last executing test programs: 24.403961591s ago: executing program 2 (id=3): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r0, &(0x7f0000000e00), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) connect$bt_sco(r1, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="6a7c3a0300000000", 0x8) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='pagemap\x00') preadv(r4, &(0x7f0000000640)=[{&(0x7f0000000b00)=""/152, 0x98}, {&(0x7f0000000500)=""/189, 0x7fffef68}], 0x2, 0x300100, 0x0) 23.425342611s ago: executing program 2 (id=16): socket$netlink(0x10, 0x3, 0x14) syz_emit_vhci(&(0x7f0000000480)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x1c}, @l2cap_cid_signaling={{0x18}, [@l2cap_conn_rsp={{0x3, 0x7, 0x8}, {0x4, 0x6, 0x5, 0xfe01}}, @l2cap_create_chan_rsp={{0xd, 0x42, 0x8}, {0x1ff, 0x7, 0x4, 0x4}}]}}, 0x21) 22.985839079s ago: executing program 2 (id=17): r0 = openat$panthor(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) ioctl$DRM_IOCTL_GET_STATS(r0, 0x807c6406, &(0x7f00000000c0)=""/170) 21.458915909s ago: executing program 2 (id=20): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x184023, 0x0) 21.163457731s ago: executing program 2 (id=22): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) set_mempolicy(0x2, &(0x7f0000000080)=0x3, 0x2) r2 = eventfd2(0x7, 0x1) ioctl$KVM_IRQFD(r1, 0x4020ae76, 0x0) write$eventfd(r2, 0x0, 0x0) readv(r0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x2, 0x1, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 18.899268864s ago: executing program 2 (id=30): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xb3) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x4) 6.537039617s ago: executing program 3 (id=90): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000005440)=[{&(0x7f0000000100)="a9", 0x1}, {&(0x7f00000005c0)="55657ce3e8a34ccb7984beafe9f3ad456f68b1dff512d2796c39a377c3ed93f7e372bd7208cd36711f237b907857ae68f3b8868fc956a3e7e318e027fce1f76e082ffdd6c55c0bdd1a7f0e7ccdf667e8be5f4004f4ddc99f3cbf41b268df3e8a54f8135a34b698e12a3403c256adadafe833b7eb76282dba34823f6709540ea891f46613a8c5d04142081c76ddbbf19105eaf2c84e17263f6d86e9bd80b61b2091e2a7d2657db4342d2191d0da0c528859f292fe83b03a0fedb747ec506475ed12b16ec0", 0xc4}, {&(0x7f0000000740)="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", 0x71f}], 0x3, 0x0, 0x0, 0x880}], 0x1, 0x80001) splice(r2, 0x0, r0, 0x0, 0x800, 0x0) 3.606973655s ago: executing program 1 (id=103): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', 0x0}) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) msgctl$MSG_INFO(0x0, 0xc, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0xc, 0x800007, 0x0, 0x40000005, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) r0 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 3.329797568s ago: executing program 3 (id=104): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind(r0, &(0x7f0000001e80)=@generic={0xa, "cadbd822128b61d73766f6481b3e4cecfb22a58fb6654b1c399a6438c3f7460f450f6a72eca72b8e6c4d9758607e4084a5485833ebe9297c45059480f5855fa6ae5243de8e4d940e6fbd7e6c3efd332bf880a461b822bf20e623b82678796663722eb97caa575dbdfa3a27d11382e546fef19b8afae7d5446b6310ca5202"}, 0x80) 3.236096076s ago: executing program 1 (id=105): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0xa4) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c00000003"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYRES64=r0], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0x9, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x9, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200006, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x10, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2.986082402s ago: executing program 3 (id=106): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000500)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x2) ftruncate(r3, 0xffff) r4 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x8000}) r5 = fcntl$dupfd(r4, 0x0, r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r5}) 2.810141853s ago: executing program 3 (id=107): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x11, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg(r1, &(0x7f0000000640)={&(0x7f0000000540)=@ll={0x11, 0xf5, r2, 0x1, 0x5}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000180)="d09b6d42fd81685544f46c", 0xb}, {&(0x7f0000000080)="4987", 0x2}, {&(0x7f00000000c0)="64dac7d54e547911fbd7556d3b5e63fce1cedfa868cd28604c408c3363ea1604388d00436db1d308c82c", 0x2a}], 0x3, 0x0, 0x0, 0x11000000}, 0x24008814) 2.490908256s ago: executing program 3 (id=110): r0 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x8084) 2.259464122s ago: executing program 3 (id=112): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000005440)=[{&(0x7f0000000100)="a9", 0x1}, {&(0x7f00000005c0)="55657ce3e8a34ccb7984beafe9f3ad456f68b1dff512d2796c39a377c3ed93f7e372bd7208cd36711f237b907857ae68f3b8868fc956a3e7e318e027fce1f76e082ffdd6c55c0bdd1a7f0e7ccdf667e8be5f4004f4ddc99f3cbf41b268df3e8a54f8135a34b698e12a3403c256adadafe833b7eb76282dba34823f6709540ea891f46613a8c5d04142081c76ddbbf19105eaf2c84e17263f6d86e9bd80b61b2091e2a7d2657db4342d2191d0da0c528859f292fe83b03a0fedb747ec506475ed12b16ec0642ea070aeebc00c551f0367eb7d", 0xd2}, {&(0x7f0000000740)="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", 0x71f}], 0x3, 0x0, 0x0, 0x880}], 0x1, 0x80001) splice(r2, 0x0, r0, 0x0, 0x800, 0x0) 2.16569338s ago: executing program 1 (id=114): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905", @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x11e20) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)="c3ac118557822f9a2d4f9c87ca1a46a7a60dd0ea41c2a6800617e9c4fc5d7df95d32fc5a05e7", 0x26, 0x4a) syz_usb_disconnect(r0) 1.891027472s ago: executing program 0 (id=115): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000500)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x2) ftruncate(r3, 0xffff) r4 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x8000}) r5 = fcntl$dupfd(r4, 0x0, r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r5}) 1.76867114s ago: executing program 0 (id=116): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000bc0)={0x30, 0x30, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 760.940905ms ago: executing program 0 (id=117): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) 445.888341ms ago: executing program 1 (id=118): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x11, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg(r1, &(0x7f0000000640)={&(0x7f0000000540)=@ll={0x11, 0xf5, r2, 0x1, 0x5}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000180)="d09b6d42fd81685544f46c", 0xb}, {&(0x7f0000000080)="4987", 0x2}, {&(0x7f00000000c0)="64dac7d54e547911fbd7556d3b5e63fce1cedfa868cd28604c408c3363ea1604388d00436db1d308c82c", 0x2a}], 0x3, 0x0, 0x0, 0x11000000}, 0x24008814) 444.06829ms ago: executing program 0 (id=119): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x81}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 293.205408ms ago: executing program 0 (id=120): r0 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x8084) 189.377862ms ago: executing program 1 (id=121): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000500)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r3}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r4, 0xffffffffffffffff, 0x0) 6.000565ms ago: executing program 0 (id=122): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0xa4) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a01010000000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYRES64=r0], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0x9, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x9, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200006, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x10, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 0s ago: executing program 1 (id=123): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', 0x0}) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) msgctl$MSG_INFO(0x0, 0xc, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0xc, 0x800007, 0x0, 0x40000005, 0x1, 0x4, 0x2, 0x7}}) r0 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.178' (ED25519) to the list of known hosts. [ 91.836725][ T822] cfg80211: failed to load regulatory.db [ 92.461547][ T5593] cgroup: Unknown subsys name 'net' [ 92.704480][ T5593] cgroup: Unknown subsys name 'cpuset' [ 92.757984][ T5593] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 94.796111][ T5593] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.376244][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.403406][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.404233][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.405585][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.407844][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.523315][ T60] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.549580][ T60] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.552013][ T60] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.556075][ T60] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.571727][ T60] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.663269][ T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.705047][ T60] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.713256][ T60] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.717347][ T60] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.724878][ T60] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.728097][ T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.764356][ T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.775928][ T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.794766][ T5612] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.811864][ T5612] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 99.508575][ T5620] Bluetooth: hci0: command tx timeout [ 99.670595][ T5620] Bluetooth: hci1: command tx timeout [ 99.827683][ T5620] Bluetooth: hci3: command tx timeout [ 99.907438][ T5620] Bluetooth: hci2: command tx timeout [ 99.958358][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.959400][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.959617][ T5615] bridge_slave_0: entered allmulticast mode [ 99.962319][ T5615] bridge_slave_0: entered promiscuous mode [ 100.044487][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.044819][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.045017][ T5615] bridge_slave_1: entered allmulticast mode [ 100.048612][ T5615] bridge_slave_1: entered promiscuous mode [ 100.079422][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.079653][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.079862][ T5610] bridge_slave_0: entered allmulticast mode [ 100.082281][ T5610] bridge_slave_0: entered promiscuous mode [ 100.085787][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.086110][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.086390][ T5613] bridge_slave_0: entered allmulticast mode [ 100.096086][ T5613] bridge_slave_0: entered promiscuous mode [ 100.173326][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.173581][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.173799][ T5610] bridge_slave_1: entered allmulticast mode [ 100.176401][ T5610] bridge_slave_1: entered promiscuous mode [ 100.193600][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.194448][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.195253][ T5613] bridge_slave_1: entered allmulticast mode [ 100.207738][ T5613] bridge_slave_1: entered promiscuous mode [ 100.307045][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.392149][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.392579][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.392813][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.393007][ T5617] bridge_slave_0: entered allmulticast mode [ 100.395448][ T5617] bridge_slave_0: entered promiscuous mode [ 100.439780][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.446224][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.483350][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.483648][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.483847][ T5617] bridge_slave_1: entered allmulticast mode [ 100.486315][ T5617] bridge_slave_1: entered promiscuous mode [ 100.516483][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.527883][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.610802][ T5615] team0: Port device team_slave_0 added [ 100.669865][ T5615] team0: Port device team_slave_1 added [ 100.675139][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.693189][ T5610] team0: Port device team_slave_0 added [ 100.702735][ T5613] team0: Port device team_slave_0 added [ 100.742154][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.745486][ T5610] team0: Port device team_slave_1 added [ 100.754318][ T5613] team0: Port device team_slave_1 added [ 100.840021][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.840035][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.840055][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.927368][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.927386][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.927415][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.933094][ T5617] team0: Port device team_slave_0 added [ 100.935002][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.935013][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.935032][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.938912][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.938927][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.938956][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.027522][ T5617] team0: Port device team_slave_1 added [ 101.033902][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.033943][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.034017][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.145429][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.145442][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.145463][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.230731][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.230744][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.230765][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.288287][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.288301][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.288321][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.352469][ T5615] hsr_slave_0: entered promiscuous mode [ 101.354226][ T5615] hsr_slave_1: entered promiscuous mode [ 101.428486][ T5610] hsr_slave_0: entered promiscuous mode [ 101.430121][ T5610] hsr_slave_1: entered promiscuous mode [ 101.431525][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 101.431614][ T5610] Cannot create hsr debugfs directory [ 101.597286][ T5620] Bluetooth: hci0: command tx timeout [ 101.747239][ T5620] Bluetooth: hci1: command tx timeout [ 101.752733][ T5613] hsr_slave_0: entered promiscuous mode [ 101.755225][ T5613] hsr_slave_1: entered promiscuous mode [ 101.758096][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 101.758116][ T5613] Cannot create hsr debugfs directory [ 101.908782][ T5620] Bluetooth: hci3: command tx timeout [ 101.942808][ T5617] hsr_slave_0: entered promiscuous mode [ 101.944406][ T5617] hsr_slave_1: entered promiscuous mode [ 101.945718][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 101.945750][ T5617] Cannot create hsr debugfs directory [ 101.987328][ T5620] Bluetooth: hci2: command tx timeout [ 102.745752][ T5615] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 102.823727][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.839846][ T5615] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 102.888004][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.892963][ T5615] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 102.916454][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.952391][ T5615] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 102.992605][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.119707][ T5610] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.163914][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.174035][ T5610] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.203607][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.217787][ T5610] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.252173][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.292251][ T5610] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.322267][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.489061][ T5613] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 103.523714][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.551121][ T5613] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 103.592944][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.605262][ T5613] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 103.631823][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.667736][ T5620] Bluetooth: hci0: command tx timeout [ 103.672508][ T5613] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 103.713171][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.828265][ T5620] Bluetooth: hci1: command tx timeout [ 103.855845][ T5617] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 103.891877][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.908159][ T5617] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 103.943403][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.955087][ T5617] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 103.986681][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.987426][ T5620] Bluetooth: hci3: command tx timeout [ 104.014682][ T5617] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 104.053502][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.068413][ T5620] Bluetooth: hci2: command tx timeout [ 104.144502][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.283023][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.334019][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.348586][ T168] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.349366][ T168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.429637][ T180] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.449414][ T180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.531344][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.598890][ T180] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.599039][ T180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.625304][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.699418][ T1440] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.699557][ T1440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.814273][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.864467][ T1440] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.864641][ T1440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.895569][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.013789][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.013904][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.126913][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.213932][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.214104][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.305274][ T180] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.305391][ T180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.757861][ T5620] Bluetooth: hci0: command tx timeout [ 105.907648][ T5620] Bluetooth: hci1: command tx timeout [ 106.069811][ T4921] Bluetooth: hci3: command tx timeout [ 106.094148][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.148507][ T4921] Bluetooth: hci2: command tx timeout [ 106.610411][ T5615] veth0_vlan: entered promiscuous mode [ 106.665548][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.691887][ T5615] veth1_vlan: entered promiscuous mode [ 106.829772][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.935499][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.992774][ T5615] veth0_macvtap: entered promiscuous mode [ 107.040998][ T5615] veth1_macvtap: entered promiscuous mode [ 107.064435][ T5610] veth0_vlan: entered promiscuous mode [ 107.161079][ T5610] veth1_vlan: entered promiscuous mode [ 107.176038][ T5613] veth0_vlan: entered promiscuous mode [ 107.186482][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.242956][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.279415][ T5613] veth1_vlan: entered promiscuous mode [ 107.311424][ T1440] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.329634][ T1440] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.333878][ T5617] veth0_vlan: entered promiscuous mode [ 107.336285][ T1056] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.371326][ T1056] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.478126][ T5617] veth1_vlan: entered promiscuous mode [ 107.556634][ T5610] veth0_macvtap: entered promiscuous mode [ 107.652830][ T5610] veth1_macvtap: entered promiscuous mode [ 107.813492][ T5613] veth0_macvtap: entered promiscuous mode [ 107.867722][ T5613] veth1_macvtap: entered promiscuous mode [ 107.901592][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.940786][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.940808][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.995366][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.020510][ T5617] veth0_macvtap: entered promiscuous mode [ 108.066052][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.091540][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.092676][ T5617] veth1_macvtap: entered promiscuous mode [ 108.109417][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.134608][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.154025][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.180386][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.180409][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.212165][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.402564][ T1440] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.435951][ T1440] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.472565][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.472672][ T1440] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.528852][ T1440] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.665989][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.855391][ T1056] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.964784][ T1056] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.981292][ T1056] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.056686][ T1056] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.152002][ T1190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.152021][ T1190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.513095][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.513112][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.876214][ T1440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.876235][ T1440] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.020404][ T1177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.020423][ T1177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.196893][ T1177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.196914][ T1177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.619998][ T5766] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 110.690467][ T1177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.690488][ T1177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.164315][ T5781] input: syz1 as /devices/virtual/input/input5 [ 114.317125][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.926458][ T5834] 9pnet_virtio: no channels available for device syz [ 117.597180][ T5842] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 117.597209][ T5842] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 117.785298][ T5842] vhci_hcd vhci_hcd.0: Device attached [ 118.180026][ T5708] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 118.215600][ T822] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 118.379263][ T5708] usb 1-1: Using ep0 maxpacket: 8 [ 118.441769][ T5708] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 118.441830][ T5708] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 118.441859][ T5708] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.669599][ T5708] usb 1-1: config 0 descriptor?? [ 118.988163][ C1] [drm:vkms_crtc_handle_vblank_timeout] *ERROR* vkms failure on handling vblank [ 119.243270][ T5708] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 119.855033][ T5708] usb 1-1: USB disconnect, device number 2 [ 119.934457][ T180] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.124134][ T5877] Zero length message leads to an empty skb [ 120.261319][ T5620] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 120.323462][ T5620] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 120.343200][ T5620] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 120.347604][ T5620] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 120.352834][ T5620] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 121.003794][ T5843] vhci_hcd: connection reset by peer [ 121.107212][ T1177] vhci_hcd vhci_hcd.3: stop threads [ 121.108333][ T1177] vhci_hcd vhci_hcd.3: release socket [ 121.108620][ T1177] vhci_hcd vhci_hcd.3: disconnect device [ 121.166644][ T180] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.378663][ T5898] netlink: 12 bytes leftover after parsing attributes in process `syz.0.38'. [ 121.802316][ T180] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.294955][ T180] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.550118][ T5620] Bluetooth: hci3: command tx timeout [ 123.438906][ T822] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 123.688490][ T5932] binder: 5929:5932 ioctl c0306201 0 returned -14 [ 124.302559][ T5937] netlink: 12 bytes leftover after parsing attributes in process `syz.0.51'. [ 124.363873][ T180] bridge_slave_1: left allmulticast mode [ 124.363998][ T180] bridge_slave_1: left promiscuous mode [ 124.396379][ T180] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.637194][ T5620] Bluetooth: hci3: command tx timeout [ 124.775383][ T180] bridge_slave_0: left allmulticast mode [ 124.775420][ T180] bridge_slave_0: left promiscuous mode [ 124.798448][ T180] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.110010][ T5971] binder: 5969:5971 ioctl c0306201 0 returned -14 [ 126.707181][ T5620] Bluetooth: hci3: command tx timeout [ 126.999467][ T180] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.115275][ T180] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.152774][ T180] bond0 (unregistering): Released all slaves [ 127.420913][ T5267] 8021q: adding VLAN 0 to HW filter on device eth1 [ 128.612308][ T6012] binder: 6008:6012 ioctl c0306201 0 returned -14 [ 128.787560][ T5620] Bluetooth: hci3: command tx timeout [ 129.473211][ T5267] 8021q: adding VLAN 0 to HW filter on device eth2 [ 130.181839][ T5878] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.184843][ T5878] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.185116][ T5878] bridge_slave_0: entered allmulticast mode [ 130.285734][ T5878] bridge_slave_0: entered promiscuous mode [ 130.318952][ T5878] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.328250][ T5878] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.328583][ T5878] bridge_slave_1: entered allmulticast mode [ 130.377600][ T5878] bridge_slave_1: entered promiscuous mode [ 130.914062][ T180] hsr_slave_0: left promiscuous mode [ 130.958835][ T180] hsr_slave_1: left promiscuous mode [ 130.960154][ T180] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.960223][ T180] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.043482][ T180] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.043511][ T180] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.159100][ T180] veth1_macvtap: left promiscuous mode [ 131.159348][ T180] veth0_macvtap: left promiscuous mode [ 131.194520][ T180] veth1_vlan: left promiscuous mode [ 131.194963][ T180] veth0_vlan: left promiscuous mode [ 132.508933][ T180] team0 (unregistering): Port device team_slave_1 removed [ 132.569687][ T180] team0 (unregistering): Port device team_slave_0 removed [ 132.805509][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.805651][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.831418][ T5878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.874382][ T5267] 8021q: adding VLAN 0 to HW filter on device eth3 [ 132.941675][ T5878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.159955][ T5878] team0: Port device team_slave_0 added [ 133.198447][ T5878] team0: Port device team_slave_1 added [ 133.320258][ T5878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.320275][ T5878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 133.320305][ T5878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.373986][ T5878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.374011][ T5878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 133.374036][ T5878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.806594][ T5878] hsr_slave_0: entered promiscuous mode [ 133.812287][ T5878] hsr_slave_1: entered promiscuous mode [ 133.818064][ T5878] debugfs: 'hsr0' already exists in 'hsr' [ 133.818129][ T5878] Cannot create hsr debugfs directory [ 134.966144][ T5267] 8021q: adding VLAN 0 to HW filter on device eth4 [ 135.587931][ T5708] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 135.751119][ T5708] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 135.751154][ T5708] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 135.751178][ T5708] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 135.751234][ T5708] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 135.751266][ T5708] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 135.751298][ T5708] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 135.756169][ T5708] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 135.756200][ T5708] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 135.756222][ T5708] usb 2-1: Product: syz [ 135.756238][ T5708] usb 2-1: Manufacturer: syz [ 135.908801][ T6147] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 135.911677][ T5708] cdc_wdm 2-1:1.0: skipping garbage [ 135.911696][ T5708] cdc_wdm 2-1:1.0: skipping garbage [ 135.954894][ T5708] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 135.954931][ T5708] cdc_wdm 2-1:1.0: Unknown control protocol [ 136.180637][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 136.180715][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 136.180940][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 136.180954][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 136.181312][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 136.181371][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 136.181671][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 136.181692][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 136.184651][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 136.184714][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 136.185194][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 136.185247][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 136.185592][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 136.185613][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 136.185968][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 136.186013][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 136.186387][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 136.186440][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 136.186758][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 136.186832][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 136.549704][ T32] usb 2-1: USB disconnect, device number 2 [ 136.549831][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 137.335164][ T6180] netlink: 24 bytes leftover after parsing attributes in process `syz.0.122'. [ 137.433324][ T16] ------------[ cut here ]------------ [ 137.433337][ T16] task_rq(p) != rq [ 137.433348][ T16] WARNING: kernel/sched/fair.c:7656 at hrtick_start_fair+0x196/0x1f0, CPU#0: ktimers/0/16 [ 137.433389][ T16] Modules linked in: [ 137.433425][ T16] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 137.433445][ T16] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 137.433459][ T16] RIP: 0010:hrtick_start_fair+0x196/0x1f0 [ 137.433484][ T16] Code: 42 80 3c 20 00 74 08 4c 89 ff e8 85 f5 97 00 4d 39 37 0f 85 0c ff ff ff 48 89 df 5b 41 5c 41 5d 41 5e 41 5f e9 7b 64 fa ff 90 <0f> 0b 90 e9 d1 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 82 [ 137.433499][ T16] RSP: 0018:ffffc90000157aa0 EFLAGS: 00010087 [ 137.433513][ T16] RAX: ffff8880b873ba40 RBX: ffff8880b863ba40 RCX: ffffffff8197d8ae [ 137.433527][ T16] RDX: 0000000000000000 RSI: ffff888027f09f00 RDI: ffff8880b863ba40 [ 137.433539][ T16] RBP: dffffc0000000000 R08: ffffffff8fcf390f R09: 1ffffffff1f9e721 [ 137.433552][ T16] R10: dffffc0000000000 R11: fffffbfff1f9e722 R12: dffffc0000000000 [ 137.433564][ T16] R13: 1ffff110170c78d6 R14: ffff888027f09f00 R15: ffffffff8dc257d8 [ 137.433577][ T16] FS: 0000000000000000(0000) GS:ffff888125a6b000(0000) knlGS:0000000000000000 [ 137.433592][ T16] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 137.433603][ T16] CR2: 0000001b33722ff8 CR3: 000000003d48a000 CR4: 00000000003526f0 [ 137.433618][ T16] Call Trace: [ 137.433628][ T16] [ 137.433639][ T16] set_next_task_fair+0xa68/0xce0 [ 137.433665][ T16] __schedule+0x3e03/0x5550 [ 137.433713][ T16] ? __pfx___schedule+0x10/0x10 [ 137.433731][ T16] ? schedule+0x90/0x360 [ 137.433758][ T16] ? schedule+0x90/0x360 [ 137.433779][ T16] schedule+0x164/0x360 [ 137.433799][ T16] ? smpboot_thread_fn+0x4d/0xa50 [ 137.433816][ T16] smpboot_thread_fn+0x5bc/0xa50 [ 137.433835][ T16] ? smpboot_thread_fn+0x4d/0xa50 [ 137.433858][ T16] kthread+0x388/0x470 [ 137.433879][ T16] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 137.433895][ T16] ? __pfx_kthread+0x10/0x10 [ 137.433916][ T16] ret_from_fork+0x514/0xb70 [ 137.433940][ T16] ? __pfx_ret_from_fork+0x10/0x10 [ 137.433961][ T16] ? __switch_to+0xc79/0x1410 [ 137.433980][ T16] ? __pfx_kthread+0x10/0x10 [ 137.434001][ T16] ret_from_fork_asm+0x1a/0x30 [ 137.434037][ T16] [ 137.434046][ T16] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 137.434058][ T16] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 137.434077][ T16] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 137.434087][ T16] Call Trace: [ 137.434093][ T16] [ 137.434100][ T16] vpanic+0x56c/0xa60 [ 137.434126][ T16] ? __pfx__printk+0x10/0x10 [ 137.434144][ T16] ? __pfx_vpanic+0x10/0x10 [ 137.434168][ T16] ? is_bpf_text_address+0x292/0x2b0 [ 137.434196][ T16] ? is_bpf_text_address+0x26/0x2b0 [ 137.434227][ T16] panic+0xc5/0xd0 [ 137.434252][ T16] ? __pfx_panic+0x10/0x10 [ 137.434285][ T16] ? ret_from_fork_asm+0x1a/0x30 [ 137.434312][ T16] __warn+0x315/0x4c0 [ 137.434337][ T16] ? hrtick_start_fair+0x196/0x1f0 [ 137.434362][ T16] ? hrtick_start_fair+0x196/0x1f0 [ 137.434387][ T16] __report_bug+0x339/0x540 [ 137.434415][ T16] ? hrtick_start_fair+0x196/0x1f0 [ 137.434439][ T16] ? __pfx___report_bug+0x10/0x10 [ 137.434462][ T16] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 137.434493][ T16] ? hrtick_start_fair+0x196/0x1f0 [ 137.434516][ T16] report_bug+0x16a/0x220 [ 137.434539][ T16] ? hrtick_start_fair+0x196/0x1f0 [ 137.434561][ T16] ? hrtick_start_fair+0x198/0x1f0 [ 137.434584][ T16] handle_bug+0x9c/0x200 [ 137.434610][ T16] exc_invalid_op+0x1a/0x50 [ 137.434635][ T16] asm_exc_invalid_op+0x1a/0x20 [ 137.434652][ T16] RIP: 0010:hrtick_start_fair+0x196/0x1f0 [ 137.434676][ T16] Code: 42 80 3c 20 00 74 08 4c 89 ff e8 85 f5 97 00 4d 39 37 0f 85 0c ff ff ff 48 89 df 5b 41 5c 41 5d 41 5e 41 5f e9 7b 64 fa ff 90 <0f> 0b 90 e9 d1 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 82 [ 137.434697][ T16] RSP: 0018:ffffc90000157aa0 EFLAGS: 00010087 [ 137.434711][ T16] RAX: ffff8880b873ba40 RBX: ffff8880b863ba40 RCX: ffffffff8197d8ae [ 137.434724][ T16] RDX: 0000000000000000 RSI: ffff888027f09f00 RDI: ffff8880b863ba40 [ 137.434737][ T16] RBP: dffffc0000000000 R08: ffffffff8fcf390f R09: 1ffffffff1f9e721 [ 137.434750][ T16] R10: dffffc0000000000 R11: fffffbfff1f9e722 R12: dffffc0000000000 [ 137.434763][ T16] R13: 1ffff110170c78d6 R14: ffff888027f09f00 R15: ffffffff8dc257d8 [ 137.434782][ T16] ? set_next_task_fair+0xa4e/0xce0 [ 137.434808][ T16] set_next_task_fair+0xa68/0xce0 [ 137.434833][ T16] __schedule+0x3e03/0x5550 [ 137.434874][ T16] ? __pfx___schedule+0x10/0x10 [ 137.434891][ T16] ? schedule+0x90/0x360 [ 137.434918][ T16] ? schedule+0x90/0x360 [ 137.434940][ T16] schedule+0x164/0x360 [ 137.434959][ T16] ? smpboot_thread_fn+0x4d/0xa50 [ 137.434976][ T16] smpboot_thread_fn+0x5bc/0xa50 [ 137.434994][ T16] ? smpboot_thread_fn+0x4d/0xa50 [ 137.435018][ T16] kthread+0x388/0x470 [ 137.435038][ T16] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 137.435057][ T16] ? __pfx_kthread+0x10/0x10 [ 137.435078][ T16] ret_from_fork+0x514/0xb70 [ 137.435103][ T16] ? __pfx_ret_from_fork+0x10/0x10 [ 137.435125][ T16] ? __switch_to+0xc79/0x1410 [ 137.435144][ T16] ? __pfx_kthread+0x10/0x10 [ 137.435165][ T16] ret_from_fork_asm+0x1a/0x30 [ 137.435210][ T16] [ 138.542813][ T16] Shutting down cpus with NMI [ 138.543475][ T16] Kernel Offset: disabled