last executing test programs: 31.360540363s ago: executing program 4 (id=616): r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r2, 0x0, 0x0) 30.299473234s ago: executing program 4 (id=618): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x2a05004, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) syz_emit_ethernet(0x42, &(0x7f00000001c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x8, 0x6, 0x0, @local, @private=0xa010102, {[@timestamp_addr={0x44, 0xc, 0x6, 0x1, 0x0, [{@loopback, 0xfffffffc}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) 28.331417999s ago: executing program 0 (id=630): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000480)=""/223, 0xdf}, {&(0x7f0000004b40)=""/4112, 0x1010}, {&(0x7f0000000a80)=""/4067, 0xfe3}, {&(0x7f0000000940)=""/197, 0xc5}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f00000001c0)=""/47, 0x2f}], 0x7}, 0x10022) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0xffc3, 0x0}, 0x80) 27.390041471s ago: executing program 0 (id=632): syz_open_dev$dri(0x0, 0xd21, 0x0) socket(0x2a, 0x6, 0xffff7fff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x200, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@remote, @in=@loopback, 0x4e20, 0x13, 0x4e22, 0x1, 0xa, 0x80, 0x0, 0x2e}, {0x9, 0x7, 0xfffffffffffffff8, 0x9, 0x20d80eb7, 0x7, 0x6, 0x1000}, {0x4, 0x0, 0x0, 0xab4}, 0xfffffff8, 0x6e6bb9, 0x0, 0x1}, {{@in6=@loopback, 0x4d5, 0x32}, 0x2, @in6=@mcast2, 0x3506, 0x2, 0x3, 0x1, 0x2, 0x6507, 0x5}}, 0xe8) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x84, 0x10, 0x403, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x88afa5b4, 0x40}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @batadv={{0xb}, {0xffffffffffffffa7, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xc, 0x1, 'BATMAN_V'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xc, 0x1, 'BATMAN_V'}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7}]}, 0x84}}, 0x0) 27.012951488s ago: executing program 1 (id=636): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(r0, &(0x7f0000002080)={&(0x7f00000001c0)=@hci={0x1f, 0x0, 0x1}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000440)="6769b75cbbba40629301af8c18213fce8c130f93be241ad37294efed043e96bb1bcf81c1b9757bc0ae09891e86e23cb661233e12f2ef8c96a270a0c560e2778ee4730145fd6eb7653d005921b7fc3681b95fa2da06b1ad4ebe81", 0x5a}, {&(0x7f00000004c0)="e5d3039ed39f5ce21ebe91293bb06dfd568947666d1b1e3757b0e1fe6f0eb0db3b8f95698a72c7d4fe69ae32f0cafe92b863b936f0890e779845038583489916bd9e8669f9e0d5ee3bd45527145aa99187a7f3676b7416bead2590b28d49e53fa35e5607aa29a801362b07450b3865a2f00da9158642d28413cc68", 0x7b}, {&(0x7f0000000580)="8e955c910377aa209a68166b16bb27011ade67c62c658609dccc5408746d73c0b6a65dfdda34f401bbc930f3c6d6c03f0fbfaccfa9230412f4730a2c1188dd17f5d71580ab8840a66f92f95a80f77722249bf72210cc935a97a390b836646b519aa8bd6226130297abdc3cebec0ff9e7035df26840e0e98066faa85b477f299090b62b5906c2e9b1f0746c21d216e00513302d45dd265a627a9192732eb28cc585192fb136296767c4bb48a2186b6194850be316", 0xb4}, {&(0x7f0000000a80)="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", 0xe5f}], 0x4, &(0x7f00000023c0)=ANY=[@ANYBLOB="9800000000000000160200000b00000009f6d67d0310aee8e7f1ac842d308f6e4f6b968c4d2e24bce8063e16a8b7f99e686951657063b14dd7d88bfc26f044db5964803fea8978a703cd420b041654d8be29b05946bca8783b139272817e173d5ee4187bbf822e033d24e62b8f677f401844452dea0e3e99fc3abd5d7a0d0c21d489d1e6b0f368730d53d0665a3a8e6c747329613015ae00300000000000000007010000ffffffffe35405e7f232f6333c435d415c45bbff682cb5257d521f5e7632f137d9168ad0b0000000000000000801000006000000ec6901ce7a4f0f8d50db87a5a705d384fc05ed1673281bcc742998ad592f8cae55daeeb54de331fdcaf61b5517f0660efdb9b42b7fc8aef8840a97c39f07c49f972005109c08643dbfdf55075d5db99a98edb84adef3883559ef2e67fd947a29b47224f11e7549e6020ec5ccf8d567a91317cd06f4cdbb12270c0bc6c92ffc0f2ac28d25f6be526bbf6be9689d9c42edf8ed3774fe1cefc93ce2f7ef00000000f800000000000000010100000300000038b95a23e209a7128198c9c3917514d80a74e3efe6da2b863ee76b0160d5a9e7670bff28073459ac4bebc5c317a6495de5809f8fe3b8d8b9e9b2efce3210faaa67f95c5ddbc4ed589e2b2af18fd5e50f0901acdff1ceddcbc1add92be4c56120364f680cc284001f2e9cc09b8495a3b9d4eed6ff0e6ef00684068318c24ef5166e3e936a38a594e338560063d40a0adbf679a4d4303f35e2178b59cc4d0f4c1037a459ba71be46fa47e708ba90cd6c1e03c1df79708bc07acc39039389e4044bcfe8be2927fcaee8c7bab1ef280e2bb90a3dc729266f16f3bb55b85a74bd85e099587be9adb300008000"], 0x2f0}, 0x0) 27.012202706s ago: executing program 4 (id=637): r0 = creat(&(0x7f0000000140)='./file0\x00', 0x182) close(r0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, 0x0, 0x0) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x8, r3}, 0x10) r4 = socket$pptp(0x18, 0x1, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x200400, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 26.591590194s ago: executing program 1 (id=641): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a"], 0x7c}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x4080) 26.570251332s ago: executing program 1 (id=643): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x7b408477ebd014ef) r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x5b) keyctl$revoke(0x3, r4) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x3f00000000000000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0) 25.155337457s ago: executing program 1 (id=644): syz_genetlink_get_family_id$ethtool(&(0x7f0000001200), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r0 = syz_usb_connect$uac1(0x0, 0xb1, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000000000106b1d0101890f0000030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c24020000000300000000000924060006010000000924030000000005000b2406", @ANYBLOB], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41a}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x189083) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r2, 0x40045702, &(0x7f0000000040)) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000080)={0x1, 0xfc, 0x5d8, 0x1, 0xe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) clock_settime(0x17, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r5, 0x0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x309}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f000050a000/0x13000)=nil, 0x13000}, 0x1}) readv(r6, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/224, 0x20}], 0x1000000000000108) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) 25.095601266s ago: executing program 4 (id=646): r0 = userfaultfd(0x801) ioctl$UFFDIO_CONTINUE(r0, 0xc028aa05, &(0x7f0000000000)={{&(0x7f0000afc000/0x3000)=nil, 0x3000}, 0x1000000}) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000080)='g', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r5 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r4, 0xffffffffffffffff, r5, 0x0) 23.354745296s ago: executing program 4 (id=649): ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f00000000c0), 0x0, 0x80800}) openat$ublk_ctrl(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = memfd_secret(0x80000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x890d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') read$FUSE(r3, &(0x7f00000033c0)={0x2020}, 0x2020) symlinkat(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) futimesat(r0, 0x0, 0x0) 23.071819348s ago: executing program 3 (id=653): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a"], 0x7c}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x4080) 22.934844478s ago: executing program 3 (id=654): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce220000"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 22.767754333s ago: executing program 3 (id=656): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x182000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000280)={0x80, 0x960, 0x140, 0x258, 0x6, 0x8, 0x8, 0x0, {0x10, 0x5, 0x1}, {0x8, 0x1000008, 0x40000000}, {0xc0, 0x400006, 0x400000}, {0x0, 0x3, 0x8}, 0x0, 0x10, 0x2, 0xf37, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0x40000c, 0x6, 0x0, 0x0, 0x100, 0x3, 0x7}) 22.69671459s ago: executing program 3 (id=657): r0 = socket$l2tp(0x2, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000200)={0x1d, r5}, 0x10) sendmsg$can_bcm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=r6, @ANYRES64=r5, @ANYRES64=r4, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) sendmsg$sock(r6, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000100)=0x1008001, 0x4) 21.284227605s ago: executing program 3 (id=659): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0x2, {0x3}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44060}, 0x98) 21.268310584s ago: executing program 1 (id=660): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) cachestat(r0, &(0x7f0000000040)={0x405}, &(0x7f000009de80), 0x0) 21.235722541s ago: executing program 1 (id=661): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_CHANINFO(r0, 0x80206403, &(0x7f0000044840)={0x80000000, &(0x7f0000006080), 0x0, 0x0}) socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x71096000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, 0x8000}, 0x28) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x10c}}, 0x28040800) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80785659, &(0x7f0000000440)={0x0, @frame_sync}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) socket$inet6(0xa, 0x5, 0x0) r4 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0x80003125, 0x3cd0, 0x4004, 0x181}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_FILES(r4, 0x20, &(0x7f0000000000)=[r4], 0x1) 21.171773987s ago: executing program 2 (id=662): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x4004) 21.171281401s ago: executing program 0 (id=663): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x1) 21.121280538s ago: executing program 0 (id=664): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a"], 0x7c}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x4080) 21.029113011s ago: executing program 0 (id=665): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="5b5e26bd7000ffdbdf2501000000050004000100000008000600ac1414aa08000b00e6"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x90) syz_emit_vhci(0x0, 0xf) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000100)=0x30) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f00000003c0), &(0x7f0000000400)=0x4) 20.843507367s ago: executing program 2 (id=666): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce220000"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 20.506511396s ago: executing program 2 (id=667): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x6f}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@random="00008000", @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @loopback, @loopback, {[], @mld={0x83, 0x0, 0x0, 0x9, 0xc036, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) 20.405964379s ago: executing program 3 (id=668): syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) syz_open_dev$MSR(0x0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x3c) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/4, 0x4}], 0x1}, 0x4}], 0x1, 0x40000121, 0x0) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x90903, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x49815, 0x3}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) mount(&(0x7f00000003c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000300)='udf\x00', 0x200480, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) gettid() ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4bfa, &(0x7f0000000080)=""/2) syz_extract_tcp_res(&(0x7f00000000c0), 0x9, 0xfffffffb) socket(0x10, 0x3, 0x0) 20.347794216s ago: executing program 4 (id=669): r0 = socket$l2tp(0x2, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000200)={0x1d, r5}, 0x10) sendmsg$can_bcm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=r6, @ANYRES64=r5, @ANYRES64=r4, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) sendmsg$sock(r6, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000100)=0x1008001, 0x4) 19.557287287s ago: executing program 0 (id=670): r0 = creat(&(0x7f0000000140)='./file0\x00', 0x182) close(r0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, 0x0, 0x0) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x8, r3}, 0x10) r4 = socket$pptp(0x18, 0x1, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x200400, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 19.55616079s ago: executing program 2 (id=671): syz_genetlink_get_family_id$ethtool(&(0x7f0000001200), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r0 = syz_usb_connect$uac1(0x0, 0xb1, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000000000106b1d0101890f0000030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c24020000000300000000000924060006010000000924030000000005000b2406", @ANYBLOB], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41a}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x189083) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r2, 0x40045702, &(0x7f0000000040)) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000080)={0x1, 0xfc, 0x5d8, 0x1, 0xe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) clock_settime(0x17, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r5, 0x0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x309}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f000050a000/0x13000)=nil, 0x13000}, 0x1}) readv(r6, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/224, 0x20}], 0x1000000000000108) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) 16.437994884s ago: executing program 2 (id=672): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x9, 0x687, 0x6, 0xfffa}, 0x20, [0x108e8fd7, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x20002, 0x20003, 0xffffff00, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x7, 0x5b2, 0x2, 0x0, 0x6, 0x4, 0x0, 0x2ab, 0x4, 0x10007, 0x4, 0x3c5b, 0x1, 0xb, 0x40000009, 0x9, 0x1f461e2c, 0x1000004, 0xe661, 0x7fff, 0xb, 0x43, 0x7fff, 0x4c72, 0x80000000, 0xf28, 0xffffffff, 0x11, 0x4, 0x2, 0x1, 0x406, 0x3, 0x2, 0x5, 0x3e, 0x8b, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0xcb, 0x0, 0x7, 0x6, 0x8, 0x5, 0x1, 0x40], [0x10000009, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1001, 0xfffffffc, 0xe0000000, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0xfffffffc, 0x0, 0xfffffffe, 0x8, 0x4, 0x8002, 0x5, 0x3fe, 0x401, 0x400006, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x5, 0x5, 0x6, 0xb, 0x38, 0xfffffffe, 0x5, 0x16c, 0x2, 0x7f, 0x7, 0x1, 0x3, 0x9, 0x425, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0x9, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x2, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0x2, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0xfffffffa, 0x2, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0xe, 0x8f, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0xffffffff, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0xff, 0xf, 0x5, 0x2, 0x6, 0x5, 0x0, 0x10000003, 0xfffffffe, 0x1ff, 0x3, 0x7, 0xfd, 0x3, 0x101, 0x10003, 0x6, 0x7fff, 0x1, 0xe620, 0x2002, 0xf, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x1d, 0xffffffff, 0x80000004, 0x7, 0x8, 0xc9, 0xee5, 0x0, 0xffff, 0x3, 0x7b, 0x20100, 0x9602, 0x4, 0x5, 0xffff, 0x6, 0x1, 0x90080, 0x6, 0x2, 0x30b1d693, 0x6, 0xc, 0xcc, 0x5, 0x6c1b, 0x800, 0x9, 0x8000009, 0xb1c, 0x1, 0x1fd, 0xffff3441, 0xfff]}, 0x45c) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49db, 0x4, 0xfff9, 0x3fff, 0x18, "ec28a144f13d7607"}) r1 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0xa, 0x5, 0xfff, 0x80000000, 0x8, 0x0, 0x200, 0x9}}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0xffffef7b, 0xfffffffa, 0xb2, 0x9, "1beb00000e001000000008010100"}) r5 = syz_open_pts(r0, 0x20800) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000100)=0x44) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161140, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x51}, 0x9c) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0, 0x5}, &(0x7f0000000300)=0x8) 15.212909302s ago: executing program 2 (id=673): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0x26020480) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0x12) 6.018173089s ago: executing program 32 (id=661): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_CHANINFO(r0, 0x80206403, &(0x7f0000044840)={0x80000000, &(0x7f0000006080), 0x0, 0x0}) socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x71096000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, 0x8000}, 0x28) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x10c}}, 0x28040800) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80785659, &(0x7f0000000440)={0x0, @frame_sync}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) socket$inet6(0xa, 0x5, 0x0) r4 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0x80003125, 0x3cd0, 0x4004, 0x181}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_FILES(r4, 0x20, &(0x7f0000000000)=[r4], 0x1) 5.002755369s ago: executing program 33 (id=668): syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) syz_open_dev$MSR(0x0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x3c) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/4, 0x4}], 0x1}, 0x4}], 0x1, 0x40000121, 0x0) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x90903, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x49815, 0x3}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) mount(&(0x7f00000003c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000300)='udf\x00', 0x200480, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) gettid() ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4bfa, &(0x7f0000000080)=""/2) syz_extract_tcp_res(&(0x7f00000000c0), 0x9, 0xfffffffb) socket(0x10, 0x3, 0x0) 4.934589857s ago: executing program 34 (id=669): r0 = socket$l2tp(0x2, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000200)={0x1d, r5}, 0x10) sendmsg$can_bcm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=r6, @ANYRES64=r5, @ANYRES64=r4, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) sendmsg$sock(r6, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000100)=0x1008001, 0x4) 3.885694692s ago: executing program 35 (id=670): r0 = creat(&(0x7f0000000140)='./file0\x00', 0x182) close(r0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, 0x0, 0x0) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x8, r3}, 0x10) r4 = socket$pptp(0x18, 0x1, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x200400, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 0s ago: executing program 36 (id=673): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0x26020480) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0x12) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.130' (ED25519) to the list of known hosts. [ 57.170354][ T5577] cgroup: Unknown subsys name 'net' [ 57.411558][ T5577] cgroup: Unknown subsys name 'cpuset' [ 57.489699][ T5577] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.700659][ T5577] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 61.876048][ T5591] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.878427][ T5591] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.879311][ T5591] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.883771][ T5591] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.886775][ T5591] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.915807][ T5591] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.916290][ T5591] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.918265][ T5591] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.919431][ T5591] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.919836][ T5591] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.976301][ T5591] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.979365][ T5591] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.981128][ T5591] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.981886][ T5591] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.984633][ T5591] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.052018][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 62.052238][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.052986][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 62.053230][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 62.053675][ T5607] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.054137][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 62.054550][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 62.055493][ T4908] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.056464][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.056941][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.101843][ T5589] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.101928][ T5589] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.102003][ T5589] bridge_slave_0: entered allmulticast mode [ 63.102662][ T5589] bridge_slave_0: entered promiscuous mode [ 63.131443][ T5589] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.131514][ T5589] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.131612][ T5589] bridge_slave_1: entered allmulticast mode [ 63.133016][ T5589] bridge_slave_1: entered promiscuous mode [ 63.178251][ T5604] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.178341][ T5604] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.178625][ T5604] bridge_slave_0: entered allmulticast mode [ 63.180120][ T5604] bridge_slave_0: entered promiscuous mode [ 63.220338][ T5604] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.220381][ T5604] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.220545][ T5604] bridge_slave_1: entered allmulticast mode [ 63.221187][ T5604] bridge_slave_1: entered promiscuous mode [ 63.234641][ T5589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.275095][ T5589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.287162][ T5600] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.288186][ T5600] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.288308][ T5600] bridge_slave_0: entered allmulticast mode [ 63.290009][ T5600] bridge_slave_0: entered promiscuous mode [ 63.320181][ T5604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.320276][ T5600] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.320773][ T5600] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.320839][ T5600] bridge_slave_1: entered allmulticast mode [ 63.321513][ T5600] bridge_slave_1: entered promiscuous mode [ 63.350030][ T5604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.360590][ T5605] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.360681][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.360830][ T5605] bridge_slave_0: entered allmulticast mode [ 63.362159][ T5605] bridge_slave_0: entered promiscuous mode [ 63.366177][ T5589] team0: Port device team_slave_0 added [ 63.366866][ T5593] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.366949][ T5593] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.367062][ T5593] bridge_slave_0: entered allmulticast mode [ 63.368284][ T5593] bridge_slave_0: entered promiscuous mode [ 63.390069][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.390154][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.390252][ T5605] bridge_slave_1: entered allmulticast mode [ 63.392372][ T5605] bridge_slave_1: entered promiscuous mode [ 63.394892][ T5589] team0: Port device team_slave_1 added [ 63.395024][ T5593] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.395105][ T5593] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.395364][ T5593] bridge_slave_1: entered allmulticast mode [ 63.396933][ T5593] bridge_slave_1: entered promiscuous mode [ 63.411870][ T5600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.444051][ T5604] team0: Port device team_slave_0 added [ 63.446558][ T5600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.479896][ T5604] team0: Port device team_slave_1 added [ 63.492002][ T5605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.492523][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.492534][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.492555][ T5589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.496335][ T5593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.520977][ T5605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.521645][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.521657][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.521680][ T5589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.524009][ T5593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.537751][ T5600] team0: Port device team_slave_0 added [ 63.565676][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.565692][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.565714][ T5604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.568189][ T5600] team0: Port device team_slave_1 added [ 63.591842][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.591859][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.591885][ T5604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.604398][ T5605] team0: Port device team_slave_0 added [ 63.606587][ T5593] team0: Port device team_slave_0 added [ 63.635146][ T5605] team0: Port device team_slave_1 added [ 63.637420][ T5593] team0: Port device team_slave_1 added [ 63.650245][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.650259][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.650281][ T5600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.677247][ T5589] hsr_slave_0: entered promiscuous mode [ 63.678272][ T5589] hsr_slave_1: entered promiscuous mode [ 63.680568][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.680580][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.680611][ T5600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.718668][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.718684][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.718706][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.720055][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.720067][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.720087][ T5593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.734524][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.734539][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.734560][ T5593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.735138][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.735147][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.735167][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.741031][ T5604] hsr_slave_0: entered promiscuous mode [ 63.742169][ T5604] hsr_slave_1: entered promiscuous mode [ 63.742692][ T5604] debugfs: 'hsr0' already exists in 'hsr' [ 63.742722][ T5604] Cannot create hsr debugfs directory [ 63.838874][ T5600] hsr_slave_0: entered promiscuous mode [ 63.840195][ T5600] hsr_slave_1: entered promiscuous mode [ 63.840756][ T5600] debugfs: 'hsr0' already exists in 'hsr' [ 63.840771][ T5600] Cannot create hsr debugfs directory [ 63.919195][ T5591] Bluetooth: hci0: command tx timeout [ 63.989220][ T5591] Bluetooth: hci2: command tx timeout [ 63.999187][ T5591] Bluetooth: hci1: command tx timeout [ 64.069198][ T5591] Bluetooth: hci4: command tx timeout [ 64.149212][ T5591] Bluetooth: hci3: command tx timeout [ 64.596637][ T5605] hsr_slave_0: entered promiscuous mode [ 64.597128][ T5605] hsr_slave_1: entered promiscuous mode [ 64.597541][ T5605] debugfs: 'hsr0' already exists in 'hsr' [ 64.597555][ T5605] Cannot create hsr debugfs directory [ 64.745958][ T5593] hsr_slave_0: entered promiscuous mode [ 64.746427][ T5593] hsr_slave_1: entered promiscuous mode [ 64.746756][ T5593] debugfs: 'hsr0' already exists in 'hsr' [ 64.746769][ T5593] Cannot create hsr debugfs directory [ 65.137028][ T5589] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.171251][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.172072][ T5589] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.201530][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.202464][ T5589] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.251142][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.255063][ T5589] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.272182][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.305316][ T5604] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.330945][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.332207][ T5604] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.355461][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.356566][ T5604] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.400784][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.405487][ T5604] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.422141][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.465094][ T5605] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.501322][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.502811][ T5605] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.551450][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.557712][ T5605] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.582425][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.583923][ T5605] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.621186][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.663251][ T5600] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.701276][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.704552][ T5600] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.722035][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.726868][ T5600] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.761734][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.769977][ T5600] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.801964][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.855200][ T5593] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.891458][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.893126][ T5589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.896316][ T5593] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.931269][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.933403][ T5593] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.971013][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.974335][ T5593] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.989319][ T5591] Bluetooth: hci0: command tx timeout [ 66.010927][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.040711][ T5589] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.052011][ T5604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.067523][ T1511] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.067649][ T1511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.069273][ T59] Bluetooth: hci2: command tx timeout [ 66.069327][ T5591] Bluetooth: hci1: command tx timeout [ 66.084783][ T1511] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.084852][ T1511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.112076][ T5604] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.130824][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.133859][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.133900][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.149323][ T5591] Bluetooth: hci4: command tx timeout [ 66.168074][ T1174] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.168146][ T1174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.200134][ T5605] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.203852][ T5600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.229417][ T5591] Bluetooth: hci3: command tx timeout [ 66.232014][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.232086][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.263085][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.263184][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.291205][ T5600] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.318919][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.327065][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.351859][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.352029][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.373210][ T5593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.390609][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 66.390659][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 66.440597][ T5593] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.461983][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.462070][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.490019][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.490092][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.027406][ T5589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.153277][ T5589] veth0_vlan: entered promiscuous mode [ 67.183875][ T5604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.184746][ T5589] veth1_vlan: entered promiscuous mode [ 67.222551][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.275921][ T5589] veth0_macvtap: entered promiscuous mode [ 67.305201][ T5589] veth1_macvtap: entered promiscuous mode [ 67.329643][ T5600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.331887][ T5593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.367360][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.376936][ T5605] veth0_vlan: entered promiscuous mode [ 67.395952][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.418213][ T67] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.421011][ T5605] veth1_vlan: entered promiscuous mode [ 67.425523][ T67] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.436702][ T67] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.457198][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.606872][ T5600] veth0_vlan: entered promiscuous mode [ 67.607640][ T5593] veth0_vlan: entered promiscuous mode [ 67.637552][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.637575][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.638649][ T5605] veth0_macvtap: entered promiscuous mode [ 67.662503][ T5600] veth1_vlan: entered promiscuous mode [ 67.663415][ T5593] veth1_vlan: entered promiscuous mode [ 67.666816][ T5605] veth1_macvtap: entered promiscuous mode [ 67.711060][ T5604] veth0_vlan: entered promiscuous mode [ 67.712184][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.712200][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.745914][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.747300][ T5604] veth1_vlan: entered promiscuous mode [ 67.767410][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.783659][ T1468] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.785852][ T1468] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.786303][ T5600] veth0_macvtap: entered promiscuous mode [ 67.787752][ T1468] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.791699][ T1468] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.802303][ T5593] veth0_macvtap: entered promiscuous mode [ 67.807001][ T5600] veth1_macvtap: entered promiscuous mode [ 67.854239][ T5593] veth1_macvtap: entered promiscuous mode [ 67.935278][ T5781] fuse: Bad value for 'fd' [ 67.953759][ T5604] veth0_macvtap: entered promiscuous mode [ 67.960956][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.976976][ T5604] veth1_macvtap: entered promiscuous mode [ 67.981497][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.982967][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.006050][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.009173][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.009189][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.026069][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.031015][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.035106][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.061577][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.069284][ T5591] Bluetooth: hci0: command tx timeout [ 68.074804][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.082932][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.090034][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.114493][ T5784] Zero length message leads to an empty skb [ 68.133998][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.135582][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.139366][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.139383][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.150801][ T5591] Bluetooth: hci1: command tx timeout [ 68.150827][ T5591] Bluetooth: hci2: command tx timeout [ 68.229469][ T59] Bluetooth: hci4: command tx timeout [ 68.257130][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.309248][ T59] Bluetooth: hci3: command tx timeout [ 68.374503][ T67] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.387959][ T67] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.399445][ T67] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.400761][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.410982][ T5792] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 68.480994][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.481014][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.511832][ T5792] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 68.517723][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.517742][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.592103][ T1468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.592116][ T1468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.627821][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.627839][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.662543][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.662563][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.711143][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.711163][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.605286][ T36] audit: type=1326 audit(1782269121.535:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5807 comm="syz.1.10" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b420dce59 code=0x7ffc0000 [ 69.605326][ T36] audit: type=1326 audit(1782269121.535:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5807 comm="syz.1.10" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b420dce59 code=0x7ffc0000 [ 69.605354][ T36] audit: type=1326 audit(1782269121.535:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5807 comm="syz.1.10" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b420dce59 code=0x7ffc0000 [ 69.605381][ T36] audit: type=1326 audit(1782269121.535:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5807 comm="syz.1.10" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b420dce59 code=0x7ffc0000 [ 69.605407][ T36] audit: type=1326 audit(1782269121.535:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5807 comm="syz.1.10" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f2b420dce59 code=0x7ffc0000 [ 69.605435][ T36] audit: type=1326 audit(1782269121.535:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5807 comm="syz.1.10" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b420dce59 code=0x7ffc0000 [ 69.605462][ T36] audit: type=1326 audit(1782269121.535:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5807 comm="syz.1.10" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b420dce59 code=0x7ffc0000 [ 69.605496][ T36] audit: type=1326 audit(1782269121.535:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5807 comm="syz.1.10" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b420dce59 code=0x7ffc0000 [ 69.605534][ T36] audit: type=1326 audit(1782269121.535:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5807 comm="syz.1.10" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b420dce59 code=0x7ffc0000 [ 69.605561][ T36] audit: type=1326 audit(1782269121.535:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5807 comm="syz.1.10" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f2b420dce59 code=0x7ffc0000 [ 69.893936][ T5820] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 69.893955][ T5820] UDF-fs: Scanning with blocksize 512 failed [ 69.894306][ T5820] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 69.894319][ T5820] UDF-fs: Scanning with blocksize 1024 failed [ 69.894547][ T5820] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 69.894560][ T5820] UDF-fs: Scanning with blocksize 2048 failed [ 69.894766][ T5820] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 69.902904][ T5820] UDF-fs: Scanning with blocksize 4096 failed [ 69.997226][ T5822] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15'. [ 70.149152][ T59] Bluetooth: hci0: command tx timeout [ 70.229228][ T59] Bluetooth: hci2: command tx timeout [ 70.229335][ T5591] Bluetooth: hci1: command tx timeout [ 70.309263][ T59] Bluetooth: hci4: command tx timeout [ 70.389123][ T59] Bluetooth: hci3: command tx timeout [ 70.461398][ T5782] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 70.596069][ T5798] syz.4.5 (5798) used greatest stack depth: 18728 bytes left [ 70.609690][ T5782] usb 4-1: Using ep0 maxpacket: 16 [ 70.613926][ T5782] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 70.613950][ T5782] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 70.615668][ T5782] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 70.615692][ T5782] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 70.615708][ T5782] usb 4-1: SerialNumber: syz [ 70.691320][ T5782] usb 4-1: 0:2 : does not exist [ 70.691364][ T5782] usb 4-1: unit 5 not found! [ 71.917811][ T5849] vti0: entered promiscuous mode [ 74.455999][ T9] usb 4-1: USB disconnect, device number 2 [ 76.188842][ T5703] IPVS: starting estimator thread 0... [ 76.319169][ T5913] IPVS: using max 37 ests per chain, 88800 per kthread [ 76.643277][ T820] cfg80211: failed to load regulatory.db [ 79.809371][ T43] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 79.960743][ T43] usb 5-1: too many endpoints for config 0 interface 0 altsetting 254: 223, using maximum allowed: 30 [ 79.960786][ T43] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 79.960810][ T43] usb 5-1: config 0 interface 0 has no altsetting 0 [ 79.960837][ T43] usb 5-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 79.960857][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.966821][ T43] usb 5-1: config 0 descriptor?? [ 82.127573][ T5978] syz.3.66 uses obsolete (PF_INET,SOCK_PACKET) [ 82.399255][ T821] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 82.619164][ T821] usb 1-1: Using ep0 maxpacket: 8 [ 82.620937][ T821] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 82.620979][ T821] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 82.621036][ T821] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 82.621056][ T821] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 82.621084][ T821] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 82.621117][ T821] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 82.621136][ T821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.929242][ T821] usb 1-1: GET_CAPABILITIES returned 0 [ 82.929466][ T821] usbtmc 1-1:16.0: can't read capabilities [ 83.149436][ T820] usb 1-1: USB disconnect, device number 2 [ 83.324235][ T6002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.75'. [ 83.339542][ T6002] gtp0: entered allmulticast mode [ 83.487440][ T43] usbhid 5-1:0.0: can't add hid device: -71 [ 83.487538][ T43] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 83.504322][ T43] usb 5-1: USB disconnect, device number 2 [ 86.721156][ T6012] Illegal XDP return value 4294967274 on prog (id 7) dev N/A, expect packet loss! [ 88.109831][ T6042] futex_wake_op: syz.0.83 tries to shift op by 144; fix this program [ 88.110473][ T6042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.83'. [ 88.110547][ T6042] netlink: 'syz.0.83': attribute type 2 has an invalid length. [ 88.148013][ T6042] can0: slcan on ttyS3. [ 89.161143][ T6057] netlink: 60 bytes leftover after parsing attributes in process `syz.2.92'. [ 89.236656][ T6060] netlink: 60 bytes leftover after parsing attributes in process `syz.2.92'. [ 89.238050][ T6057] netlink: 60 bytes leftover after parsing attributes in process `syz.2.92'. [ 89.819054][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 89.849056][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 89.859057][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 90.265205][ T6074] mmap: syz.1.91 (6074) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 90.439057][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 90.866062][ T6031] can0 (unregistered): slcan off ttyS3. [ 91.559542][ T6066] pim6reg: entered allmulticast mode [ 91.565549][ T6078] pim6reg: left allmulticast mode [ 93.161378][ T6112] netlink: 60 bytes leftover after parsing attributes in process `syz.0.104'. [ 94.001270][ T6121] netlink: 60 bytes leftover after parsing attributes in process `syz.0.104'. [ 94.006260][ T6117] netlink: 60 bytes leftover after parsing attributes in process `syz.0.104'. [ 94.069074][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 94.079073][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 94.099098][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 94.119091][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 94.129083][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 94.139108][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 95.197848][ T6149] futex_wake_op: syz.2.107 tries to shift op by 144; fix this program [ 95.198313][ T6149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.107'. [ 95.198366][ T6149] netlink: 'syz.2.107': attribute type 2 has an invalid length. [ 95.996266][ T6162] fuse: fd is not a fuse device [ 97.288477][ T5722] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 97.453736][ T6179] netlink: 60 bytes leftover after parsing attributes in process `syz.2.119'. [ 97.454465][ T6179] netlink: 60 bytes leftover after parsing attributes in process `syz.2.119'. [ 97.454967][ T6179] netlink: 60 bytes leftover after parsing attributes in process `syz.2.119'. [ 97.519096][ T5722] usb 5-1: Using ep0 maxpacket: 8 [ 97.522364][ T5722] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 97.522390][ T5722] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.522407][ T5722] usb 5-1: Product: syz [ 97.522418][ T5722] usb 5-1: Manufacturer: syz [ 97.522430][ T5722] usb 5-1: SerialNumber: syz [ 97.571404][ T5722] usb 5-1: config 0 descriptor?? [ 97.588819][ T5722] gspca_main: se401-2.14.0 probing 047d:5003 [ 97.908482][ T6194] 9p: Bad value for 'rfdno' [ 98.195568][ T5722] input: se401 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input5 [ 98.221709][ T5722] usb 5-1: USB disconnect, device number 3 [ 99.419145][ T820] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 99.628594][ T820] usb 5-1: Using ep0 maxpacket: 8 [ 99.646381][ T820] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 99.646427][ T820] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 99.646450][ T820] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.709921][ T820] usb 5-1: config 0 descriptor?? [ 100.262393][ T5722] IPVS: starting estimator thread 0... [ 100.267284][ T6225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.267601][ T6225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.352066][ T820] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 100.380250][ T6247] IPVS: using max 21 ests per chain, 50400 per kthread [ 100.751701][ T6261] netlink: 60 bytes leftover after parsing attributes in process `syz.0.145'. [ 100.752633][ T6261] netlink: 60 bytes leftover after parsing attributes in process `syz.0.145'. [ 100.753796][ T6261] netlink: 60 bytes leftover after parsing attributes in process `syz.0.145'. [ 100.790776][ T5722] usb 5-1: USB disconnect, device number 4 [ 101.322873][ T6273] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 101.322898][ T6273] UDF-fs: Scanning with blocksize 512 failed [ 101.327914][ T6273] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 101.327937][ T6273] UDF-fs: Scanning with blocksize 1024 failed [ 101.328253][ T6273] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 101.328267][ T6273] UDF-fs: Scanning with blocksize 2048 failed [ 101.378029][ T6273] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 101.378050][ T6273] UDF-fs: Scanning with blocksize 4096 failed [ 102.408195][ T6296] netlink: 60 bytes leftover after parsing attributes in process `syz.1.156'. [ 102.439159][ T821] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 102.589266][ T821] usb 5-1: Using ep0 maxpacket: 8 [ 102.605971][ T6302] netlink: 4 bytes leftover after parsing attributes in process `syz.3.157'. [ 102.664039][ T6303] netlink: 12 bytes leftover after parsing attributes in process `syz.3.157'. [ 103.103272][ T821] usb 5-1: unable to get BOS descriptor or descriptor too short [ 103.104736][ T821] usb 5-1: config 4 interface 0 has no altsetting 0 [ 103.109157][ T821] usb 5-1: string descriptor 0 read error: -22 [ 103.109222][ T821] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 103.109242][ T821] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 103.173499][ T821] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 103.187604][ T821] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 103.187888][ T821] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 103.187929][ T821] usb 5-1: media controller created [ 103.243060][ T821] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 103.324461][ T6305] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.324988][ T6305] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.388004][ T821] zl10353_read_register: readreg error (reg=127, ret==0) [ 103.447258][ T821] usb 5-1: USB disconnect, device number 5 [ 103.465802][ T6305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.470717][ T6305] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.829209][ T43] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 104.021758][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 104.021790][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.021820][ T43] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 104.021838][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.024014][ T43] usb 3-1: config 0 descriptor?? [ 104.231435][ T6315] netlink: 12 bytes leftover after parsing attributes in process `syz.2.161'. [ 104.296841][ T6079] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.298544][ T6079] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.298758][ T6079] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.298787][ T6079] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.451966][ T6329] bridge1: entered promiscuous mode [ 104.452090][ T6329] bridge1: entered allmulticast mode [ 105.441537][ T6351] netlink: 4 bytes leftover after parsing attributes in process `syz.4.174'. [ 105.443169][ T6351] netlink: 12 bytes leftover after parsing attributes in process `syz.4.174'. [ 105.573908][ T43] usbhid 3-1:0.0: can't add hid device: -71 [ 105.573994][ T43] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 105.576270][ T43] usb 3-1: USB disconnect, device number 2 [ 105.653233][ T6351] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.653640][ T6351] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.730767][ T6364] fuse: Bad value for 'fd' [ 106.914914][ T6351] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.919542][ T6351] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.120397][ T6383] futex_wake_op: syz.0.186 tries to shift op by 144; fix this program [ 107.122734][ T6383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.186'. [ 107.122798][ T6383] netlink: 'syz.0.186': attribute type 2 has an invalid length. [ 107.848540][ T6383] slcan: can't register candev [ 108.381934][ T67] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.384009][ T67] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.385347][ T67] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.385384][ T67] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.614099][ T6405] overlayfs: failed to clone upperpath [ 108.675312][ T6409] vti0: entered promiscuous mode [ 108.798624][ T821] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 108.950907][ T821] usb 5-1: too many endpoints for config 0 interface 0 altsetting 254: 223, using maximum allowed: 30 [ 108.950947][ T821] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 108.950970][ T821] usb 5-1: config 0 interface 0 has no altsetting 0 [ 108.950994][ T821] usb 5-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 108.951013][ T821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.954083][ T821] usb 5-1: config 0 descriptor?? [ 109.180769][ T6430] netlink: 4 bytes leftover after parsing attributes in process `syz.1.201'. [ 109.187957][ T6430] netlink: 12 bytes leftover after parsing attributes in process `syz.1.201'. [ 110.171535][ T6431] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.171763][ T6431] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.391792][ T6431] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.395423][ T6431] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.205514][ T161] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.225461][ T6449] bridge1: entered promiscuous mode [ 111.225487][ T6449] bridge1: entered allmulticast mode [ 111.226824][ T161] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.227444][ T161] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.227582][ T161] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.714213][ T821] usbhid 5-1:0.0: can't add hid device: -71 [ 112.714352][ T821] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 112.717256][ T821] usb 5-1: USB disconnect, device number 6 [ 118.412132][ T6562] vti0: entered promiscuous mode [ 122.222192][ T43] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 123.010017][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.010061][ T43] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 123.010082][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.015188][ T43] usb 5-1: config 0 descriptor?? [ 123.226725][ T43] usbhid 5-1:0.0: can't add hid device: -71 [ 123.226808][ T43] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 123.269740][ T43] usb 5-1: USB disconnect, device number 7 [ 123.769226][ T43] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 123.919190][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 123.923836][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.923878][ T43] usb 5-1: New USB device found, idVendor=0f11, idProduct=3321, bcdDevice= 0.40 [ 123.923900][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.972794][ T43] usb 5-1: config 0 descriptor?? [ 124.392712][ T43] usbhid 5-1:0.0: can't add hid device: -71 [ 124.392803][ T43] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 124.414161][ T43] usb 5-1: USB disconnect, device number 8 [ 127.130668][ T6680] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 127.131123][ T6680] team0: Device ipvlan2 is up. Set it down before adding it as a team port [ 127.499189][ T36] kauditd_printk_skb: 30 callbacks suppressed [ 127.499206][ T36] audit: type=1326 audit(1782269179.425:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6681 comm="syz.0.282" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4c4848ce59 code=0x0 [ 127.830630][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.830676][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 128.391537][ T6704] vti0: entered promiscuous mode [ 137.487493][ T6730] netlink: 60 bytes leftover after parsing attributes in process `syz.4.298'. [ 137.849122][ T6731] netlink: 60 bytes leftover after parsing attributes in process `syz.4.298'. [ 137.854294][ T6732] netlink: 60 bytes leftover after parsing attributes in process `syz.4.298'. [ 139.272872][ T6760] netlink: 12 bytes leftover after parsing attributes in process `syz.3.308'. [ 139.272901][ T6760] IPv6: NLM_F_CREATE should be specified when creating new route [ 139.272969][ T6760] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 139.272993][ T6760] IPv6: NLM_F_CREATE should be set when creating new route [ 139.273012][ T6760] IPv6: NLM_F_CREATE should be set when creating new route [ 139.276506][ T6760] netlink: 12 bytes leftover after parsing attributes in process `syz.3.308'. [ 139.276579][ T6760] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 140.348724][ T6810] fuse: Bad value for 'fd' [ 141.145178][ T6829] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 141.472137][ T6840] netlink: 60 bytes leftover after parsing attributes in process `syz.0.343'. [ 141.472838][ T6840] netlink: 60 bytes leftover after parsing attributes in process `syz.0.343'. [ 141.473209][ T6840] netlink: 60 bytes leftover after parsing attributes in process `syz.0.343'. [ 142.523572][ T6850] bond1: entered promiscuous mode [ 142.955813][ T6871] sctp: [Deprecated]: syz.1.355 (pid 6871) Use of struct sctp_assoc_value in delayed_ack socket option. [ 142.955813][ T6871] Use struct sctp_sack_info instead [ 143.239169][ T820] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 143.389142][ T820] usb 5-1: Using ep0 maxpacket: 16 [ 143.479955][ T820] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 143.479989][ T820] usb 5-1: config 0 interface 0 has no altsetting 0 [ 143.482654][ T820] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 143.482680][ T820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.482697][ T820] usb 5-1: Product: syz [ 143.482709][ T820] usb 5-1: Manufacturer: syz [ 143.482720][ T820] usb 5-1: SerialNumber: syz [ 143.487046][ T820] usb 5-1: config 0 descriptor?? [ 143.766767][ T6888] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 144.170640][ C0] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-75): ignored [ 144.178234][ T820] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input6 [ 144.451302][ C0] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 144.458098][ T820] imon:send_packet: packet tx failed (-71) [ 144.469257][ T820] imon 5-1:0.0: panel buttons/knobs setup failed [ 145.049114][ T820] rc_core: IR keymap rc-imon-pad not found [ 145.049133][ T820] Registered IR keymap rc-empty [ 145.052132][ T820] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 145.052146][ T820] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 145.052944][ T820] imon:send_packet: packet tx failed (-71) [ 145.090620][ T820] imon 5-1:0.0: remote input dev register failed [ 145.090681][ T820] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 145.250786][ T820] imon 5-1:0.0: unable to initialize intf0, err 0 [ 145.250799][ T820] imon:imon_probe: failed to initialize context! [ 145.250806][ T820] imon 5-1:0.0: unable to register, err -19 [ 145.258869][ T820] usb 5-1: USB disconnect, device number 9 [ 145.870378][ T6914] netlink: 76 bytes leftover after parsing attributes in process `syz.2.369'. [ 146.239311][ T6928] fuse: fd is not a fuse device [ 146.383275][ T6931] kAFS: unable to lookup cell 'ÿ' [ 146.387493][ T6931] netlink: 'syz.0.372': attribute type 10 has an invalid length. [ 146.595546][ T6931] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 146.703183][ T6931] team0: Port device netdevsim1 added [ 146.808659][ T36] audit: type=1326 audit(1782269198.735:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6923 comm="syz.1.373" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b420dce59 code=0x7ffc0000 [ 146.819215][ T36] audit: type=1326 audit(1782269198.735:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6923 comm="syz.1.373" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b420dce59 code=0x7ffc0000 [ 146.819261][ T36] audit: type=1326 audit(1782269198.745:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6923 comm="syz.1.373" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b420dce59 code=0x7ffc0000 [ 146.819289][ T36] audit: type=1326 audit(1782269198.745:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6923 comm="syz.1.373" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b420dce59 code=0x7ffc0000 [ 146.819316][ T36] audit: type=1326 audit(1782269198.745:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6923 comm="syz.1.373" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f2b420dce59 code=0x7ffc0000 [ 146.867613][ T36] audit: type=1326 audit(1782269198.795:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6923 comm="syz.1.373" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b420dce59 code=0x7ffc0000 [ 146.867651][ T36] audit: type=1326 audit(1782269198.795:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6923 comm="syz.1.373" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2b420dce59 code=0x7ffc0000 [ 146.867678][ T36] audit: type=1326 audit(1782269198.795:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6923 comm="syz.1.373" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b420dce59 code=0x7ffc0000 [ 146.867705][ T36] audit: type=1326 audit(1782269198.795:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6923 comm="syz.1.373" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b420dce59 code=0x7ffc0000 [ 146.867731][ T36] audit: type=1326 audit(1782269198.795:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6923 comm="syz.1.373" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b420dce59 code=0x7ffc0000 [ 148.556681][ T6967] fuse: Bad value for 'fd' [ 149.099974][ T6982] netlink: 32 bytes leftover after parsing attributes in process `syz.4.394'. [ 149.530093][ T6997] IPv6: NLM_F_CREATE should be specified when creating new route [ 149.530164][ T6997] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 149.530184][ T6997] IPv6: NLM_F_CREATE should be set when creating new route [ 149.530202][ T6997] IPv6: NLM_F_CREATE should be set when creating new route [ 149.531881][ T6997] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 151.224887][ T7020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.408'. [ 151.224908][ T7020] netlink: 12 bytes leftover after parsing attributes in process `syz.4.408'. [ 152.291162][ T7052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.419'. [ 152.291175][ T7052] netlink: 12 bytes leftover after parsing attributes in process `syz.2.419'. [ 152.319594][ T7054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.420'. [ 152.469178][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 152.681009][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 152.682073][ T9] usb 5-1: config 1 has an invalid descriptor of length 209, skipping remainder of the config [ 152.682094][ T9] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 152.684716][ T9] usb 5-1: string descriptor 0 read error: -22 [ 152.684806][ T9] usb 5-1: New USB device found, idVendor=0e41, idProduct=4241, bcdDevice= 0.40 [ 152.684826][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.069503][ T9] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 153.148959][ T6588] udevd[6588]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 154.096226][ T7085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.431'. [ 154.243627][ T7087] netlink: 4 bytes leftover after parsing attributes in process `syz.0.432'. [ 154.389200][ T7049] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 155.683290][ T5722] usb 5-1: USB disconnect, device number 10 [ 156.090120][ T7135] netlink: 4 bytes leftover after parsing attributes in process `syz.2.445'. [ 158.815962][ T7172] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 159.301037][ T7168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.301762][ T7168] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.331562][ T7168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.569902][ T7168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.590133][ T7168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.630096][ T7168] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 159.630114][ T7168] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 159.689628][ T7168] veth1_vlan: left promiscuous mode [ 159.709562][ T7168] veth0_vlan: left promiscuous mode [ 159.710044][ T7168] veth0_vlan: entered promiscuous mode [ 159.711666][ T7168] veth1_vlan: entered promiscuous mode [ 159.751195][ T7168] veth1_macvtap: left promiscuous mode [ 159.769442][ T7168] veth0_macvtap: left promiscuous mode [ 159.770093][ T7168] veth0_macvtap: entered promiscuous mode [ 159.790810][ T7168] veth1_macvtap: entered promiscuous mode [ 159.793733][ T7168] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 159.812787][ T7168] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 159.829883][ T7168] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 159.851305][ T7168] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 159.961937][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.961980][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.972306][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.979254][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.073252][ T1528] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.093150][ T1528] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.094476][ T1528] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.094826][ T1528] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.649230][ T7209] netlink: 'syz.0.470': attribute type 3 has an invalid length. [ 160.650736][ T7209] netlink: 'syz.0.470': attribute type 3 has an invalid length. [ 161.183443][ T7212] netlink: 12 bytes leftover after parsing attributes in process `syz.3.471'. [ 162.364541][ T7249] netlink: 12 bytes leftover after parsing attributes in process `syz.1.484'. [ 163.221199][ T7262] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 163.221220][ T7262] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 163.221239][ T7262] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 163.275997][ T7262] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 163.288977][ T7262] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 164.231703][ T7287] netlink: 4 bytes leftover after parsing attributes in process `syz.3.497'. [ 166.086609][ T7321] sctp: [Deprecated]: syz.4.509 (pid 7321) Use of struct sctp_assoc_value in delayed_ack socket option. [ 166.086609][ T7321] Use struct sctp_sack_info instead [ 170.349459][ T7369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.525'. [ 170.349522][ T7369] bridge_slave_1: left allmulticast mode [ 170.349541][ T7369] bridge_slave_1: left promiscuous mode [ 170.349711][ T7369] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.538250][ T7369] bridge_slave_0: left allmulticast mode [ 170.538267][ T7369] bridge_slave_0: left promiscuous mode [ 170.538391][ T7369] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.213005][ T7390] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 171.213018][ T7390] UDF-fs: Scanning with blocksize 512 failed [ 171.213401][ T7390] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 171.213417][ T7390] UDF-fs: Scanning with blocksize 1024 failed [ 171.213559][ T7390] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 171.213567][ T7390] UDF-fs: Scanning with blocksize 2048 failed [ 171.213808][ T7390] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 171.213816][ T7390] UDF-fs: Scanning with blocksize 4096 failed [ 171.473481][ T7386] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 171.522880][ T7387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.525511][ T7387] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.547464][ T7387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.704589][ T7387] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.706036][ T7387] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.730694][ T7387] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 171.730710][ T7387] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 171.738745][ T7387] veth1_vlan: left promiscuous mode [ 171.767178][ T7387] veth0_vlan: left promiscuous mode [ 171.769422][ T7387] veth0_vlan: entered promiscuous mode [ 171.783617][ T7387] veth1_vlan: entered promiscuous mode [ 171.787770][ T7387] veth1_macvtap: left promiscuous mode [ 171.788332][ T7387] veth0_macvtap: left promiscuous mode [ 171.799380][ T7387] veth0_macvtap: entered promiscuous mode [ 171.811862][ T7387] veth1_macvtap: entered promiscuous mode [ 171.815698][ T7387] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 171.816188][ T7387] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 171.816932][ T7387] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 171.817817][ T7387] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 171.895975][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.896058][ T1174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.904684][ T1174] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.904754][ T1174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.986632][ T1511] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.003273][ T1511] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.004833][ T1511] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.010038][ T1511] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.093567][ T7401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.539'. [ 172.270198][ T7412] process 'syz.4.541' launched '/dev/fd/6' with NULL argv: empty string added [ 173.210620][ T59] Bluetooth: hci4: unexpected event 0x03 length: 12 > 11 [ 174.131661][ T7427] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 174.131679][ T7427] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 174.186022][ T7441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.548'. [ 174.824784][ T7456] netlink: 12 bytes leftover after parsing attributes in process `syz.2.555'. [ 178.835909][ T7506] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 180.540925][ T7528] netlink: 'syz.1.577': attribute type 3 has an invalid length. [ 180.541091][ T7528] netlink: 'syz.1.577': attribute type 3 has an invalid length. [ 180.640637][ T7531] netlink: 4 bytes leftover after parsing attributes in process `syz.4.576'. [ 180.648149][ T7531] netlink: 12 bytes leftover after parsing attributes in process `syz.4.576'. [ 181.526619][ T7532] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.526954][ T7532] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.732092][ T7532] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.735275][ T7532] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.733093][ T7392] Set syz1 is full, maxelem 65536 reached [ 182.935554][ T7556] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 183.954270][ T6077] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.954351][ T6077] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.954380][ T6077] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.954406][ T6077] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.017480][ T7566] netlink: 'syz.1.589': attribute type 3 has an invalid length. [ 184.017593][ T7566] netlink: 'syz.1.589': attribute type 3 has an invalid length. [ 184.251884][ T7583] futex_wake_op: syz.3.591 tries to shift op by 144; fix this program [ 184.252413][ T7583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.591'. [ 184.252446][ T7583] netlink: 'syz.3.591': attribute type 2 has an invalid length. [ 184.644121][ T43] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 185.733420][ T43] usb 5-1: unable to get BOS descriptor or descriptor too short [ 185.734144][ T43] usb 5-1: no configurations [ 185.734158][ T43] usb 5-1: can't read configurations, error -22 [ 187.580149][ T4908] Bluetooth: hci4: command 0x0406 tx timeout [ 187.580168][ T5607] Bluetooth: hci2: command 0x0406 tx timeout [ 187.580196][ T4908] Bluetooth: hci3: command 0x0406 tx timeout [ 187.580199][ T5607] Bluetooth: hci1: command 0x0406 tx timeout [ 187.668491][ T59] Bluetooth: hci2: ISO packet too small [ 188.778558][ T7639] can: request_module (can-proto-0) failed. [ 188.794100][ T7639] batman_adv: batadv0: Adding interface: dummy0 [ 188.794117][ T7639] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.794144][ T7639] batman_adv: batadv0: Interface activated: dummy0 [ 188.798030][ T7639] batadv0: mtu less than device minimum [ 188.820530][ T7639] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 188.873439][ T7639] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 188.878261][ T7639] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 189.486858][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 189.486907][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.503836][ T7639] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 189.506322][ T7639] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 189.508833][ T7639] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 189.548408][ T7639] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 189.561541][ T7639] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 189.564149][ T7639] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 191.699382][ T7719] netlink: 60 bytes leftover after parsing attributes in process `syz.0.630'. [ 191.700023][ T7719] netlink: 60 bytes leftover after parsing attributes in process `syz.0.630'. [ 191.701174][ T7719] netlink: 60 bytes leftover after parsing attributes in process `syz.0.630'. [ 192.601854][ T7717] netlink: 'syz.3.629': attribute type 3 has an invalid length. [ 192.602035][ T7717] netlink: 'syz.3.629': attribute type 3 has an invalid length. [ 195.057311][ T7767] netlink: 'syz.3.647': attribute type 1 has an invalid length. [ 195.342088][ T7775] siw: device registration error -23 [ 195.597950][ T7772] bond1: (slave geneve2): making interface the new active one [ 195.654672][ T7772] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 195.899943][ T67] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 195.900074][ T67] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 195.900164][ T67] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 195.900258][ T67] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 196.119936][ T7767] netlink: 28 bytes leftover after parsing attributes in process `syz.3.647'. [ 196.503579][ T7767] 8021q: adding VLAN 0 to HW filter on device bond1 [ 199.209208][ T7832] siw: device registration error -23 [ 203.879581][ T7858] sctp: [Deprecated]: syz.2.672 (pid 7858) Use of struct sctp_assoc_value in delayed_ack socket option. [ 203.879581][ T7858] Use struct sctp_sack_info instead [ 214.694665][ T5607] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 214.694924][ T5607] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 214.695184][ T5607] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 214.697351][ T5607] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 214.697839][ T5607] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 215.355754][ T59] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 215.358524][ T59] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 215.358809][ T59] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 215.382410][ T59] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 215.384443][ T59] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 215.488739][ T5607] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 215.497831][ T5607] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 215.498089][ T5607] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 215.498802][ T5607] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 215.521427][ T5607] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 215.943287][ T7862] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.943470][ T7862] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.943637][ T7862] bridge_slave_0: entered allmulticast mode [ 215.948714][ T7862] bridge_slave_0: entered promiscuous mode [ 215.981693][ T7862] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.984051][ T7862] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.984235][ T7862] bridge_slave_1: entered allmulticast mode [ 215.987270][ T7862] bridge_slave_1: entered promiscuous mode [ 216.112066][ T7862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.134683][ T7862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.263166][ T7862] team0: Port device team_slave_0 added [ 216.280683][ T7862] team0: Port device team_slave_1 added [ 216.402750][ T7862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.402766][ T7862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.402789][ T7862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.408577][ T7862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.408592][ T7862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.408614][ T7862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.602283][ T59] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 216.602535][ T59] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 216.602799][ T59] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 216.603408][ T59] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 216.603858][ T59] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 216.709189][ T59] Bluetooth: hci5: command tx timeout [ 217.429503][ T59] Bluetooth: hci6: command tx timeout [ 217.589227][ T59] Bluetooth: hci7: command tx timeout [ 218.629237][ T59] Bluetooth: hci8: command tx timeout [ 218.789296][ T59] Bluetooth: hci5: command tx timeout [ 219.509259][ T59] Bluetooth: hci6: command tx timeout [ 219.669637][ T59] Bluetooth: hci7: command tx timeout [ 220.162477][ T5607] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 220.163665][ T5607] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 220.163903][ T5607] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 220.164585][ T5607] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 220.165040][ T5607] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 220.709191][ T5607] Bluetooth: hci8: command tx timeout [ 220.869210][ T5607] Bluetooth: hci5: command tx timeout [ 221.589252][ T5607] Bluetooth: hci6: command tx timeout [ 221.749194][ T5607] Bluetooth: hci7: command tx timeout [ 222.229190][ T5607] Bluetooth: hci9: command tx timeout [ 222.789168][ T5607] Bluetooth: hci8: command tx timeout [ 222.949360][ T5607] Bluetooth: hci5: command tx timeout [ 223.669934][ T5607] Bluetooth: hci6: command tx timeout [ 223.829726][ T59] Bluetooth: hci7: command tx timeout [ 224.309178][ T5607] Bluetooth: hci9: command tx timeout [ 224.869203][ T5607] Bluetooth: hci8: command tx timeout [ 226.389855][ T5607] Bluetooth: hci9: command tx timeout [ 228.949437][ T5607] Bluetooth: hci9: command tx timeout [ 250.719663][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.719712][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 279.043702][ T59] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 279.043980][ T59] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 279.044224][ T59] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 279.046392][ T59] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 279.046860][ T59] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 279.247449][ T59] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 279.248915][ T59] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 279.266407][ T59] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 279.267568][ T59] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 279.285016][ T59] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 279.427560][ T59] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 279.428105][ T59] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 279.443501][ T59] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 279.444586][ T59] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 279.445015][ T59] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 279.623397][ T5607] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 279.624642][ T5607] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 279.624893][ T5607] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 279.625880][ T5607] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 279.626363][ T5607] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 280.215974][ T59] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 280.216728][ T59] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 280.216957][ T59] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 280.220664][ T59] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 280.224027][ T59] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 281.110654][ T5607] Bluetooth: hci10: command tx timeout [ 281.349238][ T5607] Bluetooth: hci11: command tx timeout [ 281.509200][ T5607] Bluetooth: hci12: command tx timeout [ 281.669207][ T5607] Bluetooth: hci13: command tx timeout [ 282.309249][ T5607] Bluetooth: hci14: command tx timeout [ 283.189243][ T5607] Bluetooth: hci10: command tx timeout [ 283.429231][ T5607] Bluetooth: hci11: command tx timeout [ 283.589204][ T5607] Bluetooth: hci12: command tx timeout [ 283.749194][ T5607] Bluetooth: hci13: command tx timeout [ 284.389472][ T5607] Bluetooth: hci14: command tx timeout [ 285.270715][ T5607] Bluetooth: hci10: command tx timeout [ 285.509209][ T5607] Bluetooth: hci11: command tx timeout [ 285.669216][ T5607] Bluetooth: hci12: command tx timeout [ 285.829237][ T5607] Bluetooth: hci13: command tx timeout [ 286.469198][ T5607] Bluetooth: hci14: command tx timeout [ 287.349219][ T5607] Bluetooth: hci10: command tx timeout [ 287.590372][ T5607] Bluetooth: hci11: command tx timeout [ 287.749208][ T5607] Bluetooth: hci12: command tx timeout [ 287.909242][ T5607] Bluetooth: hci13: command tx timeout [ 288.549288][ T5607] Bluetooth: hci14: command tx timeout [ 304.909045][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 304.909065][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P28/1:b..l [ 304.909096][ C1] rcu: (detected by 1, t=10502 jiffies, g=13813, q=43582 ncpus=2) [ 304.909114][ C1] task:rcuc/1 state:R running task stack:25976 pid:28 tgid:28 ppid:2 task_flags:0x4208040 flags:0x00080000 [ 304.909167][ C1] Call Trace: [ 304.909173][ C1] [ 304.909182][ C1] __schedule+0x16dc/0x5500 [ 304.909214][ C1] ? __pfx_clockevents_program_event+0x10/0x10 [ 304.909236][ C1] ? rcu_is_watching+0x15/0xb0 [ 304.909256][ C1] ? rcu_is_watching+0x15/0xb0 [ 304.909280][ C1] ? __pfx___schedule+0x10/0x10 [ 304.909299][ C1] preempt_schedule_irq+0x4d/0xa0 [ 304.909313][ C1] irqentry_exit+0x14f/0x8f0 [ 304.909329][ C1] ? trace_irq_disable+0x3b/0x140 [ 304.909345][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 304.909359][ C1] RIP: 0010:preempt_schedule_thunk+0x16/0x40 [ 304.909380][ C1] Code: cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 48 89 e5 57 56 52 51 50 41 50 41 51 41 52 41 53 e8 4a 96 f3 09 <41> 5b 41 5a 41 59 41 58 58 59 5a 5e 5f 5d c3 cc cc cc cc 90 90 90 [ 304.909390][ C1] RSP: 0018:ffffc90000a2fb70 EFLAGS: 00000246 [ 304.909401][ C1] RAX: 1ffff11003ad7ba0 RBX: 0000000000000292 RCX: 0000000080000002 [ 304.909410][ C1] RDX: 0000000000000000 RSI: ffffffff8ba92960 RDI: ffffffff8ba92920 [ 304.909419][ C1] RBP: ffffc90000a2fbb8 R08: ffffffff8f8abcf7 R09: 1ffffffff1f1579e [ 304.909429][ C1] R10: dffffc0000000000 R11: fffffbfff1f1579f R12: 0000000000000001 [ 304.909437][ C1] R13: dffffc0000000000 R14: ffffffff99abe4e0 R15: ffffffff81ab469b [ 304.909447][ C1] ? rcu_cpu_kthread+0x20b/0x1480 [ 304.909471][ C1] _raw_spin_unlock_irqrestore+0x74/0x80 [ 304.909487][ C1] rcu_cpu_kthread+0x8c9/0x1480 [ 304.909505][ C1] ? rcu_cpu_kthread+0x20b/0x1480 [ 304.909523][ C1] ? __pfx_rcu_cpu_kthread+0x10/0x10 [ 304.909543][ C1] smpboot_thread_fn+0x57c/0xa80 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 304.909556][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 304.909569][ C1] kthread+0x388/0x470 [ 304.909582][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 304.909593][ C1] ? __pfx_kthread+0x10/0x10 [ 304.909606][ C1] ret_from_fork+0x514/0xb70 [ 304.909620][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 304.909634][ C1] ? __switch_to+0xc89/0x1420 [ 304.909646][ C1] ? __pfx_kthread+0x10/0x10 [ 304.909658][ C1] ret_from_fork_asm+0x1a/0x30 [ 304.909678][ C1] [ 312.150211][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 312.150259][ T1335] ieee802154 phy1 wpan1: encryption failed: -22