last executing test programs: 5m43.927414893s ago: executing program 3 (id=691): r0 = socket$kcm(0x2, 0x3, 0x2) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000000), 0x4) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8916, &(0x7f0000000040)={'wlan1\x00', @random="0200ac7f7f00"}) ioctl$SIOCSIFHWADDR(r0, 0x8916, &(0x7f0000000040)={'veth0_to_bond\x00', @random="0200ac7f7f00"}) 5m41.952848034s ago: executing program 3 (id=701): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000005c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000480)=[{0x3, 0x2, {0x2, 0x0, 0x4}, {0x0, 0xf0, 0x3}, 0xff, 0xff}], 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0x0, 0xc}, {0xfff1, 0xffff}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x4008050) 5m39.843070333s ago: executing program 3 (id=710): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xe}]}}}]}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x802}, 0x0) write$tun(r0, &(0x7f0000000980)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x68, 0x0, 0x7f, 0x6, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x23}}, {{0x4e21, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x9, 0x0, 0x4}}}}}}}, 0x3a) 5m36.062276854s ago: executing program 3 (id=723): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x4e23, @rand_addr=0x64010180}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt(r0, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000005400)={r3, @in={{0x2, 0x4e23, @remote}}}, 0x84) 5m35.508059114s ago: executing program 3 (id=726): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xca700, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) 5m33.783142453s ago: executing program 3 (id=732): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x12, r2}, 0x10) 5m18.334881376s ago: executing program 32 (id=732): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x12, r2}, 0x10) 2m38.128762081s ago: executing program 1 (id=1100): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}, {0x7}}}, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f0000000380)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000340)='nilfs2\x00', 0x800000, 0x0) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}, {@none, 0x60}}}, 0xa) open_tree(0xffffffffffffffff, &(0x7f0000000640)='\x00', 0x9901) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) 2m37.100334784s ago: executing program 4 (id=1101): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x54, 0x0, 0x1, {0x6, 0x1}, {0x37, 0x2}}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x6000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$UI_DEV_DESTROY(r2, 0x5502) sendmsg$IPCTNL_MSG_CT_DELETE(r1, 0x0, 0x4048890) socket$packet(0x11, 0x3, 0x300) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0xa, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x48001) sendmmsg$inet(r1, 0x0, 0x0, 0x40050) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) shmctl$IPC_RMID(0x0, 0x0) 2m37.099572795s ago: executing program 1 (id=1102): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x704, 0x100, 0x1000000, 0x2033f, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x4000, 0x0, 0xdd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x400}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x4000, 0x1, 0xdfffffff}}], 0x1, 0x0, 0x0) 2m35.485907425s ago: executing program 1 (id=1106): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x800, 0x4) read$char_usb(r2, &(0x7f0000000040)=""/236, 0xec) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 2m33.547634811s ago: executing program 1 (id=1109): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000680)="fe55fc2733656cd94cd632f708d5edc9bbe8b3ec7b6726cb94dd7ef916602cfa318a03da4cd0bcbe7f74bdf1dc41427cb05cdcc0a6bf308e382b7641a7", 0x3d}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0xc0) recvmmsg(0xffffffffffffffff, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x7fff}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x10000, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], [0xffffff7f, 0xfffffefe, 0xff000000, 0xff], 'xfrm0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x2f, 0xb7, 0x0, 0x1}, 0x0, 0x218, 0x238, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x1, 0x3, 0x10001, {0x1}}}, @common=@rt={{0x138}, {0x5, [0x1, 0x4], 0x1, 0x2, 0x2, [@private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @private2, @mcast1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x44}, @local, @loopback, @remote, @mcast2, @remote], 0x6}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x6}, {0xffffffffffffffff, 0x8, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="aac1c667980bacb85ff0df16951a5501523076ebe2b944529178d22b164563f7ff1ce7f7b143bf7d9bd7a4d205fd632f830272d3a78302205252b9ae7d8be5638396a0fa0583974f3f28302280b7b4d3c9e13d74dbc7b9e8718956dd5fe482", 0x5f}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c02884bfed5faf093fd548fca4f3a6e7391c8acfda620b96e71569873b28a43558b1c85f34b806418d36165411c9ebd66627a", 0x55}, {&(0x7f0000000440)="126ce0a7ad2d3c4b1b140fc7402f00828a02ec6c4e59757eda3f13f9d8a4376fed93dd5b8c0ba901c5305f", 0x2b}], 0x3, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1e00000007", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESHEX, @ANYRES32], 0x50) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2m33.547192342s ago: executing program 4 (id=1110): openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2482, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, 0x0, &(0x7f0000000680)='syzkaller\x00', 0xffffff7f}, 0x94) r0 = syz_open_dev$dri(&(0x7f0000000c00), 0x1ff, 0x80800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_TIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) setrlimit(0x40000000000008, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) 2m32.139958302s ago: executing program 4 (id=1111): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x220c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x55) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x7) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r7, 0x0) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) 2m32.028578683s ago: executing program 4 (id=1113): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b595000000000000f2000a000000", @ANYRES32=r1, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f"], 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 2m30.52642792s ago: executing program 4 (id=1114): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) fcntl$setflags(r0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fanotify_init(0x200, 0x48801) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)}, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40012040) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x7a, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) 2m30.478692941s ago: executing program 1 (id=1115): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) syz_usbip_server_init(0x3) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x18c) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$llc(0xffffffffffffffff, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r1, r1, 0x0, 0x200000) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x80, &(0x7f00000000c0)={[{@quota}]}) lchown(&(0x7f0000000080)='./file1\x00', 0xee01, 0xffffffffffffffff) 2m29.322663824s ago: executing program 1 (id=1117): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e", 0x7d) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) r4 = syz_io_uring_setup(0x315b, 0x0, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="090000000010000009000000050800000200", @ANYRES32=0x1, @ANYBLOB="4686ffff00"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000000100"/28], 0x50) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @multicast}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010100}}) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000200)="5dadbd429c4d1d30c8e7462c7e812f2251f9b5567221df7a9b398325bb8c161f0b99f83d0d166ec38624099d2198b46d3aa152fac8b5afac79adafd394b4a923814f7b0542a6c9c30c20a22f5dc37a8b19d2e254c61b63cac06a03defae66ae1731188eee5faefed100622128aa0478e3ae26f9a865cce38ca589947f2e27a74fb8face65f63d84fa5063a26561bd6b7daa09a78a9d71d2e668b", 0x9a}], 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0xe174ff1ad323ca07, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}}}}}}, 0x0) 2m28.755869956s ago: executing program 4 (id=1119): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003002000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) recvmmsg(0xffffffffffffffff, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x7fff}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x10000, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="aac1c667980bacb85ff0df16951a5501523076ebe2b944529178d22b164563f7ff1ce7f7b143bf7d9bd7a4d205fd632f830272d3a78302205252b9ae7d8be5638396a0fa0583974f3f28302280b7b4d3c9e13d74dbc7b9e8718956dd5fe482", 0x5f}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c02884bfed5faf093fd548fca4f3a6e7391c8acfda620b96e71569873b28a43558b1c85f34b806418d36165411c9ebd66627a", 0x55}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6f2a8c94e6bdf0c72c8e528f0778c5b5ad28a834e43f387c8282e50e7d6b0cd91a93f87f645b32c1f200f7d9f101c7bcf701e4462f36e5fe550", 0xa6}, {&(0x7f0000000440)}], 0x4, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1e00000007", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESHEX, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2m13.530274405s ago: executing program 33 (id=1117): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e", 0x7d) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) r4 = syz_io_uring_setup(0x315b, 0x0, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="090000000010000009000000050800000200", @ANYRES32=0x1, @ANYBLOB="4686ffff00"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000000100"/28], 0x50) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @multicast}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010100}}) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000200)="5dadbd429c4d1d30c8e7462c7e812f2251f9b5567221df7a9b398325bb8c161f0b99f83d0d166ec38624099d2198b46d3aa152fac8b5afac79adafd394b4a923814f7b0542a6c9c30c20a22f5dc37a8b19d2e254c61b63cac06a03defae66ae1731188eee5faefed100622128aa0478e3ae26f9a865cce38ca589947f2e27a74fb8face65f63d84fa5063a26561bd6b7daa09a78a9d71d2e668b", 0x9a}], 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0xe174ff1ad323ca07, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}}}}}}, 0x0) 2m11.347874197s ago: executing program 34 (id=1119): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003002000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) recvmmsg(0xffffffffffffffff, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x7fff}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x10000, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="aac1c667980bacb85ff0df16951a5501523076ebe2b944529178d22b164563f7ff1ce7f7b143bf7d9bd7a4d205fd632f830272d3a78302205252b9ae7d8be5638396a0fa0583974f3f28302280b7b4d3c9e13d74dbc7b9e8718956dd5fe482", 0x5f}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c02884bfed5faf093fd548fca4f3a6e7391c8acfda620b96e71569873b28a43558b1c85f34b806418d36165411c9ebd66627a", 0x55}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6f2a8c94e6bdf0c72c8e528f0778c5b5ad28a834e43f387c8282e50e7d6b0cd91a93f87f645b32c1f200f7d9f101c7bcf701e4462f36e5fe550", 0xa6}, {&(0x7f0000000440)}], 0x4, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1e00000007", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESHEX, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2m10.886958296s ago: executing program 0 (id=1129): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/packet\x00') sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) pivot_root(&(0x7f00000001c0)='./file0\x00', 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m9.408489947s ago: executing program 0 (id=1130): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet(0xa, 0x801, 0x84) fcntl$lock(0xffffffffffffffff, 0x410, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000057000000570000000a000000060000000000000b050000000f0000000200008448"], &(0x7f0000000040)=""/61, 0x7a, 0x3d, 0x1, 0x7, 0x10000}, 0x28) listen(r3, 0x8) accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x154}, 0x1, 0x0, 0x0, 0xc841}, 0x4004000) 2m7.989965388s ago: executing program 0 (id=1131): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) r4 = syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x100, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) tgkill(r4, r4, 0x9) 2m2.675402591s ago: executing program 0 (id=1133): socket$tipc(0x1e, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x70}, 0x80) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x335}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x20000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 1m55.488852484s ago: executing program 0 (id=1136): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5453, 0x0) r3 = inotify_init1(0x80800) inotify_add_watch(r3, &(0x7f0000000640)='.\x00', 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) fallocate(r4, 0x0, 0x8e14, 0x8ffff) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) 1m52.259965287s ago: executing program 0 (id=1138): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fd/3\x00') openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_procfs(0x0, &(0x7f0000000440)='net/rt6_stats\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r2, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffc}}, 0x44) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000140)={'8255\x00', [0x3, 0xfffffffc, 0x5, 0x4, 0x2f, 0xfffffff7, 0x8001, 0xa22, 0xfffffff8, 0x2, 0xfffffffc, 0xc3, 0x5006, 0x1000007, 0x1, 0x10003, 0x801000, 0x7fffffff, 0x1ff, 0x3ff, 0x1001010, 0x1ff, 0x8, 0x3, 0x8001, 0x7, 0x3ff, 0x5, 0x404, 0x3, 0xfffd]}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000040)={0x200a}) 1m35.932372151s ago: executing program 35 (id=1138): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fd/3\x00') openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_procfs(0x0, &(0x7f0000000440)='net/rt6_stats\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r2, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffc}}, 0x44) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000140)={'8255\x00', [0x3, 0xfffffffc, 0x5, 0x4, 0x2f, 0xfffffff7, 0x8001, 0xa22, 0xfffffff8, 0x2, 0xfffffffc, 0xc3, 0x5006, 0x1000007, 0x1, 0x10003, 0x801000, 0x7fffffff, 0x1ff, 0x3ff, 0x1001010, 0x1ff, 0x8, 0x3, 0x8001, 0x7, 0x3ff, 0x5, 0x404, 0x3, 0xfffd]}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000040)={0x200a}) 1m35.437297422s ago: executing program 2 (id=1142): timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) semtimedop(0x0, 0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$GETZCNT(0x0, 0x2, 0xf, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x1) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) 1m33.116788313s ago: executing program 2 (id=1143): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) fspick(r3, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r0, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) bind$inet6(r2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ipv6_route\x00') pread64(r4, &(0x7f0000003b00)=""/195, 0xc3, 0x591f) rmdir(0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 1m26.166486805s ago: executing program 2 (id=1144): socket$inet6(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x80003, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) pipe2(&(0x7f0000000080), 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 1m23.554838177s ago: executing program 2 (id=1145): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) r1 = socket(0x40000000015, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000240)=0x3) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m21.257066364s ago: executing program 2 (id=1146): syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa2}, [@ldst={0x7}]}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0xd1, &(0x7f0000000440)=""/209, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x7, 0x1, 0xf}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r4, &(0x7f0000000300)='0', 0x1) 1m20.152942054s ago: executing program 2 (id=1147): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b8", 0xc1}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1b98e", 0xbc}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c", 0x27}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52", 0xc5}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d490", 0xe0}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m3.418883148s ago: executing program 36 (id=1147): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b8", 0xc1}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1b98e", 0xbc}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c", 0x27}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52", 0xc5}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d490", 0xe0}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 0s ago: executing program 7 (id=1128): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.41' (ED25519) to the list of known hosts. [ 92.096374][ T36] cfg80211: failed to load regulatory.db [ 93.688486][ T5586] cgroup: Unknown subsys name 'net' [ 93.936893][ T5586] cgroup: Unknown subsys name 'cpuset' [ 93.983690][ T5586] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 96.047475][ T5586] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 98.814926][ T4915] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.838041][ T5606] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.840498][ T5606] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 98.867507][ T5610] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.884693][ T5612] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 98.891160][ T5612] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 98.909845][ T5609] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.910780][ T5609] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.924609][ T60] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 98.934710][ T60] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 98.970952][ T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 98.997430][ T60] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 98.998317][ T5612] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 99.032317][ T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 99.033276][ T60] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 99.039214][ T60] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 99.042676][ T60] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 99.062266][ T4915] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 99.064968][ T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 99.079545][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 99.238701][ T5610] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 99.304231][ T5606] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 99.309229][ T5606] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 99.347064][ T5616] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 99.352201][ T5616] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 101.324923][ T5606] Bluetooth: hci0: command tx timeout [ 101.325056][ T5606] Bluetooth: hci3: command tx timeout [ 101.484524][ T5606] Bluetooth: hci2: command tx timeout [ 101.485280][ T5606] Bluetooth: hci4: command tx timeout [ 101.489568][ T5606] Bluetooth: hci1: command tx timeout [ 102.296308][ T5603] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.296457][ T5603] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.296604][ T5603] bridge_slave_0: entered allmulticast mode [ 102.299564][ T5603] bridge_slave_0: entered promiscuous mode [ 102.384350][ T5603] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.384489][ T5603] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.384676][ T5603] bridge_slave_1: entered allmulticast mode [ 102.386965][ T5603] bridge_slave_1: entered promiscuous mode [ 102.426663][ T5602] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.426792][ T5602] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.426965][ T5602] bridge_slave_0: entered allmulticast mode [ 102.428916][ T5602] bridge_slave_0: entered promiscuous mode [ 102.468751][ T5600] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.468877][ T5600] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.469054][ T5600] bridge_slave_0: entered allmulticast mode [ 102.471216][ T5600] bridge_slave_0: entered promiscuous mode [ 102.527807][ T5602] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.527915][ T5602] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.528073][ T5602] bridge_slave_1: entered allmulticast mode [ 102.531071][ T5602] bridge_slave_1: entered promiscuous mode [ 102.534471][ T5601] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.534902][ T5601] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.535416][ T5601] bridge_slave_0: entered allmulticast mode [ 102.553856][ T5601] bridge_slave_0: entered promiscuous mode [ 102.592216][ T5600] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.592343][ T5600] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.592535][ T5600] bridge_slave_1: entered allmulticast mode [ 102.601474][ T5600] bridge_slave_1: entered promiscuous mode [ 102.635198][ T5599] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.635367][ T5599] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.635578][ T5599] bridge_slave_0: entered allmulticast mode [ 102.637543][ T5599] bridge_slave_0: entered promiscuous mode [ 102.676620][ T5601] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.676743][ T5601] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.677105][ T5601] bridge_slave_1: entered allmulticast mode [ 102.679023][ T5601] bridge_slave_1: entered promiscuous mode [ 102.721448][ T5603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.721712][ T5599] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.721856][ T5599] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.722037][ T5599] bridge_slave_1: entered allmulticast mode [ 102.738243][ T5599] bridge_slave_1: entered promiscuous mode [ 102.809802][ T5603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.837439][ T5602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.866188][ T5600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.908326][ T5602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.912023][ T5601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.934437][ T5600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.963944][ T5599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.993898][ T5601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.020677][ T5603] team0: Port device team_slave_0 added [ 103.032843][ T5599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.094352][ T5603] team0: Port device team_slave_1 added [ 103.126539][ T5602] team0: Port device team_slave_0 added [ 103.149735][ T5600] team0: Port device team_slave_0 added [ 103.187544][ T5602] team0: Port device team_slave_1 added [ 103.189692][ T5601] team0: Port device team_slave_0 added [ 103.192016][ T5600] team0: Port device team_slave_1 added [ 103.224470][ T5599] team0: Port device team_slave_0 added [ 103.245492][ T5601] team0: Port device team_slave_1 added [ 103.267412][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.267426][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.267446][ T5603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.271283][ T5599] team0: Port device team_slave_1 added [ 103.355721][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.355739][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.355768][ T5603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.405902][ T5606] Bluetooth: hci0: command tx timeout [ 103.413033][ T5606] Bluetooth: hci3: command tx timeout [ 103.431950][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.431963][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.431982][ T5602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.496270][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.496289][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.496317][ T5600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.563395][ T60] Bluetooth: hci2: command tx timeout [ 103.563425][ T60] Bluetooth: hci4: command tx timeout [ 103.563540][ T5606] Bluetooth: hci1: command tx timeout [ 103.568873][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.568891][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.568920][ T5602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.570285][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.570296][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.570337][ T5601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.572782][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.572797][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.572826][ T5600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.651767][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.651814][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.651898][ T5599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.765857][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.765909][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.765972][ T5601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.176089][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.176103][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.176123][ T5599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.327266][ T5603] hsr_slave_0: entered promiscuous mode [ 104.328640][ T5603] hsr_slave_1: entered promiscuous mode [ 104.412109][ T5602] hsr_slave_0: entered promiscuous mode [ 104.419192][ T5602] hsr_slave_1: entered promiscuous mode [ 104.420139][ T5602] debugfs: 'hsr0' already exists in 'hsr' [ 104.420222][ T5602] Cannot create hsr debugfs directory [ 104.441440][ T5600] hsr_slave_0: entered promiscuous mode [ 104.442551][ T5600] hsr_slave_1: entered promiscuous mode [ 104.444952][ T5600] debugfs: 'hsr0' already exists in 'hsr' [ 104.445014][ T5600] Cannot create hsr debugfs directory [ 104.506742][ T5601] hsr_slave_0: entered promiscuous mode [ 104.507787][ T5601] hsr_slave_1: entered promiscuous mode [ 104.508554][ T5601] debugfs: 'hsr0' already exists in 'hsr' [ 104.508572][ T5601] Cannot create hsr debugfs directory [ 104.553788][ T5599] hsr_slave_0: entered promiscuous mode [ 104.554941][ T5599] hsr_slave_1: entered promiscuous mode [ 104.555626][ T5599] debugfs: 'hsr0' already exists in 'hsr' [ 104.555644][ T5599] Cannot create hsr debugfs directory [ 105.484260][ T5606] Bluetooth: hci0: command tx timeout [ 105.484414][ T5609] Bluetooth: hci3: command tx timeout [ 105.643142][ T5609] Bluetooth: hci1: command tx timeout [ 105.643172][ T5609] Bluetooth: hci4: command tx timeout [ 105.643191][ T5609] Bluetooth: hci2: command tx timeout [ 105.716898][ T5603] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.787026][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.811047][ T5603] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.840149][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.853233][ T5603] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.899429][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.938956][ T5603] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.979119][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.150965][ T5601] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 106.180400][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.202565][ T5601] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 106.239612][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.242526][ T5601] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 106.287537][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.318190][ T5601] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 106.358157][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.539726][ T5600] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 106.578869][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.593831][ T5600] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 106.629459][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.640772][ T5600] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 106.679832][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.717667][ T5600] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 106.747743][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.915460][ T5602] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 106.947883][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.968584][ T5602] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 106.999893][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 107.026083][ T5602] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 107.069468][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 107.121715][ T5602] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 107.148177][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 107.209503][ T5603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.310248][ T5599] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 107.350541][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 107.363140][ T5599] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 107.423500][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 107.445043][ T5599] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 107.487129][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 107.504981][ T5599] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 107.547262][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 107.551438][ T5603] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.568017][ T5606] Bluetooth: hci3: command tx timeout [ 107.568054][ T5606] Bluetooth: hci0: command tx timeout [ 107.636337][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.636506][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.724735][ T5606] Bluetooth: hci4: command tx timeout [ 107.724772][ T5606] Bluetooth: hci1: command tx timeout [ 107.724833][ T5609] Bluetooth: hci2: command tx timeout [ 107.729890][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.729998][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.770855][ T5601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.895745][ T5601] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.952673][ T5600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.973654][ T1178] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.974244][ T1178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.035754][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.035896][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.142453][ T5600] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.191998][ T5602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.245540][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.245752][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.309911][ T1222] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.310156][ T1222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.419149][ T5602] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.518863][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.519475][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.544641][ T5599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.604048][ T3361] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.604158][ T3361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.726824][ T5599] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.832765][ T1178] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.849446][ T1178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.932571][ T1511] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.932790][ T1511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.548005][ T5603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.876958][ T5603] veth0_vlan: entered promiscuous mode [ 110.055190][ T5603] veth1_vlan: entered promiscuous mode [ 110.272407][ T5601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.400190][ T5600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.453301][ T5603] veth0_macvtap: entered promiscuous mode [ 110.527212][ T5603] veth1_macvtap: entered promiscuous mode [ 110.570714][ T5602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.714802][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.735367][ T5601] veth0_vlan: entered promiscuous mode [ 110.777862][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.836816][ T1511] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.878105][ T1511] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.900830][ T5601] veth1_vlan: entered promiscuous mode [ 110.912730][ T1511] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.956335][ T1511] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.101884][ T5599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.199791][ T5602] veth0_vlan: entered promiscuous mode [ 111.444535][ T5602] veth1_vlan: entered promiscuous mode [ 111.495326][ T5601] veth0_macvtap: entered promiscuous mode [ 111.534199][ T5601] veth1_macvtap: entered promiscuous mode [ 111.541018][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.541046][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.701523][ T5600] veth0_vlan: entered promiscuous mode [ 111.741810][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.770400][ T1183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.770422][ T1183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.801662][ T5599] veth0_vlan: entered promiscuous mode [ 111.811350][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.845370][ T5600] veth1_vlan: entered promiscuous mode [ 111.874065][ T5602] veth0_macvtap: entered promiscuous mode [ 112.002107][ T1511] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.026406][ T5602] veth1_macvtap: entered promiscuous mode [ 112.031292][ T1511] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.031941][ T5599] veth1_vlan: entered promiscuous mode [ 112.059412][ T1511] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.086149][ T1511] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.279510][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.494605][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.723624][ T5600] veth0_macvtap: entered promiscuous mode [ 112.768670][ T56] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.864972][ T56] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.939780][ T56] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.967026][ T5600] veth1_macvtap: entered promiscuous mode [ 112.985957][ T56] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.988769][ T5599] veth0_macvtap: entered promiscuous mode [ 113.011523][ T1511] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.011544][ T1511] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.158430][ T5599] veth1_macvtap: entered promiscuous mode [ 113.440753][ T1511] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.440777][ T1511] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.492381][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.757856][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.846539][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.901573][ T1511] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.923123][ T1511] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.930307][ T1178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.930330][ T1178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.970030][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.989622][ T1511] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.009282][ T1511] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.045554][ T1511] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.070687][ T1511] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.086959][ T1511] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.089283][ T1511] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.301242][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.301265][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.330586][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.330643][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.507505][ T5810] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9'. [ 115.507603][ T5810] sch_tbf: peakrate 2174 is lower than or equals to rate 2972 ! [ 115.762205][ T1183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.762225][ T1183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.160797][ T3361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.160820][ T3361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.582054][ T1183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.582078][ T1183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.750647][ T5807] syz.2.3 (5807) used greatest stack depth: 19688 bytes left [ 116.807477][ T5824] netlink: 'syz.1.13': attribute type 1 has an invalid length. [ 117.576737][ T5836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18'. [ 117.576774][ T5836] netlink: 'syz.3.18': attribute type 10 has an invalid length. [ 117.576792][ T5836] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18'. [ 117.898475][ T5836] geneve2: entered promiscuous mode [ 117.898504][ T5836] geneve2: entered allmulticast mode [ 119.785043][ T5859] syz.4.24 (5859) used greatest stack depth: 18520 bytes left [ 122.219088][ T5908] netlink: 12 bytes leftover after parsing attributes in process `syz.4.40'. [ 123.009984][ T5923] Illegal XDP return value 4294967274 on prog (id 4) dev syz_tun, expect packet loss! [ 123.458638][ T5930] netlink: 'syz.4.48': attribute type 4 has an invalid length. [ 123.488897][ T5931] netlink: 'syz.4.48': attribute type 4 has an invalid length. [ 123.862853][ T5736] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 124.218328][ T5736] usb 1-1: Using ep0 maxpacket: 8 [ 124.390104][ T5736] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 124.390169][ T5736] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 124.390192][ T5736] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 124.390219][ T5736] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 124.390244][ T5736] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 124.390290][ T5736] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 124.390314][ T5736] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.606720][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 124.917272][ T9] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 124.917305][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.032491][ T9] usb 5-1: config 0 descriptor?? [ 125.154265][ T9] cp210x 5-1:0.0: cp210x converter detected [ 125.490479][ T5954] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 125.536602][ T5943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.540579][ T5943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.597908][ T9] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 126.325632][ T9] usb 5-1: cp210x converter now attached to ttyUSB0 [ 126.386321][ T9] usb 5-1: USB disconnect, device number 2 [ 126.797063][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 126.858313][ T5722] usb 1-1: USB disconnect, device number 2 [ 127.303311][ T9] cp210x 5-1:0.0: device disconnected [ 127.329631][ T5975] process 'syz.1.61' launched './file0' with NULL argv: empty string added [ 132.568462][ T6091] netlink: 4 bytes leftover after parsing attributes in process `syz.4.105'. [ 133.013343][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.013441][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.262595][ T6100] Bluetooth: MGMT ver 1.23 [ 133.363175][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 133.735603][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.735655][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 133.740882][ T9] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 133.740913][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 133.740935][ T9] usb 2-1: SerialNumber: syz [ 134.156338][ T9] usb 2-1: 0:2 : does not exist [ 134.906752][ T9] usb 2-1: USB disconnect, device number 2 [ 135.798798][ T5854] udevd[5854]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 137.830237][ T5722] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 137.836626][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 138.003054][ T5722] usb 2-1: Using ep0 maxpacket: 32 [ 138.003662][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 138.005776][ T5722] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 138.005913][ T5722] usb 2-1: config 0 has no interface number 0 [ 138.005964][ T5722] usb 2-1: config 0 interface 12 has no altsetting 0 [ 138.060107][ T9] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 138.060138][ T9] usb 5-1: config 0 has no interface number 0 [ 138.060188][ T9] usb 5-1: config 0 interface 12 has no altsetting 0 [ 138.092586][ T9] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 138.092619][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.092639][ T9] usb 5-1: Product: syz [ 138.092655][ T9] usb 5-1: Manufacturer: syz [ 138.092670][ T9] usb 5-1: SerialNumber: syz [ 138.160277][ T5722] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 138.160317][ T5722] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.160347][ T5722] usb 2-1: Product: syz [ 138.160358][ T5722] usb 2-1: Manufacturer: syz [ 138.160368][ T5722] usb 2-1: SerialNumber: syz [ 138.305239][ T5722] usb 2-1: config 0 descriptor?? [ 138.473355][ T9] usb 5-1: config 0 descriptor?? [ 138.720141][ T6181] netlink: 'syz.2.139': attribute type 1 has an invalid length. [ 139.011578][ T6181] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.104698][ T820] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 139.213457][ T1172] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 139.223719][ T6184] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 139.263082][ T820] usb 1-1: Using ep0 maxpacket: 32 [ 139.266430][ T820] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 139.266456][ T820] usb 1-1: config 0 has no interface number 0 [ 139.302546][ T820] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 139.302575][ T820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.302595][ T820] usb 1-1: Product: syz [ 139.302609][ T820] usb 1-1: Manufacturer: syz [ 139.302622][ T820] usb 1-1: SerialNumber: syz [ 139.359733][ T6164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.364483][ T518] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 139.394462][ T820] usb 1-1: config 0 descriptor?? [ 139.519046][ T6164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.631186][ T6188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.794162][ T5722] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 139.794292][ T5722] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 139.794312][ T5722] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 139.794466][ T5722] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 139.866432][ T9] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 139.866491][ T9] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 139.866509][ T9] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 139.867493][ T9] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 139.976129][ T5722] usb 2-1: USB disconnect, device number 3 [ 140.022288][ T9] usb 5-1: USB disconnect, device number 3 [ 140.367852][ T6188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.441320][ T6188] bond0 (unregistering): Released all slaves [ 140.677678][ T820] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 140.677709][ T820] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 140.726682][ T820] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 140.727571][ T820] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 140.813059][ T820] usb 1-1: USB disconnect, device number 3 [ 141.159683][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 141.331318][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 141.341769][ T9] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 141.360461][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 141.360493][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.360524][ T9] usb 3-1: Product: syz [ 141.360540][ T9] usb 3-1: Manufacturer: syz [ 141.360555][ T9] usb 3-1: SerialNumber: syz [ 141.715372][ T9] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 141.886023][ T9] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 141.886063][ T9] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 142.290038][ T9] usb 3-1: invalid uac2 rates [ 142.290290][ T9] usb 3-1: invalid uac2 rates [ 142.294217][ T9] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 142.294243][ T9] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 142.504717][ T9] usb 3-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 142.984443][ T9] usb 3-1: USB disconnect, device number 2 [ 143.543310][ T5854] udevd[5854]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 144.372199][ T37] audit: type=1326 audit(1785391701.369:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6273 comm="syz.1.174" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f765001df99 code=0x0 [ 144.626064][ T6286] netlink: 12 bytes leftover after parsing attributes in process `syz.2.178'. [ 144.739111][ T6286] bond2: entered promiscuous mode [ 144.739795][ T6286] 8021q: adding VLAN 0 to HW filter on device bond2 [ 144.953239][ T5729] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 145.150044][ T5729] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 145.150077][ T5729] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.150098][ T5729] usb 5-1: Product: syz [ 145.150114][ T5729] usb 5-1: Manufacturer: syz [ 145.150130][ T5729] usb 5-1: SerialNumber: syz [ 145.391043][ T6306] netlink: 'syz.1.186': attribute type 1 has an invalid length. [ 145.646220][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 145.691835][ T5729] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 145.691918][ T5729] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 145.833571][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 145.836111][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.836142][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.836178][ T9] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 145.836201][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.914334][ T9] usb 3-1: config 0 descriptor?? [ 145.921767][ T5729] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 145.921828][ T5729] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 145.978643][ T6306] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.055224][ T5729] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 146.100941][ T5729] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 146.256327][ T5729] usb 5-1: USB disconnect, device number 4 [ 146.608162][ T9] usb 3-1: language id specifier not provided by device, defaulting to English [ 146.809994][ T9] letsketch 0003:6161:4D15.0001: Device info: Ы [ 147.011350][ T9] letsketch 0003:6161:4D15.0001: Device info: ï“¿ [ 147.331105][ T9] usb 3-1: Max retries (5) exceeded reading string descriptor 202 [ 147.331197][ T9] letsketch 0003:6161:4D15.0001: probe with driver letsketch failed with error -71 [ 147.355035][ T9] usb 3-1: USB disconnect, device number 3 [ 147.996539][ T6356] trusted_key: syz.2.204 sent an empty control message without MSG_MORE. [ 148.471188][ T6360] gadgetfs: bound to dummy_udc driver [ 148.783288][ T9] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 148.783621][ C0] gadgetfs: connected [ 148.806023][ T6358] gadgetfs: suspended from state 3 [ 148.806322][ T6358] gadgetfs: disconnected [ 149.256835][ T6388] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 149.256877][ T6388] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 152.942176][ T6470] size and base must be multiples of 4 kiB [ 152.942216][ T6470] CPU: 0 UID: 0 PID: 6470 Comm: syz.2.251 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 152.942246][ T6470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 152.942268][ T6470] Call Trace: [ 152.942280][ T6470] [ 152.942290][ T6470] dump_stack_lvl+0xe8/0x150 [ 152.942332][ T6470] mtrr_add+0xd5/0x100 [ 152.942367][ T6470] mtrr_ioctl+0xca4/0x13c0 [ 152.942399][ T6470] ? smk_tskacc+0x2fb/0x370 [ 152.942438][ T6470] ? __pfx_mtrr_ioctl+0x10/0x10 [ 152.942477][ T6470] ? smack_file_ioctl+0x263/0x360 [ 152.942517][ T6470] ? __fget_files+0x2a/0x420 [ 152.942542][ T6470] ? __fget_files+0x3a8/0x420 [ 152.942566][ T6470] ? __fget_files+0x2a/0x420 [ 152.942590][ T6470] ? __pfx_mtrr_ioctl+0x10/0x10 [ 152.942634][ T6470] proc_reg_unlocked_ioctl+0x1df/0x2d0 [ 152.942666][ T6470] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 152.942697][ T6470] __se_sys_ioctl+0xff/0x170 [ 152.942729][ T6470] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.942755][ T6470] do_syscall_64+0x174/0x580 [ 152.942783][ T6470] ? trace_irq_disable+0x3b/0x140 [ 152.942807][ T6470] ? clear_bhb_loop+0x40/0x90 [ 152.942835][ T6470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.942858][ T6470] RIP: 0033:0x7f47afa9df99 [ 152.942886][ T6470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.942905][ T6470] RSP: 002b:00007f47adcf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 152.942939][ T6470] RAX: ffffffffffffffda RBX: 00007f47afd25fa0 RCX: 00007f47afa9df99 [ 152.942956][ T6470] RDX: 0000200000000a00 RSI: 00000000400c4d01 RDI: 0000000000000004 [ 152.942970][ T6470] RBP: 00007f47afb34ec4 R08: 0000000000000000 R09: 0000000000000000 [ 152.942984][ T6470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.942997][ T6470] R13: 00007f47afd26038 R14: 00007f47afd25fa0 R15: 00007ffd63094338 [ 152.943033][ T6470] [ 154.461353][ T6494] syz.1.258 uses obsolete (PF_INET,SOCK_PACKET) [ 156.058779][ T6531] netlink: 16 bytes leftover after parsing attributes in process `syz.0.273'. [ 156.072613][ T6533] netlink: 'syz.2.274': attribute type 4 has an invalid length. [ 156.141519][ T6535] netlink: 'syz.2.274': attribute type 4 has an invalid length. [ 157.247815][ T6553] netlink: 'syz.2.281': attribute type 6 has an invalid length. [ 157.461739][ T6559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.283'. [ 157.939611][ T6557] tcpci 0-0050: probe with driver tcpci failed with error -5 [ 158.035873][ T6557] i2c i2c-0: new_device: Instantiated device tcpci at 0x50 [ 158.057151][ T6580] netlink: 'syz.0.287': attribute type 18 has an invalid length. [ 158.057173][ T6580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.287'. [ 158.186764][ T6577] Mass Storage Function, version: 2009/09/11 [ 158.186832][ T6577] LUN: removable file: (no medium) [ 158.572491][ T1511] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.573667][ T1511] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.573714][ T1511] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.573781][ T1511] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.576468][ T6580] netlink: 'syz.0.287': attribute type 18 has an invalid length. [ 158.576596][ T6580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.287'. [ 158.577032][ T6580] Zero length message leads to an empty skb [ 159.018927][ T6607] binder: 6606:6607 ioctl c018620c 200000000000 returned -22 [ 159.191498][ T6601] input: syz0 as /devices/virtual/input/input5 [ 159.831850][ T6629] Bluetooth: hci0: unsupported parameter 255 [ 159.831877][ T6629] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 160.399534][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 160.587062][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 160.607732][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 160.607765][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 160.638236][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 160.638263][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.638290][ T9] usb 5-1: Product: syz [ 160.638303][ T9] usb 5-1: Manufacturer: syz [ 160.638316][ T9] usb 5-1: SerialNumber: syz [ 160.781127][ T9] usb 5-1: config 0 descriptor?? [ 160.929020][ T9] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 160.929058][ T9] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 161.196353][ T6663] ======================================================= [ 161.196353][ T6663] WARNING: The mand mount option has been deprecated and [ 161.196353][ T6663] and is ignored by this kernel. Remove the mand [ 161.196353][ T6663] option from the mount to silence this warning. [ 161.196353][ T6663] ======================================================= [ 161.471392][ T9] em28xx 5-1:0.0: unknown em28xx chip ID (153) [ 161.675422][ T9] em28xx 5-1:0.0: Config register raw data: 0x99 [ 161.876506][ T6672] loop4: detected capacity change from 0 to 7 [ 161.878732][ T9] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 161.878774][ T9] em28xx 5-1:0.0: No AC97 audio processor [ 162.172703][ T6672] Dev loop4: unable to read RDB block 7 [ 162.172753][ T6672] loop4: unable to read partition table [ 162.184769][ T6672] loop4: partition table beyond EOD, truncated [ 162.184821][ T6672] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 162.259690][ T9] usb 5-1: USB disconnect, device number 5 [ 162.317388][ T9] em28xx 5-1:0.0: Disconnecting em28xx [ 162.697690][ T9] em28xx 5-1:0.0: Freeing device [ 163.373480][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 163.553438][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 163.556467][ T10] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 163.556494][ T10] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 163.556514][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 163.556563][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 163.556584][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 163.556606][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 163.556661][ T10] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 163.556684][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.591074][ T10] usb 1-1: config 0 descriptor?? [ 163.932270][ T10] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 164.006121][ T10] usb 1-1: USB disconnect, device number 5 [ 164.257114][ T10] usblp0: removed [ 164.694326][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 164.883045][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 164.893816][ T10] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 164.893906][ T10] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 164.893982][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 164.894134][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 164.894230][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 164.894304][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 164.894390][ T10] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 164.894415][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.203261][ T5722] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 165.203531][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 165.207250][ T10] usb 1-1: config 0 descriptor?? [ 165.333556][ T5722] usb 3-1: device descriptor read/64, error -32 [ 165.461912][ T10] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 165.676157][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 165.676364][ T5722] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 165.735186][ T820] usb 1-1: USB disconnect, device number 6 [ 165.799314][ T820] usblp0: removed [ 165.922988][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 165.933978][ T5722] usb 3-1: too many configurations: 126, using maximum allowed: 8 [ 165.947004][ T9] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 165.947033][ T9] usb 2-1: config 0 has no interface number 0 [ 165.977477][ T9] usb 2-1: config 0 interface 12 has no altsetting 0 [ 166.013304][ T9] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 166.013336][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.013357][ T9] usb 2-1: Product: syz [ 166.013375][ T9] usb 2-1: Manufacturer: syz [ 166.013386][ T9] usb 2-1: SerialNumber: syz [ 166.059781][ T9] usb 2-1: config 0 descriptor?? [ 166.090916][ T5722] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 166.090941][ T5722] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.090956][ T5722] usb 3-1: Product: syz [ 166.090967][ T5722] usb 3-1: Manufacturer: syz [ 166.090977][ T5722] usb 3-1: SerialNumber: syz [ 166.627045][ T6730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.631003][ T6730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.666066][ T5722] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 166.667332][ T5722] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 166.667358][ T5722] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 166.756042][ T6732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.756681][ T6732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.842159][ T5722] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 166.976647][ T9] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 166.976701][ T9] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 166.976716][ T9] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 166.976789][ T9] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 167.126496][ T5722] usb 3-1: USB disconnect, device number 5 [ 167.248183][ T9] usb 2-1: USB disconnect, device number 4 [ 168.105321][ T6769] capability: warning: `syz.4.360' uses 32-bit capabilities (legacy support in use) [ 170.935846][ T37] audit: type=1326 audit(1785391727.879:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6828 comm="syz.4.388" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f51ea457d17 code=0x0 [ 173.754425][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 174.013614][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 174.017268][ T9] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 174.017297][ T9] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 174.017319][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 174.017371][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 174.017394][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 174.017419][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 174.017463][ T9] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 174.017487][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.153102][ T9] usb 2-1: config 0 descriptor?? [ 174.382278][ T9] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 174.442324][ T9] usb 2-1: USB disconnect, device number 5 [ 174.591361][ T9] usblp0: removed [ 174.788249][ T6901] netlink: 27 bytes leftover after parsing attributes in process `syz.0.412'. [ 175.003155][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 175.234829][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 175.240061][ T9] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 175.240086][ T9] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 175.240106][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 175.240148][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 175.240167][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 175.240188][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 175.240224][ T9] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 175.240248][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.268095][ T9] usb 2-1: config 0 descriptor?? [ 175.616463][ T9] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 175.811019][ T9] usb 2-1: USB disconnect, device number 6 [ 175.953431][ T9] usblp0: removed [ 178.166980][ T6954] futex_wake_op: syz.2.435 tries to shift op by -1; fix this program [ 178.249797][ T6954] trusted_key: encrypted_key: key user:syz not found [ 183.829731][ T7049] netlink: 'syz.0.472': attribute type 2 has an invalid length. [ 183.829755][ T7049] netlink: 40 bytes leftover after parsing attributes in process `syz.0.472'. [ 184.406351][ T7061] macvlan2: entered allmulticast mode [ 184.649210][ T7066] serio: Serial port ptm1 [ 184.892696][ T7074] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 184.943479][ T7074] CIFS: Attempting to mount //127.0.0.1/share [ 185.053582][ T7077] netlink: 7 bytes leftover after parsing attributes in process `syz.3.485'. [ 185.376367][ T7074] CIFS: VFS: Error connecting to socket. Aborting operation. [ 185.376543][ T7074] CIFS: VFS: cifs_mount failed w/return code = -111 [ 186.669426][ T37] audit: type=1326 audit(1785391743.669:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7105 comm="syz.0.495" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe132ebdf99 code=0x0 [ 187.904679][ T7124] loop2: detected capacity change from 0 to 7 [ 187.930800][ T7124] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 187.930825][ T7124] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 187.930920][ T7124] Dev loop2: unable to read RDB block 7 [ 187.930957][ T7124] loop2: unable to read partition table [ 187.931176][ T7124] loop2: partition table beyond EOD, truncated [ 187.931193][ T7124] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 188.007079][ T7129] netlink: 4 bytes leftover after parsing attributes in process `syz.0.502'. [ 188.687781][ T31] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 188.853581][ T31] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 188.853613][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.853634][ T31] usb 4-1: Product: syz [ 188.853651][ T31] usb 4-1: Manufacturer: syz [ 188.853666][ T31] usb 4-1: SerialNumber: syz [ 188.903961][ T31] usb 4-1: config 0 descriptor?? [ 188.935597][ T31] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 189.453150][ T5795] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 189.625934][ T5795] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.625960][ T5795] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 189.628128][ T5795] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 189.628207][ T5795] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 189.628228][ T5795] usb 2-1: SerialNumber: syz [ 190.158589][ T5795] usb 2-1: 0:2 : does not exist [ 190.390306][ T31] gspca_stk1135: reg_w 0xf err -71 [ 190.391385][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 190.391399][ T31] gspca_stk1135: Sensor write failed [ 190.391436][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 190.391446][ T31] gspca_stk1135: Sensor write failed [ 190.391486][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 190.391497][ T31] gspca_stk1135: Sensor read failed [ 190.391533][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 190.391543][ T31] gspca_stk1135: Sensor read failed [ 190.391551][ T31] gspca_stk1135: Detected sensor type unknown (0x0) [ 190.391591][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 190.391602][ T31] gspca_stk1135: Sensor read failed [ 190.391637][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 190.391647][ T31] gspca_stk1135: Sensor read failed [ 190.391683][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 190.391693][ T31] gspca_stk1135: Sensor write failed [ 190.391728][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 190.501819][ T31] gspca_stk1135: Sensor write failed [ 190.501932][ T31] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 190.546863][ T31] usb 4-1: USB disconnect, device number 2 [ 190.846165][ T5795] usb 2-1: USB disconnect, device number 7 [ 190.931812][ T7169] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 191.108050][ T5854] udevd[5854]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 191.521996][ T7184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.521'. [ 191.743134][ T5795] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 191.893015][ T5795] usb 4-1: Using ep0 maxpacket: 8 [ 191.919316][ T5795] usb 4-1: config 0 has no interfaces? [ 191.931621][ T5795] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 191.931653][ T5795] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.931675][ T5795] usb 4-1: Product: syz [ 191.931690][ T5795] usb 4-1: Manufacturer: syz [ 191.931706][ T5795] usb 4-1: SerialNumber: syz [ 191.991383][ T5795] usb 4-1: config 0 descriptor?? [ 192.168549][ T7196] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 192.331207][ T5722] usb 4-1: USB disconnect, device number 3 [ 192.884231][ T7212] netlink: 52 bytes leftover after parsing attributes in process `syz.2.528'. [ 193.068608][ T7212] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.108407][ T7212] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.285479][ T7217] netlink: 'syz.0.531': attribute type 83 has an invalid length. [ 194.455970][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.586721][ T7249] netlink: 'syz.2.536': attribute type 1 has an invalid length. [ 195.245442][ T7264] IPVS: set_ctl: invalid protocol: 33 172.30.1.4:20000 [ 195.543032][ T7277] capability: warning: `syz.1.546' uses deprecated v2 capabilities in a way that may be insecure [ 195.550643][ T5745] IPVS: starting estimator thread 0... [ 195.880528][ T7278] IPVS: using max 10 ests per chain, 24000 per kthread [ 196.282450][ T7294] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 196.484092][ T7304] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 196.969782][ T7314] bond0: option ad_select: invalid value (253) [ 197.024264][ T7314] bond0 (unregistering): Released all slaves [ 197.719914][ T7337] CIFS: Attempting to mount //127.0.0.1/share [ 197.990750][ T7337] CIFS: VFS: Error connecting to socket. Aborting operation. [ 197.990802][ T7337] CIFS: VFS: cifs_mount failed w/return code = -111 [ 198.088359][ T7346] loop2: detected capacity change from 0 to 7 [ 198.310173][ T7346] Dev loop2: unable to read RDB block 7 [ 198.310220][ T7346] loop2: AHDI p1 p2 p3 [ 198.310239][ T7346] loop2: partition table partially beyond EOD, truncated [ 198.310430][ T7346] loop2: p1 start 1601398130 is beyond EOD, truncated [ 198.310448][ T7346] loop2: p2 start 1702059890 is beyond EOD, truncated [ 199.000155][ T7385] netlink: 12 bytes leftover after parsing attributes in process `syz.2.574'. [ 199.628499][ T7389] 9pnet: p9_errstr2errno: server reported unknown error 0x00 [ 199.654778][ T7385] 8021q: adding VLAN 0 to HW filter on device bond3 [ 199.921075][ T7387] bond3: (slave macvlan1): Enslaving as an active interface with an up link [ 200.058637][ T7402] netlink: 27 bytes leftover after parsing attributes in process `syz.3.578'. [ 201.310214][ T37] audit: type=1326 audit(1785391758.309:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7436 comm="syz.3.591" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fa10309ed89 code=0x7ffc0000 [ 201.310284][ T37] audit: type=1326 audit(1785391758.309:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7436 comm="syz.3.591" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fa10305acfb code=0x7ffc0000 [ 201.310334][ T37] audit: type=1326 audit(1785391758.309:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7436 comm="syz.3.591" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa10309df99 code=0x7ffc0000 [ 201.370681][ T37] audit: type=1326 audit(1785391758.309:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7436 comm="syz.3.591" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fa10305a3ec code=0x7ffc0000 [ 201.370852][ T37] audit: type=1326 audit(1785391758.349:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7436 comm="syz.3.591" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa10309df99 code=0x7ffc0000 [ 201.413521][ T37] audit: type=1326 audit(1785391758.309:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7436 comm="syz.3.591" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa10309df99 code=0x7ffc0000 [ 201.413668][ T37] audit: type=1326 audit(1785391758.419:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7436 comm="syz.3.591" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa10309df99 code=0x7ffc0000 [ 201.454836][ T37] audit: type=1326 audit(1785391758.409:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7436 comm="syz.3.591" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fa10305a44e code=0x7ffc0000 [ 201.495100][ T37] audit: type=1326 audit(1785391758.499:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7436 comm="syz.3.591" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa10309dc2b code=0x7ffc0000 [ 201.520186][ T37] audit: type=1326 audit(1785391758.519:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7436 comm="syz.3.591" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fa10309df99 code=0x7ffc0000 [ 204.949862][ T7488] syz.2.599 (7488) used greatest stack depth: 18416 bytes left [ 205.423236][ T5722] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 205.560724][ T7515] netlink: 'syz.2.612': attribute type 1 has an invalid length. [ 205.560749][ T7515] netlink: 'syz.2.612': attribute type 4 has an invalid length. [ 205.560762][ T7515] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.612'. [ 205.792995][ T5722] usb 5-1: Using ep0 maxpacket: 8 [ 205.900565][ T5722] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 205.900598][ T5722] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.900619][ T5722] usb 5-1: Product: syz [ 205.900635][ T5722] usb 5-1: Manufacturer: syz [ 205.900651][ T5722] usb 5-1: SerialNumber: syz [ 205.995789][ T5722] usb 5-1: config 0 descriptor?? [ 206.264422][ T5722] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 207.735691][ T5722] usb write operation failed. (-71) [ 207.831995][ T5722] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 207.852424][ T5722] dvbdev: DVB: registering new adapter (Terratec H7) [ 207.852542][ T5722] usb 5-1: media controller created [ 207.867745][ T5722] usb read operation failed. (-71) [ 207.870961][ T5722] usb write operation failed. (-71) [ 207.907899][ T5722] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 207.930010][ T5722] usb 5-1: USB disconnect, device number 6 [ 208.640802][ T7531] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 209.261475][ T7523] gretap2: entered allmulticast mode [ 209.300081][ T7523] team0: Port device gretap2 added [ 209.418556][ T7524] bridge0: port 3(team0) entered blocking state [ 209.418704][ T7524] bridge0: port 3(team0) entered disabled state [ 209.465359][ T7524] team0: entered allmulticast mode [ 209.465382][ T7524] team_slave_0: entered allmulticast mode [ 209.465551][ T7524] team_slave_1: entered allmulticast mode [ 209.721147][ T7524] team0: entered promiscuous mode [ 209.721171][ T7524] team_slave_0: entered promiscuous mode [ 209.721392][ T7524] team_slave_1: entered promiscuous mode [ 209.721704][ T7524] gretap2: entered promiscuous mode [ 210.365495][ T7551] loop4: detected capacity change from 0 to 7 [ 210.471756][ T7551] Dev loop4: unable to read RDB block 7 [ 210.471808][ T7551] loop4: unable to read partition table [ 210.472021][ T7551] loop4: partition table beyond EOD, truncated [ 210.472055][ T7551] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 211.193682][ T5722] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 211.343061][ T5722] usb 2-1: Using ep0 maxpacket: 32 [ 211.347362][ T5722] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 16 [ 211.352527][ T5722] usb 2-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 211.352560][ T5722] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.352584][ T5722] usb 2-1: Product: syz [ 211.352608][ T5722] usb 2-1: Manufacturer: syz [ 211.352626][ T5722] usb 2-1: SerialNumber: syz [ 211.446954][ T7557] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 211.662062][ T7555] veth0_to_bridge: entered promiscuous mode [ 211.662531][ T7558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.628'. [ 211.662592][ T7558] veth0_to_bridge: left promiscuous mode [ 211.716999][ T7557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.717649][ T7557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.848270][ T5722] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 211.848342][ T5722] usb 2-1: MIDIStreaming interface descriptor not found [ 212.145010][ T5722] usb 2-1: USB disconnect, device number 8 [ 213.997107][ T5701] udevd[5701]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 214.423750][ T7589] loop7: detected capacity change from 0 to 16384 [ 216.014388][ T7592] loop7: detected capacity change from 16384 to 16383 [ 216.202088][ T7592] Dev loop7: unable to read RDB block 8 [ 216.202279][ T7592] loop7: unable to read partition table [ 216.202504][ T7592] loop_reread_partitions: partition scan of loop7 ((õÉê—) failed (rc=-5) [ 219.172661][ T7613] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.265432][ T7613] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.796518][ T5745] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 219.983063][ T5745] usb 3-1: Using ep0 maxpacket: 8 [ 219.985542][ T5745] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 219.985570][ T5745] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 219.985621][ T5745] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 219.985646][ T5745] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.304628][ T5745] usb 3-1: USB disconnect, device number 6 [ 221.355247][ T7613] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.391415][ T7613] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.123020][ T5612] Bluetooth: hci2: command 0x0406 tx timeout [ 222.135690][ T5609] Bluetooth: hci1: command 0x0406 tx timeout [ 222.139304][ T5610] Bluetooth: hci4: command 0x0406 tx timeout [ 222.207131][ T5609] Bluetooth: hci3: command 0x0406 tx timeout [ 224.863024][ T7693] binder: 7692:7693 ioctl c0306201 0 returned -14 [ 226.944616][ T7709] loop2: detected capacity change from 0 to 7 [ 227.001286][ T7709] Dev loop2: unable to read RDB block 7 [ 227.001333][ T7709] loop2: unable to read partition table [ 227.001560][ T7709] loop2: partition table beyond EOD, truncated [ 227.001605][ T7709] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 228.393149][ T5745] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 228.553074][ T5745] usb 5-1: Using ep0 maxpacket: 16 [ 228.584537][ T5745] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 228.584569][ T5745] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.614489][ T5745] usb 5-1: config 0 descriptor?? [ 228.645388][ T5745] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 228.886871][ T5745] gspca_sonixj: reg_w1 err -71 [ 228.886993][ T5745] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 228.965661][ T5745] usb 5-1: USB disconnect, device number 7 [ 229.836176][ T7734] loop2: detected capacity change from 0 to 7 [ 229.856046][ T7734] Dev loop2: unable to read RDB block 7 [ 229.856092][ T7734] loop2: unable to read partition table [ 229.856352][ T7734] loop2: partition table beyond EOD, truncated [ 229.856372][ T7734] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 229.978918][ T7691] warning: `syz.0.677' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 230.058583][ T7613] syz.1.649 (7613) used greatest stack depth: 18208 bytes left [ 230.671725][ T7747] loop2: detected capacity change from 0 to 7 [ 230.758641][ T7747] Dev loop2: unable to read RDB block 7 [ 230.758698][ T7747] loop2: unable to read partition table [ 230.758918][ T7747] loop2: partition table beyond EOD, truncated [ 230.758962][ T7747] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 231.151143][ T3411] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.278173][ T3411] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.282995][ T3411] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.283050][ T3411] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.517548][ T7756] netlink: 4 bytes leftover after parsing attributes in process `syz.3.701'. [ 234.340000][ T7790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.712'. [ 236.172972][ T5795] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 236.492311][ T5795] usb 2-1: unable to get BOS descriptor or descriptor too short [ 236.496758][ T5795] usb 2-1: not running at top speed; connect to a high speed hub [ 236.498762][ T5795] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 236.498831][ T5795] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 236.498887][ T5795] usb 2-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 236.498942][ T5795] usb 2-1: config 14 has no interface number 0 [ 236.498987][ T5795] usb 2-1: config 14 has no interface number 1 [ 236.499222][ T5795] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 236.499313][ T5795] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 236.499399][ T5795] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 236.499472][ T5795] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.499539][ T5795] usb 2-1: config 14 interface 57 has no altsetting 0 [ 236.499595][ T5795] usb 2-1: config 14 interface 228 has no altsetting 0 [ 236.804860][ T5795] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 236.804893][ T5795] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.804914][ T5795] usb 2-1: Product: syz [ 236.804930][ T5795] usb 2-1: Manufacturer: syz [ 236.804945][ T5795] usb 2-1: SerialNumber: syz [ 237.347138][ T5795] legousbtower 2-1:14.57: interrupt endpoints not found [ 237.800257][ T5795] legousbtower 2-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 237.812739][ T5795] legousbtower 2-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 238.480573][ T7838] usb 2-1: LEGO USB Tower reset control request failed [ 238.680383][ T5722] usb 2-1: USB disconnect, device number 9 [ 238.784363][ T5722] legousbtower 2-1:14.228: LEGO USB Tower #-160 now disconnected [ 241.654153][ T7861] netlink: 12 bytes leftover after parsing attributes in process `syz.2.737'. [ 243.328327][ T7870] mmap: syz.2.740 (7870) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 247.800546][ T37] kauditd_printk_skb: 28 callbacks suppressed [ 247.800566][ T37] audit: type=1800 audit(1785391804.759:43): pid=7905 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.754" name="idVendor" dev="configfs" ino=16858 res=0 errno=0 [ 249.054569][ T7918] usbip-vudc usbip-vudc.0: gadget not bound [ 249.937574][ T7932] netlink: 156 bytes leftover after parsing attributes in process `syz.1.764'. [ 249.998041][ T7935] netlink: 12 bytes leftover after parsing attributes in process `syz.1.764'. [ 250.825446][ T7947] netlink: 176 bytes leftover after parsing attributes in process `syz.0.769'. [ 251.080779][ T7949] bridge_slave_0: left allmulticast mode [ 251.080813][ T7949] bridge_slave_0: left promiscuous mode [ 251.082608][ T7949] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.220645][ T7949] bridge_slave_1: left allmulticast mode [ 253.220682][ T7949] bridge_slave_1: left promiscuous mode [ 253.220918][ T7949] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.079484][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.310814][ T5616] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 257.366761][ T5616] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 257.395004][ T5616] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 257.417744][ T5616] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 257.422287][ T5616] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 259.026018][ T7949] bond0: (slave bond_slave_0): Releasing backup interface [ 259.410221][ T7949] bond0: (slave bond_slave_1): Releasing backup interface [ 259.483061][ T60] Bluetooth: hci5: command tx timeout [ 260.373346][ T7949] team0: Port device team_slave_0 removed [ 260.612694][ T7949] team0: Port device team_slave_1 removed [ 260.673647][ T7949] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.673680][ T7949] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.752485][ T7949] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.752517][ T7949] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.812069][ T7949] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 261.027100][ T8007] faux_driver vkms: [drm] Unknown color mode 7; guessing buffer size. [ 261.571264][ T60] Bluetooth: hci5: command tx timeout [ 261.822344][ T37] audit: type=1326 audit(1785391818.819:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8014 comm="syz.0.788" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe132ebdf99 code=0x7ffc0000 [ 261.822402][ T37] audit: type=1326 audit(1785391818.819:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8014 comm="syz.0.788" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe132ebdf99 code=0x7ffc0000 [ 261.848261][ T37] audit: type=1326 audit(1785391818.839:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8014 comm="syz.0.788" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe132ebdf99 code=0x7ffc0000 [ 261.848444][ T37] audit: type=1326 audit(1785391818.839:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8014 comm="syz.0.788" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe132ebdf99 code=0x7ffc0000 [ 261.848559][ T37] audit: type=1326 audit(1785391818.839:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8014 comm="syz.0.788" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe132ebdf99 code=0x7ffc0000 [ 261.848688][ T37] audit: type=1326 audit(1785391818.839:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8014 comm="syz.0.788" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fe132ebdf99 code=0x7ffc0000 [ 261.905491][ T37] audit: type=1326 audit(1785391818.909:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8014 comm="syz.0.788" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe132e7e7ce code=0x7ffc0000 [ 261.909890][ T37] audit: type=1326 audit(1785391818.909:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8014 comm="syz.0.788" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe132e7e7ce code=0x7ffc0000 [ 261.915923][ T37] audit: type=1326 audit(1785391818.909:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8014 comm="syz.0.788" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe132e7e7ce code=0x7ffc0000 [ 261.982979][ T37] audit: type=1326 audit(1785391818.959:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8014 comm="syz.0.788" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe132e7e7ce code=0x7ffc0000 [ 263.643002][ T60] Bluetooth: hci5: command tx timeout [ 265.061219][ T8043] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 265.125403][ T8026] netlink: 20 bytes leftover after parsing attributes in process `syz.0.790'. [ 265.125880][ T8027] netlink: 20 bytes leftover after parsing attributes in process `syz.0.790'. [ 265.753107][ T60] Bluetooth: hci5: command tx timeout [ 267.312941][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 267.493073][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 267.554454][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 267.554494][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 267.554529][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 267.554556][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 267.554603][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 267.554628][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.345707][ T9] usb 1-1: GET_CAPABILITIES returned 0 [ 268.345763][ T9] usbtmc 1-1:16.0: can't read capabilities [ 270.602010][ T9] usb 1-1: USB disconnect, device number 7 [ 270.881277][ T8110] netlink: 12 bytes leftover after parsing attributes in process `syz.0.815'. [ 271.372114][ T1511] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.847433][ T8110] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 272.721241][ T8131] binder: 8126:8131 unknown command 16777216 [ 272.721267][ T8131] binder: 8126:8131 ioctl c0306201 200000000480 returned -22 [ 273.095168][ T8127] loop7: detected capacity change from 16383 to 0 [ 273.882751][ T1511] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.470607][ T8150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.829'. [ 274.470633][ T8150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.829'. [ 276.154987][ T1511] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.172684][ T1511] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.772003][ T8232] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 286.511513][ T7977] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.512327][ T7977] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.512561][ T7977] bridge_slave_0: entered allmulticast mode [ 286.540136][ T7977] bridge_slave_0: entered promiscuous mode [ 286.567575][ T7977] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.567899][ T7977] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.568144][ T7977] bridge_slave_1: entered allmulticast mode [ 286.597130][ T7977] bridge_slave_1: entered promiscuous mode [ 286.785638][ T7977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.819344][ T7977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.882298][ T7977] team0: Port device team_slave_0 added [ 286.893319][ T7977] team0: Port device team_slave_1 added [ 287.062657][ T7977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.064278][ T7977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 287.064314][ T7977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.068385][ T7977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.068400][ T7977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 287.068428][ T7977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.945193][ T7977] hsr_slave_0: entered promiscuous mode [ 288.948523][ T7977] hsr_slave_1: entered promiscuous mode [ 288.974818][ T7977] debugfs: 'hsr0' already exists in 'hsr' [ 288.974863][ T7977] Cannot create hsr debugfs directory [ 289.303041][ T5804] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 289.336334][ T1511] bridge_slave_1: left allmulticast mode [ 289.336512][ T1511] bridge_slave_1: left promiscuous mode [ 289.455948][ T1511] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.480376][ T5804] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 289.480409][ T5804] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 64 [ 289.480454][ T5804] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 289.480479][ T5804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.636880][ T5804] usb 2-1: config 0 descriptor?? [ 289.638367][ T8294] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 289.638770][ T8294] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 290.063997][ T8301] netlink: 'syz.2.869': attribute type 4 has an invalid length. [ 290.115051][ T8303] netlink: 'syz.2.869': attribute type 4 has an invalid length. [ 290.727545][ T8311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.872'. [ 290.739205][ T1511] bridge_slave_0: left allmulticast mode [ 290.739249][ T1511] bridge_slave_0: left promiscuous mode [ 290.739755][ T1511] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.925153][ T8312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.872'. [ 291.067380][ T60] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 291.166699][ T5804] usb 2-1: USB disconnect, device number 10 [ 293.496935][ T8322] netlink: 12 bytes leftover after parsing attributes in process `syz.1.877'. [ 294.536214][ T5261] 8021q: adding VLAN 0 to HW filter on device eth1 [ 294.538270][ T8288] syz_tun: entered allmulticast mode [ 294.887854][ T8322] 8021q: adding VLAN 0 to HW filter on device bond2 [ 294.966609][ T8323] bond2: (slave syz_tun): Enslaving as an active interface with an up link [ 294.968289][ T8288] syz_tun: left allmulticast mode [ 302.470728][ T5261] 8021q: adding VLAN 0 to HW filter on device eth2 [ 303.800454][ T1511] hsr_slave_0: left promiscuous mode [ 303.883433][ T1511] hsr_slave_1: left promiscuous mode [ 303.905422][ T1511] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.905575][ T1511] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.946152][ T1511] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 303.946184][ T1511] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.262169][ T1511] veth1_macvtap: left promiscuous mode [ 305.262627][ T1511] veth0_macvtap: left promiscuous mode [ 305.291450][ T1511] veth1_vlan: left promiscuous mode [ 305.292083][ T1511] veth0_vlan: left promiscuous mode [ 309.888531][ T1511] team0 (unregistering): Port device team_slave_1 removed [ 310.013786][ T1511] team0 (unregistering): Port device team_slave_0 removed [ 310.353236][ T8490] tipc: Started in network mode [ 310.353272][ T8490] tipc: Node identity 86e2aa80d2ca, cluster identity 4711 [ 310.416109][ T8490] tipc: Enabled bearer , priority 0 [ 310.449855][ T5261] 8021q: adding VLAN 0 to HW filter on device eth3 [ 310.455082][ T8486] syzkaller0: entered promiscuous mode [ 310.455160][ T8486] syzkaller0: entered allmulticast mode [ 310.596051][ T8475] tipc: Resetting bearer [ 310.933915][ T8475] tipc: Disabling bearer [ 312.105865][ T8532] binder: 8530:8532 unknown command 0 [ 312.105888][ T8532] binder: 8530:8532 ioctl c0306201 2000000001c0 returned -22 [ 314.887309][ T8563] netlink: 12 bytes leftover after parsing attributes in process `syz.2.932'. [ 315.814515][ T5804] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 315.957374][ T5616] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 315.975917][ T5616] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 315.996460][ T5804] usb 5-1: Using ep0 maxpacket: 32 [ 315.996472][ T5616] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 316.019196][ T5804] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 316.019225][ T5804] usb 5-1: config 0 has no interface number 0 [ 316.045981][ T5804] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 316.046011][ T5804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.046031][ T5804] usb 5-1: Product: syz [ 316.046051][ T5804] usb 5-1: Manufacturer: syz [ 316.046067][ T5804] usb 5-1: SerialNumber: syz [ 316.093046][ T5804] usb 5-1: config 0 descriptor?? [ 316.106063][ T5616] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 316.106814][ T5616] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 316.320426][ T7977] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 316.577620][ T5804] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 316.577655][ T5804] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 316.603427][ T7977] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 317.218897][ T8566] bond5: entered promiscuous mode [ 317.218927][ T8566] bond5: entered allmulticast mode [ 317.376118][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.699759][ T5261] 8021q: adding VLAN 0 to HW filter on device eth4 [ 318.410963][ T5804] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000006c: -71 [ 318.411303][ T5804] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 318.486598][ T60] Bluetooth: hci4: command tx timeout [ 319.340619][ T5804] usb 5-1: USB disconnect, device number 8 [ 320.565427][ T60] Bluetooth: hci4: command tx timeout [ 321.152946][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 321.182848][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 322.685915][ T60] Bluetooth: hci4: command tx timeout [ 323.466861][ T8658] netlink: 52 bytes leftover after parsing attributes in process `syz.1.950'. [ 323.524740][ T8660] netlink: 52 bytes leftover after parsing attributes in process `syz.1.950'. [ 324.764089][ T60] Bluetooth: hci4: command tx timeout [ 326.313045][ T31] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 326.478718][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 326.482143][ T31] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 326.482202][ T31] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 326.482227][ T31] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 326.482266][ T31] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 326.482292][ T31] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 326.482338][ T31] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 326.482364][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.932308][ T31] usb 1-1: GET_CAPABILITIES returned 0 [ 326.932356][ T31] usbtmc 1-1:16.0: can't read capabilities [ 327.298084][ T5729] usb 1-1: USB disconnect, device number 8 [ 329.231142][ T8747] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 332.183202][ T8574] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.183351][ T8574] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.183590][ T8574] bridge_slave_0: entered allmulticast mode [ 332.214373][ T8574] bridge_slave_0: entered promiscuous mode [ 333.558379][ T8574] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.558479][ T8574] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.558705][ T8574] bridge_slave_1: entered allmulticast mode [ 333.588259][ T8574] bridge_slave_1: entered promiscuous mode [ 334.238423][ T8805] sctp: [Deprecated]: syz.1.983 (pid 8805) Use of struct sctp_assoc_value in delayed_ack socket option. [ 334.238423][ T8805] Use struct sctp_sack_info instead [ 334.471325][ T8574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.578065][ T8574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.693251][ T1511] bridge_slave_1: left allmulticast mode [ 334.693298][ T1511] bridge_slave_1: left promiscuous mode [ 334.693598][ T1511] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.844445][ T1511] bridge_slave_0: left allmulticast mode [ 334.844483][ T1511] bridge_slave_0: left promiscuous mode [ 334.879479][ T1511] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.323921][ T8829] 9p: Bad value for 'wfdno' [ 336.785001][ T1511] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 336.904651][ T1511] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 336.992457][ T1511] bond0 (unregistering): Released all slaves [ 338.095195][ T8820] syzkaller0: entered promiscuous mode [ 338.095225][ T8820] syzkaller0: entered allmulticast mode [ 340.413004][ T1511] hsr_slave_0: left promiscuous mode [ 340.453230][ T1511] hsr_slave_1: left promiscuous mode [ 340.454241][ T1511] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.503959][ T1511] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.187507][ T1511] team0 (unregistering): Port device team_slave_1 removed [ 341.372855][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 341.392846][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 341.402880][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 341.412887][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 341.422856][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 341.472871][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 341.492871][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 341.502882][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 343.278721][ T1511] team0 (unregistering): Port device team_slave_0 removed [ 343.451872][ T8888] netlink: zone id is out of range [ 343.451888][ T8888] netlink: zone id is out of range [ 343.451896][ T8888] netlink: zone id is out of range [ 343.451904][ T8888] netlink: zone id is out of range [ 343.451912][ T8888] netlink: zone id is out of range [ 343.451921][ T8888] netlink: zone id is out of range [ 343.451929][ T8888] netlink: zone id is out of range [ 343.451937][ T8888] netlink: zone id is out of range [ 343.451946][ T8888] netlink: zone id is out of range [ 343.451954][ T8888] netlink: set zone limit has 4 unknown bytes [ 343.833676][ T8574] team0: Port device team_slave_0 added [ 343.873482][ T8574] team0: Port device team_slave_1 added [ 344.208682][ T8574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.208701][ T8574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 344.208730][ T8574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.220765][ T8574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.220782][ T8574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 344.220812][ T8574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.273023][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 344.469831][ T9] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 344.469864][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.469885][ T9] usb 5-1: Product: syz [ 344.469899][ T9] usb 5-1: Manufacturer: syz [ 344.469940][ T9] usb 5-1: SerialNumber: syz [ 344.555118][ T8574] hsr_slave_0: entered promiscuous mode [ 344.560260][ T8574] hsr_slave_1: entered promiscuous mode [ 346.189713][ T9] rtl8150 5-1:1.0: eth9: rtl8150 is detected [ 346.229084][ T9] usb 5-1: USB disconnect, device number 9 [ 346.337260][ T8924] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1008'. [ 346.855940][ T8924] 8021q: adding VLAN 0 to HW filter on device bond6 [ 346.991936][ T8928] macvlan2: entered promiscuous mode [ 346.991965][ T8928] macvlan2: entered allmulticast mode [ 347.218877][ T5722] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 347.247661][ T8931] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 347.315217][ T5261] 8021q: adding VLAN 0 to HW filter on device eth5 [ 347.363659][ T5722] usb 1-1: Using ep0 maxpacket: 32 [ 347.366151][ T5722] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 347.366182][ T5722] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.527290][ T5722] usb 1-1: config 0 descriptor?? [ 347.552909][ T5722] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 350.731782][ T8960] FAULT_INJECTION: forcing a failure. [ 350.731782][ T8960] name failslab, interval 1, probability 100, space 0, times 1 [ 350.731844][ T8960] CPU: 1 UID: 0 PID: 8960 Comm: syz.4.1023 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 350.731870][ T8960] Tainted: [L]=SOFTLOCKUP [ 350.731876][ T8960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 350.731888][ T8960] Call Trace: [ 350.731896][ T8960] [ 350.731905][ T8960] dump_stack_lvl+0xe8/0x150 [ 350.731943][ T8960] should_fail_ex+0x467/0x600 [ 350.731979][ T8960] should_failslab+0xa8/0x100 [ 350.732002][ T8960] kmem_cache_alloc_noprof+0xa4/0x650 [ 350.732020][ T8960] ? jbd2__journal_start+0x145/0x5c0 [ 350.732047][ T8960] ? jbd2__journal_start+0x145/0x5c0 [ 350.732081][ T8960] jbd2__journal_start+0x145/0x5c0 [ 350.732112][ T8960] __ext4_journal_start_sb+0x203/0x5d0 [ 350.732145][ T8960] ext4_dirty_inode+0x93/0x110 [ 350.732175][ T8960] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 350.732202][ T8960] __mark_inode_dirty+0x3a8/0x13b0 [ 350.732234][ T8960] file_update_time_flags+0x3f4/0x4b0 [ 350.732263][ T8960] ext4_page_mkwrite+0x225/0x1150 [ 350.732299][ T8960] ? __pfx_filemap_fault+0x10/0x10 [ 350.732332][ T8960] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 350.732361][ T8960] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 350.732389][ T8960] ? __pte_offset_map+0x29/0x200 [ 350.732422][ T8960] do_page_mkwrite+0x14a/0x310 [ 350.732450][ T8960] do_pte_missing+0x734/0x28f0 [ 350.732480][ T8960] ? handle_mm_fault+0xe8/0x13f0 [ 350.732502][ T8960] handle_mm_fault+0xd28/0x13f0 [ 350.732527][ T8960] ? handle_mm_fault+0xe8/0x13f0 [ 350.732547][ T8960] ? __pfx_handle_mm_fault+0x10/0x10 [ 350.732581][ T8960] ? lock_vma_under_rcu+0x45a/0x500 [ 350.732602][ T8960] ? __pfx_do_futex+0x10/0x10 [ 350.732645][ T8960] do_user_addr_fault+0xa4d/0x1340 [ 350.732671][ T8960] ? trace_page_fault_user+0x84/0x1e0 [ 350.732690][ T8960] exc_page_fault+0x6a/0xc0 [ 350.732713][ T8960] asm_exc_page_fault+0x26/0x30 [ 350.732731][ T8960] RIP: 0033:0x7f51ea332dd2 [ 350.732749][ T8960] Code: 00 00 00 eb 39 0f 1f 00 be 08 00 00 00 48 89 df e8 d3 8b fe ff 48 8b 53 40 48 8d 42 f8 48 89 43 40 8b 43 30 83 c0 08 89 43 30 <4c> 89 62 f8 41 8d 56 01 41 39 ee 0f 83 9d 00 00 00 41 89 d6 48 8b [ 350.732764][ T8960] RSP: 002b:00007ffde2503b10 EFLAGS: 00010202 [ 350.732786][ T8960] RAX: 000000000000e008 RBX: 00007f51eb215720 RCX: 0000000000000000 [ 350.732797][ T8960] RDX: 0000001b32f16000 RSI: 0000000000000008 RDI: 00007f51eb215720 [ 350.732808][ T8960] RBP: 000000000000008f R08: 00007f51ea6d0000 R09: 00007f51ea6e6038 [ 350.732820][ T8960] R10: 0000000000000003 R11: 000000000000000b R12: ffffffff81b60631 [ 350.732831][ T8960] R13: 00007f51ea6e6038 R14: 0000000000000065 R15: ffffffffffff2000 [ 350.732846][ T8960] ? clockevents_program_event+0x101/0x630 [ 350.732886][ T8960] [ 351.353171][ T5722] gspca_vc032x: I2c Bus Busy Wait 00 [ 351.742235][ T8945] syz.2.1020 (8945): drop_caches: 2 [ 352.076200][ T5722] gspca_vc032x: reg_w err -71 [ 352.076221][ T5722] gspca_vc032x: I2c Bus Busy Wait 00 [ 352.076231][ T5722] gspca_vc032x: I2c Bus Busy Wait 00 [ 352.076242][ T5722] gspca_vc032x: I2c Bus Busy Wait 00 [ 352.076251][ T5722] gspca_vc032x: I2c Bus Busy Wait 00 [ 352.076261][ T5722] gspca_vc032x: I2c Bus Busy Wait 00 [ 352.076270][ T5722] gspca_vc032x: I2c Bus Busy Wait 00 [ 352.076280][ T5722] gspca_vc032x: I2c Bus Busy Wait 00 [ 352.076289][ T5722] gspca_vc032x: I2c Bus Busy Wait 00 [ 352.076299][ T5722] gspca_vc032x: I2c Bus Busy Wait 00 [ 352.076308][ T5722] gspca_vc032x: I2c Bus Busy Wait 00 [ 352.076318][ T5722] gspca_vc032x: I2c Bus Busy Wait 00 [ 352.076327][ T5722] gspca_vc032x: I2c Bus Busy Wait 00 [ 352.076337][ T5722] gspca_vc032x: I2c Bus Busy Wait 00 [ 352.076346][ T5722] gspca_vc032x: I2c Bus Busy Wait 00 [ 352.076356][ T5722] gspca_vc032x: I2c Bus Busy Wait 00 [ 352.076365][ T5722] gspca_vc032x: I2c Bus Busy Wait 00 [ 352.076375][ T5722] gspca_vc032x: I2c Bus Busy Wait 00 [ 352.076384][ T5722] gspca_vc032x: Unknown sensor... [ 352.076470][ T5722] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 352.271770][ T5722] usb 1-1: USB disconnect, device number 9 [ 359.276174][ T5261] 8021q: adding VLAN 0 to HW filter on device eth6 [ 362.094669][ T9033] netlink: 550 bytes leftover after parsing attributes in process `syz.4.1040'. [ 365.913181][ T9029] bond2: entered allmulticast mode [ 365.960567][ T9029] bond2: left allmulticast mode [ 366.841363][ T9059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1044'. [ 376.658603][ T6571] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.983472][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 381.485839][ T5616] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 381.583072][ T5616] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 381.609059][ T5616] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 381.643184][ T5616] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 381.644400][ T5616] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 382.251852][ T9135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 384.232263][ T60] Bluetooth: hci5: command tx timeout [ 386.693178][ T9170] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 386.693225][ T9170] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 386.693247][ T9170] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 386.882961][ T37] kauditd_printk_skb: 66 callbacks suppressed [ 386.882983][ T37] audit: type=1800 audit(1785391943.689:120): pid=9170 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1065" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 387.773007][ T9170] syz.2.1065 (9170) used greatest stack depth: 17704 bytes left [ 388.386650][ T60] Bluetooth: hci5: command tx timeout [ 390.110282][ T9196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1070'. [ 390.826145][ T60] Bluetooth: hci5: command tx timeout [ 392.929662][ T60] Bluetooth: hci5: command tx timeout [ 393.328668][ T9213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1075'. [ 405.930275][ T5616] Bluetooth: hci6: command 0x1003 tx timeout [ 405.931310][ T60] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 407.442717][ T9130] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.447793][ T9130] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.461565][ T9130] bridge_slave_0: entered allmulticast mode [ 407.479962][ T9130] bridge_slave_0: entered promiscuous mode [ 407.630745][ T9130] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.653842][ T9130] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.654106][ T9130] bridge_slave_1: entered allmulticast mode [ 407.681008][ T9130] bridge_slave_1: entered promiscuous mode [ 407.896633][ T9130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.943469][ T9130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.020579][ T9130] team0: Port device team_slave_0 added [ 408.038982][ T9130] team0: Port device team_slave_1 added [ 408.186056][ T9130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.186075][ T9130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.186105][ T9130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.223736][ T9130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.223754][ T9130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.223784][ T9130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.325631][ T9130] hsr_slave_0: entered promiscuous mode [ 410.327189][ T9130] hsr_slave_1: entered promiscuous mode [ 410.328332][ T9130] debugfs: 'hsr0' already exists in 'hsr' [ 410.328360][ T9130] Cannot create hsr debugfs directory [ 416.207344][ T9338] tipc: Started in network mode [ 416.207392][ T9338] tipc: Node identity 32844e8b8bbe, cluster identity 4711 [ 416.207616][ T9338] tipc: Enabled bearer , priority 0 [ 416.215267][ T9339] syzkaller0: entered promiscuous mode [ 416.215295][ T9339] syzkaller0: entered allmulticast mode [ 416.376879][ T9341] tipc: Resetting bearer [ 419.298422][ T9384] fuse: Bad value for 'fd' [ 421.337894][ T9401] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1113'. [ 421.404980][ T9402] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1113'. [ 421.990570][ T9336] tipc: Resetting bearer [ 422.294881][ T9336] tipc: Disabling bearer [ 422.612217][ T36] tipc: Node number set to 3107606155 [ 422.969928][ T518] bridge_slave_1: left allmulticast mode [ 422.969965][ T518] bridge_slave_1: left promiscuous mode [ 422.970244][ T518] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.918228][ T518] bridge_slave_0: left allmulticast mode [ 423.918259][ T518] bridge_slave_0: left promiscuous mode [ 424.074957][ T518] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.728081][ T9442] smpboot: CPU 1 is now offline [ 439.456518][ T5702] IPVS: starting estimator thread 0... [ 439.543875][ T9466] IPVS: using max 11 ests per chain, 26400 per kthread [ 440.205543][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 442.760917][ T5616] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 442.831945][ T5616] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 442.847805][ T5616] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 442.850752][ T5616] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 442.863675][ T5616] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 445.605686][ T518] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 445.778081][ T5606] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 445.803359][ T4915] Bluetooth: hci4: command tx timeout [ 445.852182][ T5606] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 445.871881][ T5606] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 445.873246][ T5606] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 445.889228][ T4915] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 445.903526][ T5606] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 446.065093][ T5606] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 446.080190][ T5606] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 446.094432][ T5606] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 446.096635][ T5606] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 448.146034][ T5606] Bluetooth: hci6: command tx timeout [ 448.150104][ T5616] Bluetooth: hci4: command tx timeout [ 448.634713][ T518] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 448.926573][ T5616] Bluetooth: hci7: command tx timeout [ 449.020598][ T518] bond0 (unregistering): Released all slaves [ 450.095171][ T9426] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 450.207213][ T5616] Bluetooth: hci4: command tx timeout [ 450.207241][ T5616] Bluetooth: hci6: command tx timeout [ 451.003111][ T5606] Bluetooth: hci7: command tx timeout [ 452.282933][ T5616] Bluetooth: hci4: command tx timeout [ 452.282973][ T5606] Bluetooth: hci6: command tx timeout [ 453.132340][ T5606] Bluetooth: hci7: command tx timeout [ 454.362909][ T5606] Bluetooth: hci6: command tx timeout [ 455.162884][ T5606] Bluetooth: hci7: command tx timeout [ 463.089941][ T9558] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 486.727059][ T5616] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 486.783633][ T5616] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 486.790058][ T5616] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 486.810750][ T5616] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 486.825488][ T5616] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 488.318553][ T9592] Bluetooth: hci0: unsupported parameter 255 [ 488.318584][ T9592] Bluetooth: hci0: unsupported parameter 255 [ 489.099414][ T5616] Bluetooth: hci2: command tx timeout [ 490.595607][ T9426] bond2: (slave syz_tun): Releasing backup interface [ 491.345834][ T5616] Bluetooth: hci2: command tx timeout [ 493.406143][ T5616] Bluetooth: hci2: command tx timeout [ 495.482912][ T5616] Bluetooth: hci2: command tx timeout [ 501.567607][ T5606] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 501.610036][ T5606] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 501.644795][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.651897][ T5606] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 501.668370][ T5606] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 501.668992][ T5606] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 505.007586][ T5616] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 505.041125][ T5616] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 505.059915][ T5616] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 505.106605][ T5616] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 505.268935][ T5616] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 505.451192][ T5616] Bluetooth: hci1: command tx timeout [ 507.410572][ T5616] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 507.482603][ T5616] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 507.511479][ T5616] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 507.528777][ T5616] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 507.531007][ T5616] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 507.652647][ T5606] Bluetooth: hci1: command tx timeout [ 507.882915][ T5616] Bluetooth: hci3: command tx timeout [ 509.778943][ T5616] Bluetooth: hci1: command tx timeout [ 509.802899][ T5616] Bluetooth: hci5: command tx timeout [ 510.026844][ T5616] Bluetooth: hci3: command tx timeout [ 511.802898][ T5616] Bluetooth: hci1: command tx timeout [ 511.883208][ T5616] Bluetooth: hci5: command tx timeout [ 512.042958][ T5616] Bluetooth: hci3: command tx timeout [ 513.569177][ T5606] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 513.611210][ T5606] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 513.628709][ T5606] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 513.681684][ T5606] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 513.682588][ T5606] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 513.962879][ T5606] Bluetooth: hci5: command tx timeout [ 514.122865][ T5606] Bluetooth: hci3: command tx timeout [ 515.859837][ T5606] Bluetooth: hci8: command tx timeout [ 516.173868][ T5606] Bluetooth: hci5: command tx timeout [ 517.885993][ T5606] Bluetooth: hci8: command tx timeout [ 520.405437][ T5606] Bluetooth: hci8: command tx timeout [ 522.992900][ T5606] Bluetooth: hci8: command tx timeout [ 542.267670][ T5616] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 542.311633][ T5616] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 542.330469][ T5616] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 542.345640][ T5616] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 542.363980][ T5616] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 545.911417][ T5616] Bluetooth: hci9: command tx timeout [ 548.043187][ T5616] Bluetooth: hci9: command tx timeout [ 551.635794][ T5616] Bluetooth: hci9: command tx timeout [ 553.738004][ T5616] Bluetooth: hci9: command tx timeout [ 563.233666][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.442858][ T9625] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR [ 564.590337][ T5606] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 564.680508][ T5606] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 564.696267][ T5606] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 564.697113][ T5606] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 564.697634][ T5606] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 565.781505][ T5616] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 565.869043][ T5616] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 565.887235][ T5616] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 565.888064][ T5616] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 565.888922][ T5616] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 567.002864][ T5616] Bluetooth: hci2: command tx timeout [ 568.539713][ T5616] Bluetooth: hci1: command tx timeout [ 568.610382][ T5606] Bluetooth: hci10: Opcode 0x0c03 failed: -110 [ 569.144116][ T4915] Bluetooth: hci2: command tx timeout [ 569.149856][ T9719] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 570.696292][ T9719] Bluetooth: hci1: command tx timeout [ 571.253388][ T9716] Bluetooth: hci10: Opcode 0x0c03 failed: -110 [ 571.538539][ T9719] Bluetooth: hci2: command tx timeout [ 571.538571][ T9719] Bluetooth: hci6: command 0x0406 tx timeout [ 571.538593][ T9719] Bluetooth: hci7: command 0x0406 tx timeout [ 571.538611][ T9719] Bluetooth: hci4: command 0x0406 tx timeout [ 573.571506][ T60] Bluetooth: hci2: command tx timeout [ 573.571532][ T60] Bluetooth: hci1: command tx timeout [ 573.681896][ T60] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 573.759520][ T60] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 573.790714][ T60] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 573.795249][ T60] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 573.802922][ T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 575.986853][ T60] Bluetooth: hci1: command tx timeout [ 575.986924][ T60] Bluetooth: hci3: command tx timeout [ 578.982801][ T5606] Bluetooth: hci3: command tx timeout [ 581.442049][ T5606] Bluetooth: hci3: command tx timeout [ 583.549109][ T5606] Bluetooth: hci3: command tx timeout [ 586.995597][ T60] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 587.047460][ T60] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 587.048917][ T60] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 587.049704][ T60] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 587.050505][ T60] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 589.632085][ T5606] Bluetooth: hci5: command tx timeout [ 591.642914][ T60] Bluetooth: hci5: command tx timeout [ 595.149014][ T60] Bluetooth: hci5: command tx timeout [ 597.322822][ T60] Bluetooth: hci5: command tx timeout [ 604.198501][ T5606] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 604.267728][ T5606] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 604.269085][ T5606] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 604.271877][ T5606] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 604.272638][ T5606] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 607.547919][ T60] Bluetooth: hci8: command tx timeout [ 609.562855][ T60] Bluetooth: hci8: command tx timeout [ 611.642833][ T60] Bluetooth: hci8: command tx timeout [ 613.723274][ T60] Bluetooth: hci8: command tx timeout [ 624.533224][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 630.596626][ T518] hsr_slave_0: left promiscuous mode [ 630.759364][ T518] hsr_slave_1: left promiscuous mode [ 630.760174][ T518] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 631.322057][ T518] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 631.706376][ T5606] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 631.833606][ T5606] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 631.862360][ T5606] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 631.895640][ T5606] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 631.897708][ T5606] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 632.611873][ T60] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 632.686335][ T60] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 632.691235][ T60] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 632.718715][ T60] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 632.719896][ T60] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 633.572470][ T5606] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 633.609425][ T5606] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 633.611758][ T5606] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 633.629005][ T5606] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 633.658727][ T5606] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 634.505347][ T60] Bluetooth: hci9: command tx timeout [ 634.922789][ T5606] Bluetooth: hci10: command tx timeout [ 636.851374][ T5606] Bluetooth: hci9: command tx timeout [ 636.851453][ T5606] Bluetooth: hci11: command tx timeout [ 637.007754][ T5606] Bluetooth: hci10: command tx timeout [ 639.003005][ T5606] Bluetooth: hci9: command tx timeout [ 639.003031][ T5606] Bluetooth: hci11: command tx timeout [ 639.082927][ T60] Bluetooth: hci10: command tx timeout [ 641.280476][ T60] Bluetooth: hci11: command tx timeout [ 641.280506][ T60] Bluetooth: hci9: command tx timeout [ 641.280523][ T60] Bluetooth: hci10: command tx timeout [ 643.374303][ T5606] Bluetooth: hci11: command tx timeout [ 647.413416][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 647.467577][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 647.469130][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 647.471431][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 647.526249][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 648.123328][ T518] team0 (unregistering): Port device team_slave_1 removed [ 649.643084][ T60] Bluetooth: hci0: command tx timeout [ 651.780690][ T60] Bluetooth: hci0: command tx timeout [ 653.240175][ T518] team0 (unregistering): Port device team_slave_0 removed [ 653.802829][ T60] Bluetooth: hci0: command tx timeout [ 655.882956][ T60] Bluetooth: hci0: command tx timeout [ 669.323138][ T38] INFO: task syz-executor:9480 blocked for more than 144 seconds. [ 669.323160][ T38] Tainted: G L syzkaller #0 [ 669.323168][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 669.323175][ T38] task:syz-executor state:D stack:23304 pid:9480 tgid:9480 ppid:1 task_flags:0x400140 flags:0x00080002 [ 669.323253][ T38] Call Trace: [ 669.323258][ T38] [ 669.323269][ T38] __schedule+0x16dc/0x5500 [ 669.323313][ T38] ? __pfx___schedule+0x10/0x10 [ 669.323342][ T38] rt_mutex_schedule+0x76/0xf0 [ 669.323361][ T38] rt_mutex_slowlock_block+0x55c/0x680 [ 669.323396][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 669.323422][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 669.323447][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 669.323479][ T38] ? rcu_barrier+0x4c/0x530 [ 669.323505][ T38] ? rcu_barrier+0x4c/0x530 [ 669.323530][ T38] ? rcu_barrier+0x4c/0x530 [ 669.323550][ T38] mutex_lock_nested+0x168/0x1d0 [ 669.323573][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 669.323600][ T38] rcu_barrier+0x4c/0x530 [ 669.323629][ T38] netdev_run_todo+0x2ff/0x10d0 [ 669.323654][ T38] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 669.323685][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 669.323707][ T38] ? net_generic+0x1e/0x240 [ 669.323726][ T38] ? net_generic+0x1e/0x240 [ 669.323744][ T38] ? rtnl_is_locked+0x9/0x20 [ 669.323763][ T38] ? nexthop_net_exit_rtnl+0x258/0x2a0 [ 669.323785][ T38] ? ipmr_net_exit_rtnl+0x17d/0x1a0 [ 669.323810][ T38] ops_undo_list+0x396/0x8d0 [ 669.323832][ T38] ? __pfx_ops_undo_list+0x10/0x10 [ 669.323847][ T38] ? ops_init+0x46a/0x5d0 [ 669.323870][ T38] setup_net+0x2f6/0x350 [ 669.323888][ T38] ? __pfx_setup_net+0x10/0x10 [ 669.323907][ T38] ? preinit_net+0x4b5/0x7d0 [ 669.323923][ T38] copy_net_ns+0x4f9/0x720 [ 669.323941][ T38] create_new_namespaces+0x3f0/0x6b0 [ 669.323963][ T38] ? security_capable+0x7e/0x2c0 [ 669.323990][ T38] unshare_nsproxy_namespaces+0x149/0x190 [ 669.324012][ T38] ksys_unshare+0x57d/0xa00 [ 669.324042][ T38] ? __pfx_ksys_unshare+0x10/0x10 [ 669.324072][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.324090][ T38] __x64_sys_unshare+0x38/0x50 [ 669.324112][ T38] do_syscall_64+0x174/0x580 [ 669.324130][ T38] ? trace_irq_disable+0x3b/0x140 [ 669.324146][ T38] ? clear_bhb_loop+0x40/0x90 [ 669.324165][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.324226][ T38] RIP: 0033:0x7f46c35ff267 [ 669.324241][ T38] RSP: 002b:00007ffe856fc8f8 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 669.324256][ T38] RAX: ffffffffffffffda RBX: 00007f46c3885f40 RCX: 00007f46c35ff267 [ 669.324268][ T38] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 669.324277][ T38] RBP: 00007f46c38867b8 R08: 0000000000000000 R09: 0000000000000000 [ 669.324286][ T38] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 669.324295][ T38] R13: 0000000000000003 R14: 00007ffe856fcb38 R15: 0000000000000000 [ 669.324318][ T38] [ 669.324357][ T38] [ 669.324357][ T38] Showing all locks held in the system: [ 669.324369][ T38] 5 locks held by rcuc/0/20: [ 669.324380][ T38] 1 lock held by khungtaskd/38: [ 669.324388][ T38] #0: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 669.324432][ T38] 7 locks held by kworker/u8:6/518: [ 669.324458][ T38] 3 locks held by kworker/u8:18/3411: [ 669.324466][ T38] #0: ffff888032713938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 669.324505][ T38] #1: ffffc9000f107c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 669.324544][ T38] #2: ffffffff8f5b1f78 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 669.324583][ T38] 2 locks held by getty/5351: [ 669.324590][ T38] #0: ffff88803658b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 669.324629][ T38] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 669.324685][ T38] 2 locks held by syz-executor/9475: [ 669.324693][ T38] #0: ffffffff8f5a33c0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4e2/0x720 [ 669.324726][ T38] #1: ffffffff8f5b1f78 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xe5/0x9e0 [ 669.324762][ T38] 2 locks held by syz-executor/9480: [ 669.324770][ T38] #0: ffffffff8f5a33c0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4e2/0x720 [ 669.324803][ T38] #1: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 669.324844][ T38] 2 locks held by syz-executor/9483: [ 669.324852][ T38] #0: ffffffff8f5a33c0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4e2/0x720 [ 669.324885][ T38] #1: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 669.324925][ T38] 1 lock held by syz-executor/9585: [ 669.324933][ T38] #0: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 669.324973][ T38] 1 lock held by syz.2.1147/9606: [ 669.324981][ T38] #0: ffffffff8f5b1f78 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 669.325024][ T38] 1 lock held by syz-executor/9615: [ 669.325032][ T38] #0: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 669.325072][ T38] 1 lock held by syz-executor/9622: [ 669.325080][ T38] #0: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 669.325120][ T38] 1 lock held by syz-executor/9625: [ 669.325128][ T38] #0: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 669.325168][ T38] 1 lock held by syz-executor/9633: [ 669.325176][ T38] #0: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 669.325217][ T38] 1 lock held by syz-executor/9670: [ 669.325225][ T38] #0: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 669.325266][ T38] 1 lock held by syz-executor/9703: [ 669.325274][ T38] #0: ffffffff8f5b1f78 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 669.325316][ T38] 1 lock held by syz-executor/9711: [ 669.325324][ T38] #0: ffffffff8f5b1f78 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 669.325366][ T38] 2 locks held by syz-executor/9730: [ 669.325374][ T38] #0: ffffffff8f5a33c0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4e2/0x720 [ 669.325407][ T38] #1: ffffffff8f5b1f78 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2d5/0x820 [ 669.325450][ T38] 2 locks held by syz-executor/9736: [ 669.325458][ T38] #0: ffffffff8f5a33c0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4e2/0x720 [ 669.325491][ T38] #1: ffffffff8f5b1f78 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x28e/0x8d0 [ 669.325526][ T38] 1 lock held by syz-executor/9761: [ 669.325534][ T38] #0: ffffffff8f5b1f78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 669.325575][ T38] 1 lock held by syz-executor/9783: [ 669.325583][ T38] #0: ffffffff8f5b1f78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 669.325624][ T38] 1 lock held by syz-executor/9787: [ 669.325632][ T38] #0: ffffffff8f5b1f78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 669.325673][ T38] 1 lock held by syz-executor/9792: [ 669.325686][ T38] #0: ffffffff8f5b1f78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 669.325727][ T38] 1 lock held by syz-executor/9799: [ 669.325735][ T38] #0: ffffffff8f5b1f78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 669.325775][ T38] [ 669.325779][ T38] ============================================= [ 669.325779][ T38] [ 669.325786][ T38] NMI backtrace for cpu 0 [ 669.325823][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 669.325848][ T38] Tainted: [L]=SOFTLOCKUP [ 669.325854][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 669.325863][ T38] Call Trace: [ 669.325869][ T38] [ 669.325874][ T38] dump_stack_lvl+0xe8/0x150 [ 669.325900][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 669.325926][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 669.325952][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 669.325980][ T38] sys_info+0x135/0x170 [ 669.326002][ T38] watchdog+0xfd7/0x1030 [ 669.326022][ T38] ? watchdog+0x1c7/0x1030 [ 669.326041][ T38] kthread+0x388/0x470 [ 669.326065][ T38] ? __pfx_watchdog+0x10/0x10 [ 669.326077][ T38] ? __pfx_kthread+0x10/0x10 [ 669.326102][ T38] ret_from_fork+0x514/0xb70 [ 669.326129][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 669.326153][ T38] ? __switch_to+0xc89/0x1420 [ 669.326176][ T38] ? __pfx_kthread+0x10/0x10 [ 669.326200][ T38] ret_from_fork_asm+0x1a/0x30 [ 669.326227][ T38] [ 669.326247][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 669.326259][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 669.326279][ T38] Tainted: [L]=SOFTLOCKUP [ 669.326284][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 669.326293][ T38] Call Trace: [ 669.326298][ T38] [ 669.326304][ T38] vpanic+0x56c/0xa60 [ 669.326321][ T38] ? __pfx_vpanic+0x10/0x10 [ 669.326343][ T38] panic+0xc5/0xd0 [ 669.326358][ T38] ? __pfx_panic+0x10/0x10 [ 669.326374][ T38] ? nmi_cpu_backtrace+0x2b0/0x2d0 [ 669.326402][ T38] ? nmi_trigger_cpumask_backtrace+0x247/0x380 [ 669.326430][ T38] watchdog+0x1030/0x1030 [ 669.326450][ T38] ? watchdog+0x1c7/0x1030 [ 669.326469][ T38] kthread+0x388/0x470 [ 669.326493][ T38] ? __pfx_watchdog+0x10/0x10 [ 669.326505][ T38] ? __pfx_kthread+0x10/0x10 [ 669.326530][ T38] ret_from_fork+0x514/0xb70 [ 669.326556][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 669.326581][ T38] ? __switch_to+0xc89/0x1420 [ 669.326604][ T38] ? __pfx_kthread+0x10/0x10 [ 669.326628][ T38] ret_from_fork_asm+0x1a/0x30 [ 669.326655][ T38] [ 669.326721][ T38] Kernel Offset: disabled