 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 616.169035][ T38] 2 locks held by syz-executor/8443: [ 616.169046][ T38] #0: ffffffff8ddce360 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 616.169093][ T38] #1: ffffffff8e6662f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 616.169143][ T38] 1 lock held by syz-executor/8457: [ 616.169154][ T38] #0: ffffffff8e6662f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70 [ 616.169205][ T38] 1 lock held by dhcpcd/8495: [ 616.169216][ T38] #0: ffff888089f06350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 616.169265][ T38] [ 616.169270][ T38] ============================================= [ 616.169270][ T38] [ 616.169291][ T38] NMI backtrace for cpu 1 [ 616.169316][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 616.169365][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 616.169390][ T38] Call Trace: [ 616.169406][ T38] [ 616.169422][ T38] dump_stack_lvl+0x189/0x250 [ 616.169496][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 616.169563][ T38] ? __pfx__printk+0x10/0x10 [ 616.169613][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 616.169640][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 616.169667][ T38] ? __pfx__printk+0x10/0x10 [ 616.169693][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 616.169719][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 616.169747][ T38] watchdog+0xf93/0xfe0 [ 616.169777][ T38] ? watchdog+0x1de/0xfe0 [ 616.169807][ T38] kthread+0x711/0x8a0 [ 616.169827][ T38] ? __pfx_watchdog+0x10/0x10 [ 616.169850][ T38] ? __pfx_kthread+0x10/0x10 [ 616.169872][ T38] ? __pfx_kthread+0x10/0x10 [ 616.169891][ T38] ret_from_fork+0x436/0x7d0 [ 616.169918][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 616.169949][ T38] ? __switch_to_asm+0x39/0x70 [ 616.169966][ T38] ? __switch_to_asm+0x33/0x70 [ 616.169983][ T38] ? __pfx_kthread+0x10/0x10 [ 616.170001][ T38] ret_from_fork_asm+0x1a/0x30 [ 616.170035][ T38] [ 616.170043][ T38] Sending NMI from CPU 1 to CPUs 0: [ 616.170068][ C0] NMI backtrace for cpu 0 [ 616.170083][ C0] CPU: 0 UID: 0 PID: 8221 Comm: kworker/0:11 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 616.170102][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 616.170113][ C0] Workqueue: events_power_efficient neigh_periodic_work [ 616.170137][ C0] RIP: 0010:validate_chain+0x0/0x2140 [ 616.170155][ C0] Code: 44 89 e6 4c 89 ff 29 f5 0f 82 91 fe ff ff eb b3 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <55> 41 57 41 56 41 55 41 54 53 48 81 ec e0 00 00 00 49 89 cf 65 48 [ 616.170169][ C0] RSP: 0018:ffffc9000a77e640 EFLAGS: 00000086 [ 616.170183][ C0] RAX: ffffffff92285b88 RBX: 0000000000000007 RCX: 323f3b98c6c4dc32 [ 616.170195][ C0] RDX: 0000000000000000 RSI: ffff8880331d47b8 RDI: ffff8880331d3b80 [ 616.170207][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff81721165 [ 616.170217][ C0] R10: ffffc9000a77e898 R11: ffffffff81a94d40 R12: 000000005dedd45e [ 616.170229][ C0] R13: ffff8880331d46a0 R14: ffff8880331d47b8 R15: 323f3b98c6c4dc32 [ 616.170242][ C0] FS: 0000000000000000(0000) GS:ffff888127025000(0000) knlGS:0000000000000000 [ 616.170255][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 616.170267][ C0] CR2: 00007f878ddea610 CR3: 00000000832b4000 CR4: 00000000003526f0 [ 616.170282][ C0] Call Trace: [ 616.170288][ C0] [ 616.170294][ C0] __lock_acquire+0xab9/0xd20 [ 616.170318][ C0] ? unwind_next_frame+0xa5/0x2390 [ 616.170340][ C0] lock_acquire+0x120/0x360 [ 616.170359][ C0] ? unwind_next_frame+0xa5/0x2390 [ 616.170384][ C0] ? unwind_next_frame+0xa5/0x2390 [ 616.170405][ C0] ? nft_do_chain+0x409/0x1920 [ 616.170423][ C0] ? unwind_next_frame+0xa5/0x2390 [ 616.170443][ C0] unwind_next_frame+0xc2/0x2390 [ 616.170463][ C0] ? unwind_next_frame+0xa5/0x2390 [ 616.170486][ C0] ? unwind_next_frame+0xa5/0x2390 [ 616.170508][ C0] ? nft_synproxy_do_eval+0x345/0x570 [ 616.170528][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 616.170548][ C0] arch_stack_walk+0x11c/0x150 [ 616.170564][ C0] ? nft_do_chain+0x409/0x1920 [ 616.170583][ C0] stack_trace_save+0x9c/0xe0 [ 616.170600][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 616.170617][ C0] ? kasan_save_free_info+0x46/0x50 [ 616.170634][ C0] ? consume_skb+0x9e/0xf0 [ 616.170648][ C0] ? nft_synproxy_eval_v4+0x376/0x560 [ 616.170665][ C0] ? nft_synproxy_do_eval+0x345/0x570 [ 616.170684][ C0] ? __lock_acquire+0xab9/0xd20 [ 616.170704][ C0] kasan_save_track+0x3e/0x80 [ 616.170721][ C0] ? kasan_save_track+0x3e/0x80 [ 616.170739][ C0] ? kasan_save_free_info+0x46/0x50 [ 616.170754][ C0] ? __kasan_slab_free+0x5b/0x80 [ 616.170773][ C0] ? kmem_cache_free+0x195/0x510 [ 616.170793][ C0] ? nft_synproxy_eval_v4+0x376/0x560 [ 616.170811][ C0] ? nft_synproxy_do_eval+0x345/0x570 [ 616.170827][ C0] ? nft_do_chain+0x409/0x1920 [ 616.170869][ C0] kasan_save_free_info+0x46/0x50 [ 616.170885][ C0] __kasan_slab_free+0x5b/0x80 [ 616.170904][ C0] ? nft_synproxy_eval_v4+0x376/0x560 [ 616.170920][ C0] kmem_cache_free+0x195/0x510 [ 616.170944][ C0] nft_synproxy_eval_v4+0x376/0x560 [ 616.170964][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 616.170983][ C0] ? nf_ip_checksum+0x13c/0x510 [ 616.171003][ C0] nft_synproxy_do_eval+0x345/0x570 [ 616.171023][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 616.171049][ C0] nft_do_chain+0x409/0x1920 [ 616.171072][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 616.171099][ C0] ? rcu_is_watching+0x15/0xb0 [ 616.171114][ C0] ? trace_irq_disable+0x37/0x110 [ 616.171133][ C0] ? preempt_schedule_irq+0xde/0x150 [ 616.171158][ C0] nft_do_chain_inet+0x25d/0x340 [ 616.171175][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 616.171192][ C0] ? __lock_acquire+0xab9/0xd20 [ 616.171217][ C0] ? NF_HOOK+0x9a/0x3a0 [ 616.171238][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 616.171256][ C0] nf_hook_slow+0xc2/0x220 [ 616.171280][ C0] NF_HOOK+0x206/0x3a0 [ 616.171301][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 616.171323][ C0] ? NF_HOOK+0x9a/0x3a0 [ 616.171342][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 616.171361][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 616.171385][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 616.171407][ C0] ? skb_dst+0x4f/0xd0 [ 616.171428][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 616.171450][ C0] NF_HOOK+0x30c/0x3a0 [ 616.171472][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 616.171492][ C0] ? NF_HOOK+0x9a/0x3a0 [ 616.171512][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 616.171534][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 616.171559][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 616.171579][ C0] __netif_receive_skb+0x143/0x380 [ 616.171599][ C0] ? rt_spin_unlock+0x65/0x80 [ 616.171621][ C0] ? process_backlog+0x27b/0x900 [ 616.171641][ C0] process_backlog+0x31e/0x900 [ 616.171667][ C0] __napi_poll+0xb6/0x540 [ 616.171688][ C0] net_rx_action+0x707/0xe00 [ 616.171716][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 616.171738][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 616.171765][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 616.171787][ C0] handle_softirqs+0x22f/0x710 [ 616.171810][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 616.171838][ C0] __local_bh_enable_ip+0x179/0x270 [ 616.171857][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 616.171877][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 616.171896][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 616.171916][ C0] ? neigh_periodic_work+0x57/0xe90 [ 616.171937][ C0] neigh_periodic_work+0xc37/0xe90 [ 616.171960][ C0] ? neigh_periodic_work+0x57/0xe90 [ 616.171981][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 616.172001][ C0] process_scheduled_works+0xae1/0x17b0 [ 616.172032][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 616.172058][ C0] worker_thread+0x8a0/0xda0 [ 616.172088][ C0] kthread+0x711/0x8a0 [ 616.172103][ C0] ? __pfx_worker_thread+0x10/0x10 [ 616.172122][ C0] ? __pfx_kthread+0x10/0x10 [ 616.172138][ C0] ? __pfx_kthread+0x10/0x10 [ 616.172153][ C0] ret_from_fork+0x436/0x7d0 [ 616.172173][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 616.172196][ C0] ? __switch_to_asm+0x39/0x70 [ 616.172211][ C0] ? __switch_to_asm+0x33/0x70 [ 616.172226][ C0] ? __pfx_kthread+0x10/0x10 [ 616.172240][ C0] ret_from_fork_asm+0x1a/0x30 [ 616.172265][ C0] [ 616.422536][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 616.422561][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 616.422591][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 616.422603][ T38] Call Trace: [ 616.422611][ T38] [ 616.422620][ T38] dump_stack_lvl+0x99/0x250 [ 616.422653][ T38] ? __asan_memcpy+0x40/0x70 [ 616.422675][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 616.422702][ T38] ? __pfx__printk+0x10/0x10 [ 616.422736][ T38] vpanic+0x281/0x750 [ 616.422758][ T38] ? __pfx_vpanic+0x10/0x10 [ 616.422776][ T38] ? preempt_schedule+0xae/0xc0 [ 616.422803][ T38] ? preempt_schedule_common+0x83/0xd0 [ 616.422834][ T38] panic+0xb9/0xc0 [ 616.422852][ T38] ? __pfx_panic+0x10/0x10 [ 616.422872][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 616.422900][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 616.422927][ T38] watchdog+0xfd2/0xfe0 [ 616.422957][ T38] ? watchdog+0x1de/0xfe0 [ 616.422986][ T38] kthread+0x711/0x8a0 [ 616.423008][ T38] ? __pfx_watchdog+0x10/0x10 [ 616.423030][ T38] ? __pfx_kthread+0x10/0x10 [ 616.423053][ T38] ? __pfx_kthread+0x10/0x10 [ 616.423071][ T38] ret_from_fork+0x436/0x7d0 [ 616.423097][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 616.423127][ T38] ? __switch_to_asm+0x39/0x70 [ 616.423145][ T38] ? __switch_to_asm+0x33/0x70 [ 616.423162][ T38] ? __pfx_kthread+0x10/0x10 [ 616.423180][ T38] ret_from_fork_asm+0x1a/0x30 [ 616.423215][ T38] [ 616.423354][ T38] Kernel Offset: disabled