last executing test programs: 4m58.093155674s ago: executing program 1 (id=2): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000000)={0x10000, 0x800, {0xffffffffffffffff}, {0xee00}, 0xc, 0xffff}) prctl$PR_SCHED_CORE(0x3e, 0x2, r2, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfe, {0x0, 0x0, 0x0, r7, {0xf}, {}, {0xfff2, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x24040084) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) socket$l2tp6(0xa, 0x2, 0x73) r8 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r8, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) process_mrelease(0xffffffffffffffff, 0x0) request_key(&(0x7f00000011c0)='big_key\x00', &(0x7f0000001200)={'syz', 0x1}, &(0x7f0000001240)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet(0x2, 0xa, 0x7) add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="475a251bdb1e4c438649cdf2", 0xc, 0xfffffffffffffffb) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x50bd2f, 0xfffffffc, {0x60, 0x0, 0x0, r10, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xb, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x3004408c) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 4m57.905085858s ago: executing program 2 (id=3): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000001d80), 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r1, &(0x7f0000000100)={0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="20080200000002"], 0x0}, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) ioctl$EVIOCGMASK(r3, 0x5b02, 0x0) pread64(r3, 0x0, 0x0, 0xa3) 4m56.038515171s ago: executing program 1 (id=6): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000418c0500000600000000080000110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000001c0)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x100000000000000, &(0x7f0000000180)="86"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) 4m55.481480496s ago: executing program 0 (id=8): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="5245434c45560a50484ff56669d0a7611c4545414b455220274344272049303030303030303030303030303030303030300a4449474954414c32202706"], 0xb8) r1 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(r1, r0, 0x0) 4m55.199090108s ago: executing program 0 (id=9): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000cc0)="13", 0x1}, {&(0x7f00000007c0)="b5", 0x1}], 0x2, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x6c, 0x0, &(0x7f00000005c0)=[@request_death, @clear_death={0x400c630f, 0x1}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000480)={@flat=@binder={0x73622a85, 0x1001, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/245, 0xf5, 0x2, 0x200000001b}, @fda={0x66646185, 0x3, 0x1, 0x25}}, &(0x7f0000000500)={0x0, 0x18, 0x40}}}, @increfs={0x40046304, 0x2}], 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x8efd, 0x0, 0x4, 0x800, 0xc0, 0x9, 0x67, 0x401}, 0x20) r3 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000a00)=@generic={0xa, "8ab77fa26849ff26650042e2dacd00005efe0000000162e2adacd2737d00ad6f9fa9f3d7145e15dd9d6d2e19c211220940ad5def53b911ba5b9da13641f9826d7012a749f54b901ee80ea6132ca6e88c776553e1833052ca376304313c4b37780136a4b838570400"}, 0x80, 0x0}, 0x0) 4m54.945896319s ago: executing program 1 (id=10): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) syz_emit_ethernet(0x7f, &(0x7f0000000500)={@remote, @local, @val={@void, {0x8100, 0x0, 0x1, 0x1}}, {@llc={0x4, {@llc={0xbc, 0x0, "d3", "789c2222584e025ac76cc58949d62fdb20693d84327f438ad03e4853d2aad5879c3d465076e6692dc3462f0c6fb55b543566db8db2d09d3fd4a176436b04edadcc2251d87dc01143f4b980c088d2cf26591b8f51aa3c11336cd0b5bcf18843d2932bc1fe1002e09867cd"}}}}}, &(0x7f0000000080)={0x0, 0x1, [0x2e9, 0x567, 0x865, 0x254]}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x400}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, r1) r3 = syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r3, 0xc01064c5, &(0x7f0000000440)={&(0x7f0000000400)}) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @rand_addr=0x64010101}, 0x10) keyctl$chown(0x4, r2, 0xffffffffffffffff, 0xee00) 4m53.101226888s ago: executing program 1 (id=11): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x11, @rand_addr, 0x0, 0x4, 'lblcr\x00', 0x0, 0xfffffff8}, 0x2c) poll(&(0x7f0000000000), 0x20000000000000ea, 0x7) getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) capset(&(0x7f0000000100)={0x20071026}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) r6 = dup(r5) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, 0x0, 0x0) 4m52.590200935s ago: executing program 0 (id=12): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095", @ANYRESDEC=r0, @ANYRESHEX=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000003340)=[{{0x0, 0xfffffffffffffed1, &(0x7f0000000280)=[{&(0x7f0000000600)='4', 0x1}], 0x1, &(0x7f00000002c0)=[@rights={{0x10}}], 0x10, 0x40}}], 0x1, 0x0) r6 = socket(0x15, 0x80005, 0x0) getsockopt(r6, 0x200000000114, 0x2718, 0x0, &(0x7f0000000040)) 4m47.820725904s ago: executing program 0 (id=16): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x104}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) 4m47.768229488s ago: executing program 1 (id=17): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7c2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r2, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/200, 0xc8}], 0x1, 0x91, 0x2) 4m46.923176966s ago: executing program 2 (id=18): r0 = creat(&(0x7f0000000080)='./bus\x00', 0x1d0) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000006c0)={@loopback, 0x0}, &(0x7f0000000700)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000740)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x31, r1}) 4m46.689947246s ago: executing program 1 (id=19): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x24000000) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_EXP_NEW(r0, 0x0, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'veth1_virt_wifi\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r1, r2, 0x25, 0x4, @val=@tcx}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r3, r5, 0x4, r1}, 0x10) 4m46.659439209s ago: executing program 0 (id=21): socket$inet6(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001240)={'wlan0\x00'}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r1) mkdir(&(0x7f0000000100)='./control\x00', 0x0) rmdir(&(0x7f0000000180)='./control\x00') socket(0xa, 0x3, 0xff) 4m45.303195622s ago: executing program 2 (id=23): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETTXFILTER(r0, 0x801054db, &(0x7f0000000240)={0x1}) 4m44.894092131s ago: executing program 0 (id=26): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) getpriority(0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x1494) fcntl$setstatus(r2, 0x4, 0x0) fcntl$setstatus(r2, 0x4, 0x42400) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff3}}}, 0x24}}, 0x0) write$sndseq(r4, &(0x7f0000000000)=[{0x22, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0x95ffffff]}}], 0xffc8) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x2, 0x4000) ioctl$HIDIOCGFIELDINFO(r6, 0xc038480a, &(0x7f0000000280)={0x1, 0x2, 0x6, 0x8, 0x3ff, 0x5, 0x9, 0x3, 0x200, 0x6, 0x3, 0x9, 0x3, 0x81}) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001ac0)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540", @ANYRESHEX=r0, @ANYRES64=r7, @ANYRES64=r1], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 4m31.311235828s ago: executing program 32 (id=19): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x24000000) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_EXP_NEW(r0, 0x0, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'veth1_virt_wifi\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r1, r2, 0x25, 0x4, @val=@tcx}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r3, r5, 0x4, r1}, 0x10) 4m29.827073538s ago: executing program 33 (id=26): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) getpriority(0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x1494) fcntl$setstatus(r2, 0x4, 0x0) fcntl$setstatus(r2, 0x4, 0x42400) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff3}}}, 0x24}}, 0x0) write$sndseq(r4, &(0x7f0000000000)=[{0x22, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0x95ffffff]}}], 0xffc8) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x2, 0x4000) ioctl$HIDIOCGFIELDINFO(r6, 0xc038480a, &(0x7f0000000280)={0x1, 0x2, 0x6, 0x8, 0x3ff, 0x5, 0x9, 0x3, 0x200, 0x6, 0x3, 0x9, 0x3, 0x81}) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001ac0)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540", @ANYRESHEX=r0, @ANYRES64=r7, @ANYRES64=r1], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 4m29.746316373s ago: executing program 34 (id=23): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETTXFILTER(r0, 0x801054db, &(0x7f0000000240)={0x1}) 15.64512979s ago: executing program 4 (id=579): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000002f11ff00000000000100070000000000000000ff0200"/55, @ANYRES32=0x0, @ANYRESOCT=r1], 0xfdef) 13.516529734s ago: executing program 4 (id=586): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newchain={0x64, 0x64, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xd}, {0xe, 0xd}, {0xa, 0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0x5}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1d04e}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x8}]}}, @filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x5317}]}}]}, 0x64}}, 0x48010) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 12.983510548s ago: executing program 4 (id=589): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) capset(&(0x7f0000000100)={0x20071026}, 0x0) socket$kcm(0x10, 0x2, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) 10.289444064s ago: executing program 4 (id=592): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0xc0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0xffffffffffff8000, 0x0) close(r7) 9.302934742s ago: executing program 4 (id=595): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffe) io_uring_setup(0xf0c, &(0x7f000000c480)={0x0, 0xc46e, 0x400, 0x3, 0x3}) io_uring_setup(0x6f9e, &(0x7f0000000600)={0x0, 0x1e28, 0x0, 0x3, 0x28b}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESDEC=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) r5 = socket$unix(0x1, 0x5, 0x0) r6 = dup2(r5, r0) close_range(r6, 0xffffffffffffffff, 0x0) 9.302027003s ago: executing program 6 (id=596): socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="4000000010000104000000020000000000000000", @ANYRES32=0x0, @ANYBLOB="0131010000000000140012800b000100627269646765f022e7ca2b46006409000000000000000001b9ccc1738d6eb757c4962a1d4f42ff31d74b8613f6d2066952df177d71884b4aadc84bde8fa1b44bff467c088a265cb30ed5017d2e4a14cbbac0d3d4bf68de7231c7d8d53f8bc1b8dd003f91b25214bb61d8481da6b88fd8fb248834f04e8bdf644d96c77bffa8436396cfb89d77719e26e5df07ab0132b634df2b16c10b591cb49d84aecdc8d675b79605fe1fe3f6801a33404853959bf454df6518ebc16dc9e21d015c347314b26b11153b9aaf927444d5246125a18e4d85e87f170f9ebe292558f297233ae803d700"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x80) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff030060010000009e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = gettid() ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000280)={0x3, 0x0, 0x0, 0x0, 0x7fffffff}) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) tkill(r5, 0xb) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sysfs$2(0x2, 0x817fff, &(0x7f0000000300)=""/101) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x1000080, 0x0) 7.284068433s ago: executing program 5 (id=598): r0 = syz_io_uring_setup(0x1458, &(0x7f00000004c0)={0x0, 0x4, 0x10180, 0x2000, 0x3ab}, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x38}}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x20, 0x0, @fd_index=0x1, 0x80, {}, 0x4, 0x5}) io_uring_enter(r0, 0x2d3e, 0xfffffffd, 0x0, 0x0, 0x0) 7.010594438s ago: executing program 6 (id=599): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r4, 0xab00, r5) r6 = dup3(r4, r1, 0x80000) ioctl$NBD_DO_IT(r6, 0xab03) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x70bd2b, 0x6, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 6.96716438s ago: executing program 3 (id=600): socket$packet(0x11, 0x3, 0x300) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x8000) 6.961610936s ago: executing program 5 (id=601): socket$kcm(0x2, 0xa, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000002000)='xen_mc_extend_args\x00', 0xffffffffffffffff, 0x0, 0x7ff}, 0x18) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) epoll_create1(0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000180), 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000000, 0xa031, 0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) syz_clone3(0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x80080) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x84, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYBLOB=',wfd', @ANYRESHEX]) sendto$inet(r1, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r1, 0xda90) accept4(r1, 0x0, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) 6.822685216s ago: executing program 4 (id=602): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x6, 0x2, 0xc7a, 0x38414762, [0x3, 0x7], [0x2, 0x6], 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES64], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) read$msr(r0, &(0x7f0000019540)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xe160, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) writev(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) fchown(r0, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) syz_open_dev$usbfs(&(0x7f0000000480), 0xd, 0x141341) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = socket(0x10, 0x80002, 0x40) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x5a) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) connect$inet6(r3, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r5, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCXONC(r5, 0x540a, 0x2) r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x400000, 0x5, 0x0, 0x32525942, 0xc, [{0x6, 0x1ff}, {}, {0x2, 0x8}, {0x1, 0xfffffffc}, {0x80}, {}, {0xffffc33a}, {0x200}], 0x3, 0xfe, 0x0, 0x0, 0x5}}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x9}}}, 0x24}}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000003c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) 6.499547923s ago: executing program 6 (id=603): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='htcp', 0x7) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000004080)='a', 0x1, 0x20000045, 0x0, 0x0) write$P9_RMKNOD(r0, &(0x7f0000000280)={0x14, 0x13, 0x2, {0x4, 0x2}}, 0xfffffe5c) 6.165818427s ago: executing program 3 (id=605): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = syz_open_dev$amidi(&(0x7f00000001c0), 0x2, 0x2000) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0xc0305720, &(0x7f0000000040)) 6.164716343s ago: executing program 6 (id=606): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r4, 0x7}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300), r4, 0x0, 0x2, 0x4}}, 0x20) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800020, 0x0, 0xffffffffffffffc0, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$kcm(0x2d, 0x2, 0x0) r5 = gettid() ptrace$getregset(0x4204, r5, 0x201, &(0x7f00000002c0)={&(0x7f0000000380)=""/199, 0xc7}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002300)=@updpolicy={0xb98, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xc}}, [@algo_aead={0x98f, 0x12, {{'morus640-sse2\x00'}, 0x4a18, 0x200, "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"}}, @user_kmaddress={0x2c, 0x13, {@in=@rand_addr=0x64010101, @in6=@empty, 0x0, 0x2}}, @offload={0xc, 0x1c, {0x0, 0x1}}, @migrate={0x9c, 0x11, [{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@multicast1, @in=@broadcast, @in6=@remote, 0x3c, 0x1, 0x0, 0x3507, 0xa}, {@in6=@mcast1, @in=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@empty, 0x0, 0x2, 0x0, 0x3505, 0x2, 0x2}]}, @lastused={0xc, 0xf, 0x4}, @etimer_thresh={0x8, 0xc, 0xffff}, @XFRMA_SET_MARK={0x8, 0x1d, 0x9}, @user_kmaddress={0x2c, 0x13, {@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x2}}, @offload={0xc, 0x1c, {0x0, 0x2}}, @user_kmaddress={0x2c, 0x13, {@in6=@dev={0xfe, 0x80, '\x00', 0x21}, @in=@rand_addr=0x64010102, 0x0, 0xa}}]}, 0xb98}}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r8}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r8}, 0x38) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x27) 5.973531248s ago: executing program 3 (id=607): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a03000000000000000000070000000900010073797a300000000014000000020a0300000000000000000000000004300000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000040003"], 0x3c0}, 0x1, 0x0, 0x0, 0x20000841}, 0x0) 5.78207763s ago: executing program 5 (id=608): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8a95"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x110}}, 0x0) 5.521164479s ago: executing program 3 (id=610): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmsg$qrtr(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000300), 0xc, &(0x7f0000000600)=[{&(0x7f0000000440)=""/222, 0xde}, {&(0x7f0000000540)=""/132, 0x84}], 0x2, &(0x7f0000002080)=[{0x100c, 0x0, 0x0, ""/4096}, {0x100c, 0x0, 0x0, ""/4096}, {0x18, 0x0, 0x0, ""/10}, {0x44, 0x0, 0x0, ""/56}, {0x58, 0x0, 0x0, ""/76}], 0x20cc, 0x100}, 0x1c, 0x40010001) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) r4 = fsopen(&(0x7f00000000c0)='jffs2\x00', 0x1) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x2004000, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) chdir(&(0x7f00000001c0)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x458002, 0x55) r5 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x34, r6, 0x701, 0x70bd2c, 0x0, {0x45}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000021}, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(r3, 0x8008551c, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRES8=r4]) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) 4.188256182s ago: executing program 7 (id=611): r0 = syz_io_uring_setup(0x1458, &(0x7f00000004c0)={0x0, 0x4, 0x10180, 0x2000, 0x3ab}, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x38}}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x20, 0x0, @fd_index=0x1, 0x80, {}, 0x4, 0x5}) io_uring_enter(r0, 0x2d3e, 0xfffffffd, 0x0, 0x0, 0x0) 2.907933058s ago: executing program 5 (id=612): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffe) io_uring_setup(0xf0c, &(0x7f000000c480)={0x0, 0xc46e, 0x400, 0x3, 0x3}) io_uring_setup(0x6f9e, &(0x7f0000000600)={0x0, 0x1e28, 0x0, 0x3, 0x28b}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESDEC=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) r5 = socket$unix(0x1, 0x5, 0x0) r6 = dup2(r5, r0) close_range(r6, 0xffffffffffffffff, 0x0) 2.89369317s ago: executing program 7 (id=613): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r4, 0xab00, r5) r6 = dup3(r4, r1, 0x80000) ioctl$NBD_DO_IT(r6, 0xab03) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x70bd2b, 0x6, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 2.799089738s ago: executing program 3 (id=614): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000020000000000000000000000850000000f00000085000000a0"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x4c) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_emit_ethernet(0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, 0x0, 0x50) mq_notify(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x48a, &(0x7f0000000100)={0x0, 0xd3df, 0x100, 0x2, 0x3bc, 0x0, r1}, &(0x7f00000003c0), &(0x7f0000000300)) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x42, [0x9, 0x2, 0x8, 0x6, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x2004, 0x3, 0x4, 0xf252, 0x80, 0x800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x0, 0x1ff, 0x8000, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x2, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x37a, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd5, 0x7, 0x1f, 0x404, 0x4, 0x8, 0x8001, 0x7, 0x9, 0x800e8b, 0x5, 0x80000001, 0x48, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x1, 0x1000, 0x80040101, 0x4, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x3, 0x0, 0x7fff, 0x4, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0xf5c1, 0x3ff, 0x3, 0xcac, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x8320fb05, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x3, 0x1654, 0x4, 0x8, 0x2851, 0x3b, 0x20000002, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a8, 0x6, 0x44, 0x409, 0x3, 0x744, 0x4, 0x12, 0x4, 0x10, 0x7fff, 0x2, 0xfffffff8, 0x401, 0xf, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) readv(r5, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) 2.780485606s ago: executing program 6 (id=615): socket$packet(0x11, 0x3, 0x300) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x8000) 716.304471ms ago: executing program 5 (id=616): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='htcp', 0x7) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000004080)='a', 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) write$P9_RMKNOD(r0, 0x0, 0x0) 611.024991ms ago: executing program 7 (id=617): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0xc0305720, &(0x7f0000000040)) 547.294324ms ago: executing program 6 (id=618): socket$kcm(0x2, 0xa, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000002000)='xen_mc_extend_args\x00', 0xffffffffffffffff, 0x0, 0x7ff}, 0x18) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) epoll_create1(0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000180), 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000000, 0xa031, 0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) syz_clone3(0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x80080) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x84, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYBLOB=',wfd', @ANYRESHEX]) sendto$inet(r1, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r1, 0xda90) accept4(r1, 0x0, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) 513.317104ms ago: executing program 7 (id=619): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800040000000000000b00200008000300", @ANYRES32, @ANYBLOB="0a000600080211000001000030005080110001004abee33908f8eef16f162471f40000000800070000000000050002"], 0x58}}, 0x0) 367.413729ms ago: executing program 3 (id=620): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x0, 0x6000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r1, 0xc018aec0, &(0x7f00000000c0)={0x1}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@ipv4_delroute={0x30, 0x19, 0x1, 0x70bd2d, 0x25dfdbf8, {0x2, 0x80, 0x20, 0x0, 0xff, 0x2, 0xff, 0x2, 0x1a00}, [@RTA_DST={0x8, 0x1, @local}, @RTA_MULTIPATH={0xc, 0x9, {0x8, 0x28, 0x10, r4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) mq_open(&(0x7f0000000000)='/@\x00', 0x0, 0x10, &(0x7f0000000040)={0x9, 0x15, 0x813, 0xfffffffb}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000240)={'pimreg\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x4, 0xa}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r8, &(0x7f0000000300)="989f850dd518", &(0x7f00000005c0)=""/104}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000100)=0x1, 0x12) getdents64(r5, &(0x7f00000000c0)=""/41, 0x29) getdents64(r5, &(0x7f0000000f80)=""/4096, 0x1000) 340.75817ms ago: executing program 7 (id=621): r0 = socket$inet_udp(0x2, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 275.456245ms ago: executing program 5 (id=622): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0) 0s ago: executing program 7 (id=623): r0 = syz_io_uring_setup(0x1458, &(0x7f00000004c0)={0x0, 0x4, 0x10180, 0x2000, 0x3ab}, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x38}}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x20, 0x0, @fd_index=0x1, 0x80, {}, 0x4, 0x5}) io_uring_enter(r0, 0x2d3e, 0xfffffffd, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 87.139378][ T981] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.0.84' (ED25519) to the list of known hosts. [ 90.239041][ T5789] cgroup: Unknown subsys name 'net' [ 90.480452][ T5789] cgroup: Unknown subsys name 'cpuset' [ 90.555647][ T5789] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 92.525752][ T5789] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.226972][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.234534][ T5805] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.235886][ T5805] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.238340][ T5805] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.251148][ T5803] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.252891][ T5803] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.253963][ T5803] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.285072][ T5803] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.287564][ T5803] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.293027][ T5803] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.359046][ T5119] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.360621][ T5119] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.362322][ T5119] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.390327][ T61] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.391252][ T61] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.393308][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.400069][ T5805] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.405175][ T5805] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.437290][ T5805] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.443915][ T5805] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.541274][ T5119] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 97.554261][ T5119] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 97.563374][ T5119] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 97.585080][ T5119] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 97.585972][ T5119] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 98.550633][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 98.605966][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 98.646816][ T5804] chnl_net:caif_netlink_parms(): no params data found [ 98.854587][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 99.265146][ T5811] chnl_net:caif_netlink_parms(): no params data found [ 99.296240][ T5119] Bluetooth: hci1: command tx timeout [ 99.374795][ T5119] Bluetooth: hci0: command tx timeout [ 99.447376][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.448168][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.448751][ T5801] bridge_slave_0: entered allmulticast mode [ 99.450575][ T5801] bridge_slave_0: entered promiscuous mode [ 99.455552][ T5119] Bluetooth: hci2: command tx timeout [ 99.535927][ T5119] Bluetooth: hci3: command tx timeout [ 99.627543][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.627655][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.627794][ T5801] bridge_slave_1: entered allmulticast mode [ 99.629588][ T5801] bridge_slave_1: entered promiscuous mode [ 99.694921][ T5119] Bluetooth: hci4: command tx timeout [ 99.806255][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.806372][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.806491][ T5810] bridge_slave_0: entered allmulticast mode [ 99.808246][ T5810] bridge_slave_0: entered promiscuous mode [ 100.005840][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.005979][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.006134][ T5804] bridge_slave_0: entered allmulticast mode [ 100.007977][ T5804] bridge_slave_0: entered promiscuous mode [ 100.021011][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.021147][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.021712][ T5810] bridge_slave_1: entered allmulticast mode [ 100.025639][ T5810] bridge_slave_1: entered promiscuous mode [ 100.176059][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.176209][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.176414][ T5804] bridge_slave_1: entered allmulticast mode [ 100.178479][ T5804] bridge_slave_1: entered promiscuous mode [ 100.269721][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.270020][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.270177][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.270358][ T5808] bridge_slave_0: entered allmulticast mode [ 100.272454][ T5808] bridge_slave_0: entered promiscuous mode [ 100.438547][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.438825][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.438960][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.439319][ T5808] bridge_slave_1: entered allmulticast mode [ 100.441054][ T5808] bridge_slave_1: entered promiscuous mode [ 100.559844][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.818995][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.888852][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.049561][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.049859][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.050081][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.050408][ T5811] bridge_slave_0: entered allmulticast mode [ 101.052133][ T5811] bridge_slave_0: entered promiscuous mode [ 101.127477][ T5801] team0: Port device team_slave_0 added [ 101.132114][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.206051][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.206300][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.206459][ T5811] bridge_slave_1: entered allmulticast mode [ 101.208433][ T5811] bridge_slave_1: entered promiscuous mode [ 101.308007][ T5801] team0: Port device team_slave_1 added [ 101.310724][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.374903][ T5119] Bluetooth: hci1: command tx timeout [ 101.454923][ T5119] Bluetooth: hci0: command tx timeout [ 101.497825][ T5810] team0: Port device team_slave_0 added [ 101.534883][ T5119] Bluetooth: hci2: command tx timeout [ 101.614988][ T5119] Bluetooth: hci3: command tx timeout [ 101.637689][ T5804] team0: Port device team_slave_0 added [ 101.698084][ T5810] team0: Port device team_slave_1 added [ 101.775039][ T5119] Bluetooth: hci4: command tx timeout [ 101.818783][ T5804] team0: Port device team_slave_1 added [ 101.822978][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.897381][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.897394][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.897408][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.187556][ T5808] team0: Port device team_slave_0 added [ 102.258813][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.336883][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.336903][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.336931][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.339180][ T5808] team0: Port device team_slave_1 added [ 102.476349][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.476363][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.476378][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.566340][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.566354][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.566369][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.646740][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.646758][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.646786][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.726706][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.726725][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.726753][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.729005][ T5811] team0: Port device team_slave_0 added [ 102.743305][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.743324][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.743348][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.760747][ T5811] team0: Port device team_slave_1 added [ 102.879032][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.879046][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.879061][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.162217][ T5801] hsr_slave_0: entered promiscuous mode [ 103.163337][ T5801] hsr_slave_1: entered promiscuous mode [ 103.366612][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.366627][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.366642][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.455074][ T5119] Bluetooth: hci1: command tx timeout [ 103.534951][ T5119] Bluetooth: hci0: command tx timeout [ 103.557098][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.557117][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.557142][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.614872][ T5119] Bluetooth: hci2: command tx timeout [ 103.681823][ T5810] hsr_slave_0: entered promiscuous mode [ 103.682760][ T5810] hsr_slave_1: entered promiscuous mode [ 103.683507][ T5810] debugfs: 'hsr0' already exists in 'hsr' [ 103.683583][ T5810] Cannot create hsr debugfs directory [ 103.694864][ T5119] Bluetooth: hci3: command tx timeout [ 103.706586][ T5804] hsr_slave_0: entered promiscuous mode [ 103.708046][ T5804] hsr_slave_1: entered promiscuous mode [ 103.708965][ T5804] debugfs: 'hsr0' already exists in 'hsr' [ 103.708996][ T5804] Cannot create hsr debugfs directory [ 103.855117][ T5119] Bluetooth: hci4: command tx timeout [ 103.894120][ T5808] hsr_slave_0: entered promiscuous mode [ 103.895853][ T5808] hsr_slave_1: entered promiscuous mode [ 103.896905][ T5808] debugfs: 'hsr0' already exists in 'hsr' [ 103.896927][ T5808] Cannot create hsr debugfs directory [ 104.751312][ T5811] hsr_slave_0: entered promiscuous mode [ 104.752302][ T5811] hsr_slave_1: entered promiscuous mode [ 104.752948][ T5811] debugfs: 'hsr0' already exists in 'hsr' [ 104.752971][ T5811] Cannot create hsr debugfs directory [ 105.535019][ T5119] Bluetooth: hci1: command tx timeout [ 105.624822][ T5119] Bluetooth: hci0: command tx timeout [ 105.694900][ T5119] Bluetooth: hci2: command tx timeout [ 105.774834][ T5119] Bluetooth: hci3: command tx timeout [ 105.826307][ T5801] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 105.873648][ T5801] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 105.900107][ T5801] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 105.935040][ T5119] Bluetooth: hci4: command tx timeout [ 105.957201][ T5801] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 106.101642][ T5810] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 106.141274][ T5810] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 106.160946][ T5810] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 106.217385][ T5810] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 106.361221][ T5804] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 106.393096][ T5804] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 106.433006][ T5804] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 106.466850][ T5804] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 106.617849][ T5808] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.658401][ T5808] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.696366][ T5808] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.750631][ T5808] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.831749][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.900478][ T5811] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 106.953356][ T5811] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 106.990961][ T5811] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 107.028752][ T5811] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 107.071176][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.110594][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.111155][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.173187][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.173332][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.183357][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.284122][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.330014][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.331989][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.332168][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.380566][ T1921] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.380952][ T1921] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.442639][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.481158][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.507665][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.507911][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.571776][ T1921] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.571950][ T1921] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.668356][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.720003][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.744350][ T1921] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.744533][ T1921] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.797607][ T1921] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.797829][ T1921] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.899340][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.960640][ T3710] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.960877][ T3710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.011562][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.062711][ T3710] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.062996][ T3710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.286621][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.396467][ T5801] veth0_vlan: entered promiscuous mode [ 108.499963][ T5801] veth1_vlan: entered promiscuous mode [ 108.569103][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.667220][ T5810] veth0_vlan: entered promiscuous mode [ 108.751392][ T5810] veth1_vlan: entered promiscuous mode [ 108.800245][ T5801] veth0_macvtap: entered promiscuous mode [ 108.862000][ T5801] veth1_macvtap: entered promiscuous mode [ 108.890740][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.983804][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.033088][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.036486][ T5810] veth0_macvtap: entered promiscuous mode [ 109.110774][ T5810] veth1_macvtap: entered promiscuous mode [ 109.113054][ T3773] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.120868][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.122648][ T3773] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.132335][ T3773] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.143347][ T3773] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.290727][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.319424][ T5808] veth0_vlan: entered promiscuous mode [ 109.388154][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.457242][ T1179] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.488040][ T5808] veth1_vlan: entered promiscuous mode [ 109.489371][ T1179] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.508755][ T1179] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.523827][ T1179] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.550906][ T3773] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.550938][ T3773] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.720688][ T5811] veth0_vlan: entered promiscuous mode [ 109.730146][ T5804] veth0_vlan: entered promiscuous mode [ 109.738332][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.738354][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.867051][ T5811] veth1_vlan: entered promiscuous mode [ 109.890621][ T5804] veth1_vlan: entered promiscuous mode [ 109.901224][ T1179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.901245][ T1179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.902295][ T5808] veth0_macvtap: entered promiscuous mode [ 109.952637][ T5808] veth1_macvtap: entered promiscuous mode [ 110.001293][ T990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.001327][ T990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.100927][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.140539][ T5811] veth0_macvtap: entered promiscuous mode [ 110.167092][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.224074][ T5811] veth1_macvtap: entered promiscuous mode [ 110.234159][ T5804] veth0_macvtap: entered promiscuous mode [ 110.247427][ T3773] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.256731][ T3773] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.284028][ T1179] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.285098][ T5804] veth1_macvtap: entered promiscuous mode [ 110.300541][ T1179] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.428033][ T5922] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 110.538624][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.602052][ T5922] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 110.726947][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.728614][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.809360][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.809531][ T990] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.836050][ T981] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 110.868904][ T990] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.888649][ T990] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.915131][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 110.944024][ T990] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.981303][ T1179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.981328][ T1179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.995224][ T69] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.011088][ T981] usb 3-1: Using ep0 maxpacket: 8 [ 111.033301][ T69] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.038343][ T69] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.042947][ T981] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 111.043030][ T981] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 111.043051][ T981] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 111.043073][ T981] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 111.043093][ T981] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 111.043135][ T981] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 111.043156][ T981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.410756][ T69] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.572179][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.572195][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.701884][ T981] usb 3-1: usb_control_msg returned -32 [ 111.701942][ T981] usbtmc 3-1:16.0: can't read capabilities [ 112.152081][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.152104][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.333200][ T5930] capability: warning: `syz.0.1' uses deprecated v2 capabilities in a way that may be insecure [ 112.361856][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.361880][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.543693][ T1179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.543716][ T1179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.721225][ T3773] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.721248][ T3773] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.907289][ T5935] ALSA: mixer_oss: invalid OSS volume 'PHOõfiЧaEEAKER' [ 113.107419][ T5938] process 'syz.0.9' launched '/dev/fd/9' with NULL argv: empty string added [ 113.253284][ T5943] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 113.554718][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.565108][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.174828][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.174867][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.274717][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.274772][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.274849][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.274968][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.275021][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 115.753056][ T5889] usb 3-1: USB disconnect, device number 2 [ 116.951511][ T5965] Zero length message leads to an empty skb [ 118.391482][ T5882] IPVS: starting estimator thread 0... [ 120.367285][ T5967] IPVS: using max 8 ests per chain, 19200 per kthread [ 121.453311][ T5976] binder: 5973:5976 ioctl c0306201 0 returned -14 [ 123.445567][ T6006] block nbd3: NBD_DISCONNECT [ 123.476493][ T6006] block nbd3: Disconnected due to user request. [ 123.479910][ T6006] block nbd3: shutting down sockets [ 123.537099][ T5988] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.566746][ T5988] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.641902][ T5889] IPVS: starting estimator thread 0... [ 124.837951][ T6017] IPVS: using max 5 ests per chain, 12000 per kthread [ 125.191227][ T5868] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 125.561743][ C0] vkms_vblank_simulate: vblank timer overrun [ 125.749001][ T5868] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 125.749034][ T5868] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 125.749055][ T5868] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 125.749113][ T5868] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 125.749139][ T5868] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 125.749167][ T5868] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 125.821062][ T5868] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 125.821096][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 125.821118][ T5868] usb 4-1: Product: syz [ 125.821133][ T5868] usb 4-1: Manufacturer: syz [ 126.022179][ T6014] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 126.046178][ T5868] cdc_wdm 4-1:1.0: skipping garbage [ 126.046204][ T5868] cdc_wdm 4-1:1.0: skipping garbage [ 126.067543][ T5868] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 126.067566][ T5868] cdc_wdm 4-1:1.0: Unknown control protocol [ 126.242878][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 126.242975][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 126.243290][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 126.243311][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 126.244187][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 126.244211][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 126.244462][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 126.244482][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 126.245085][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 126.245107][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 126.245357][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 126.245377][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 126.245616][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 126.245635][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 126.245876][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 126.245895][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 126.246140][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 126.246159][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 126.246399][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 126.246418][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 128.176985][ C0] vkms_vblank_simulate: vblank timer overrun [ 129.812114][ T5988] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.244730][ C0] wdm_int_callback: 9490 callbacks suppressed [ 131.244802][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 131.244820][ C0] wdm_int_callback: 9490 callbacks suppressed [ 131.244836][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 131.245217][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 131.245237][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 131.245689][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 131.245751][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 131.246198][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 131.246267][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 131.246724][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 131.246794][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 131.247244][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 131.247307][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 131.247769][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 131.247832][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 131.248236][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 131.248288][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 131.248738][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 131.248808][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 131.249160][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 131.249221][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 131.397559][ T5988] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.302939][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.303048][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.254752][ C0] wdm_int_callback: 11749 callbacks suppressed [ 136.254783][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 136.254801][ C0] wdm_int_callback: 11749 callbacks suppressed [ 136.254816][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 136.255092][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 136.255112][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 136.255355][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 136.255383][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 136.255738][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 136.255765][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 136.256041][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 136.256062][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 136.256310][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 136.256330][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 136.256582][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 136.256604][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 136.256855][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 136.256876][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 136.257123][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 136.257143][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 136.257384][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 136.257405][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 137.304354][ T31] usb 4-1: USB disconnect, device number 2 [ 137.919485][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 137.922492][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 137.928691][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 137.931248][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 137.932176][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 138.588548][ T1921] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.879380][ T1921] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.893719][ T69] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.894316][ T69] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.636061][ T61] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 139.652297][ T61] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 139.653413][ T61] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 139.665044][ T61] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 139.683117][ T61] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 140.015640][ T61] Bluetooth: hci5: command tx timeout [ 140.184403][ T5119] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 140.199860][ T5119] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 140.202556][ T5119] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 140.204003][ T5119] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 140.215283][ T5119] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 141.633870][ C0] vkms_vblank_simulate: vblank timer overrun [ 141.903957][ T61] Bluetooth: hci6: command tx timeout [ 142.025048][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 142.094883][ T61] Bluetooth: hci5: command tx timeout [ 142.230642][ T10] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 142.230720][ T10] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 142.230742][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 142.231048][ T10] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 142.231088][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 142.231164][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 142.306586][ T10] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 142.306682][ T10] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 142.306744][ T10] usb 4-1: Product: syz [ 142.306760][ T10] usb 4-1: Manufacturer: syz [ 142.352549][ T61] Bluetooth: hci7: command tx timeout [ 142.542768][ T6074] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 142.623023][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 142.623082][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 142.780781][ T10] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 142.780806][ T10] cdc_wdm 4-1:1.0: Unknown control protocol [ 145.973291][ T61] Bluetooth: hci6: command tx timeout [ 145.975370][ T61] Bluetooth: hci5: command tx timeout [ 145.976781][ T61] Bluetooth: hci7: command tx timeout [ 146.956806][ T1232] usb 4-1: USB disconnect, device number 3 [ 147.430596][ C1] vkms_vblank_simulate: vblank timer overrun [ 147.481915][ C1] vkms_vblank_simulate: vblank timer overrun [ 148.295569][ T5119] Bluetooth: hci7: command tx timeout [ 148.295608][ T5119] Bluetooth: hci5: command tx timeout [ 148.295630][ T5119] Bluetooth: hci6: command tx timeout [ 148.345203][ C1] vkms_vblank_simulate: vblank timer overrun [ 148.663522][ C1] vkms_vblank_simulate: vblank timer overrun [ 149.716657][ T6049] chnl_net:caif_netlink_parms(): no params data found [ 149.877010][ T6107] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 149.877039][ T6107] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 149.950217][ T6112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.950254][ T6112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.985680][ T6112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.985708][ T6112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.100689][ T6107] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 150.100712][ T6107] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 150.338135][ T61] Bluetooth: hci6: command tx timeout [ 150.338176][ T61] Bluetooth: hci7: command tx timeout [ 150.533181][ T6107] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 150.533209][ T6107] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 152.574860][ T5119] Bluetooth: hci5: command 0x0c1a tx timeout [ 154.088799][ T6107] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 154.088829][ T6107] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 156.104912][ T5119] Bluetooth: hci6: command 0x0c1a tx timeout [ 157.021293][ T6107] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 157.021311][ T6107] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 157.164471][ T6123] binder: 6122:6123 ioctl 4018620d 0 returned -22 [ 157.628227][ T6049] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.628434][ T6049] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.628685][ T6049] bridge_slave_0: entered allmulticast mode [ 157.632395][ T6049] bridge_slave_0: entered promiscuous mode [ 157.692151][ T6049] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.692303][ T6049] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.692546][ T6049] bridge_slave_1: entered allmulticast mode [ 157.718590][ T6049] bridge_slave_1: entered promiscuous mode [ 158.093493][ T6049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.106188][ T6059] chnl_net:caif_netlink_parms(): no params data found [ 158.119470][ T6049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.272978][ T6134] lo speed is unknown, defaulting to 1000 [ 158.469953][ T6138] netlink: 12 bytes leftover after parsing attributes in process `syz.3.59'. [ 158.493345][ T6134] lo speed is unknown, defaulting to 1000 [ 158.519366][ T6049] team0: Port device team_slave_0 added [ 158.584220][ T6134] lo speed is unknown, defaulting to 1000 [ 158.629077][ T6134] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 158.660997][ T6049] team0: Port device team_slave_1 added [ 158.706258][ T6134] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 159.378219][ T6134] lo speed is unknown, defaulting to 1000 [ 159.527134][ T6134] lo speed is unknown, defaulting to 1000 [ 159.533602][ T6049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.533619][ T6049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 159.533646][ T6049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.696953][ T6134] lo speed is unknown, defaulting to 1000 [ 159.697509][ T1225] bridge_slave_1: left allmulticast mode [ 159.697663][ T1225] bridge_slave_1: left promiscuous mode [ 159.706055][ T1225] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.856565][ T1225] bridge_slave_0: left allmulticast mode [ 159.856589][ T1225] bridge_slave_0: left promiscuous mode [ 159.856781][ T1225] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.223974][ T6157] netlink: 12 bytes leftover after parsing attributes in process `syz.3.63'. [ 160.470746][ T6158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.63'. [ 161.565787][ T1225] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.638632][ T1225] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.656289][ T1225] bond0 (unregistering): Released all slaves [ 161.698729][ T6049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.698743][ T6049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 161.698758][ T6049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.701146][ T6059] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.701278][ T6059] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.701509][ T6059] bridge_slave_0: entered allmulticast mode [ 161.704031][ T6059] bridge_slave_0: entered promiscuous mode [ 161.709788][ T6134] lo speed is unknown, defaulting to 1000 [ 161.711946][ T6157] veth1_to_bond: entered allmulticast mode [ 161.975511][ T6158] bond0: (slave bond_slave_1): Releasing backup interface [ 162.187443][ T6134] lo speed is unknown, defaulting to 1000 [ 162.189650][ T6059] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.189737][ T6059] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.189912][ T6059] bridge_slave_1: entered allmulticast mode [ 162.192005][ T6059] bridge_slave_1: entered promiscuous mode [ 162.424511][ T6066] chnl_net:caif_netlink_parms(): no params data found [ 162.436566][ T6134] lo speed is unknown, defaulting to 1000 [ 162.543049][ T6134] lo speed is unknown, defaulting to 1000 [ 162.725761][ T6134] lo speed is unknown, defaulting to 1000 [ 163.167376][ T6167] binder: 6166:6167 ioctl 4018620d 0 returned -22 [ 163.394469][ T6059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.622720][ T6049] hsr_slave_0: entered promiscuous mode [ 163.626370][ T6049] hsr_slave_1: entered promiscuous mode [ 163.627602][ T6049] debugfs: 'hsr0' already exists in 'hsr' [ 163.627627][ T6049] Cannot create hsr debugfs directory [ 163.639936][ T6059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.020723][ T1225] hsr_slave_0: left promiscuous mode [ 164.054810][ T1225] hsr_slave_1: left promiscuous mode [ 164.054875][ T6176] netlink: 12 bytes leftover after parsing attributes in process `syz.4.67'. [ 164.056300][ T1225] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.117010][ T1225] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.961052][ T6180] random: crng reseeded on system resumption [ 166.399228][ T1225] team0 (unregistering): Port device team_slave_1 removed [ 166.709374][ T1225] team0 (unregistering): Port device team_slave_0 removed [ 168.988803][ T6059] team0: Port device team_slave_0 added [ 169.203926][ T6059] team0: Port device team_slave_1 added [ 169.526698][ T6066] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.526861][ T6066] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.527019][ T6066] bridge_slave_0: entered allmulticast mode [ 169.528830][ T6066] bridge_slave_0: entered promiscuous mode [ 169.659942][ T6066] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.660245][ T6066] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.660494][ T6066] bridge_slave_1: entered allmulticast mode [ 169.662747][ T6066] bridge_slave_1: entered promiscuous mode [ 169.703791][ T6059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.703809][ T6059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.703828][ T6059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.874427][ T6059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.874442][ T6059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.874458][ T6059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.006048][ T6066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.044013][ T6066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.281827][ T6200] binder: 6199:6200 ioctl 4018620d 0 returned -22 [ 170.633808][ T6066] team0: Port device team_slave_0 added [ 170.663710][ T6059] hsr_slave_0: entered promiscuous mode [ 170.668117][ T6059] hsr_slave_1: entered promiscuous mode [ 170.693873][ T6066] team0: Port device team_slave_1 added [ 170.889503][ T1225] IPVS: stop unused estimator thread 0... [ 171.055435][ T6066] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.055455][ T6066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.055482][ T6066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.104291][ T6066] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.104310][ T6066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.104334][ T6066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.181514][ T6229] netlink: 12 bytes leftover after parsing attributes in process `syz.3.80'. [ 178.100845][ T1225] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.217242][ T6066] hsr_slave_0: entered promiscuous mode [ 178.220688][ T6066] hsr_slave_1: entered promiscuous mode [ 178.221904][ T6066] debugfs: 'hsr0' already exists in 'hsr' [ 178.221931][ T6066] Cannot create hsr debugfs directory [ 178.247432][ T6248] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 1, id = 0 [ 178.262345][ T6246] binder: 6245:6246 ioctl c0306201 200000000280 returned -14 [ 178.477998][ T1225] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.499051][ T6252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.85'. [ 178.835273][ T6243] lo speed is unknown, defaulting to 1000 [ 178.980889][ T6049] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 179.161140][ T1225] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.214029][ T6049] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 179.351612][ T6049] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 179.557917][ T1225] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.575438][ T6049] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 180.347810][ T6059] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 180.410042][ T6059] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 180.535191][ T6059] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 180.660964][ T6059] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 181.106059][ T1225] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.164819][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 181.319409][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 181.322699][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 181.325013][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 181.325048][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 181.325072][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 181.325119][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 181.325154][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.550552][ T1225] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.572857][ T10] usb 4-1: GET_CAPABILITIES returned 0 [ 181.572890][ T10] usbtmc 4-1:16.0: can't read capabilities [ 181.734399][ T6066] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 181.912071][ C1] vkms_vblank_simulate: vblank timer overrun [ 181.962227][ T31] usb 4-1: USB disconnect, device number 4 [ 182.191258][ C1] vkms_vblank_simulate: vblank timer overrun [ 182.547976][ C1] vkms_vblank_simulate: vblank timer overrun [ 183.135046][ C1] vkms_vblank_simulate: vblank timer overrun [ 183.242795][ T1225] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.267920][ T6295] binder: 6294:6295 ioctl c0306201 200000000280 returned -14 [ 183.298409][ T6066] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 183.357343][ T6066] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 183.412681][ T6066] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 183.684410][ T1225] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.740375][ T6300] : entered promiscuous mode [ 184.050339][ T6313] warning: `syz.3.96' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 184.081750][ T6049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.752867][ T6049] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.901274][ T1225] bridge_slave_1: left allmulticast mode [ 184.901296][ T1225] bridge_slave_1: left promiscuous mode [ 184.901472][ T1225] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.212541][ T1225] bridge_slave_0: left allmulticast mode [ 185.212573][ T1225] bridge_slave_0: left promiscuous mode [ 185.229213][ T1225] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.403109][ T1225] bridge_slave_1: left allmulticast mode [ 185.403151][ T1225] bridge_slave_1: left promiscuous mode [ 185.403436][ T1225] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.498135][ T1225] bridge_slave_0: left allmulticast mode [ 185.498167][ T1225] bridge_slave_0: left promiscuous mode [ 185.500420][ T1225] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.805563][ T1225] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.868483][ T1225] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.887665][ T1225] bond0 (unregistering): Released all slaves [ 192.285530][ T1225] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.347083][ T1225] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.367384][ T1225] bond0 (unregistering): Released all slaves [ 192.901630][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.901813][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.911111][ T6059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.284125][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.284264][ T5949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.341686][ T6059] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.775334][ T6066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.782073][ T3700] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.782550][ T3700] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.991793][ T6225] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.993050][ T6225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.677610][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.677661][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.689703][ T6066] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.608050][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.608393][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.789556][ T3700] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.789847][ T3700] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.076652][ T1225] hsr_slave_0: left promiscuous mode [ 196.147259][ T1225] hsr_slave_1: left promiscuous mode [ 196.148418][ T1225] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.148715][ T1225] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.233210][ T1225] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.233243][ T1225] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.465731][ T1225] hsr_slave_0: left promiscuous mode [ 196.537794][ T1225] hsr_slave_1: left promiscuous mode [ 196.540714][ T1225] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.540744][ T1225] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.566867][ T5890] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 196.589717][ T1225] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.589747][ T1225] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.734321][ T5890] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 196.734354][ T5890] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 196.734374][ T5890] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 196.734432][ T5890] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 196.734459][ T5890] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 196.734485][ T5890] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 196.747246][ T5890] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 196.747283][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 196.747301][ T5890] usb 4-1: Product: syz [ 196.747314][ T5890] usb 4-1: Manufacturer: syz [ 196.756516][ T6405] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 196.759312][ T5890] cdc_wdm 4-1:1.0: skipping garbage [ 196.759328][ T5890] cdc_wdm 4-1:1.0: skipping garbage [ 196.784170][ T6414] qnx6: unable to read the first superblock [ 196.785001][ T6414] qnx6: unable to read the first superblock [ 196.785012][ T6414] qnx6: unable to read the first superblock [ 196.799058][ T5890] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 196.799080][ T5890] cdc_wdm 4-1:1.0: Unknown control protocol [ 196.824559][ T1225] veth1_macvtap: left promiscuous mode [ 196.828459][ T1225] veth0_macvtap: left promiscuous mode [ 196.831024][ T1225] veth1_vlan: left promiscuous mode [ 196.832400][ T1225] veth0_vlan: left promiscuous mode [ 196.953071][ T6416] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 198.276069][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 198.281180][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 198.283545][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 198.296556][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 198.298690][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 198.328518][ T5119] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 198.329787][ T5119] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 198.330977][ T5119] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 198.333527][ T5119] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 198.334570][ T5119] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 199.742755][ T61] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 199.759796][ T61] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 199.764007][ T61] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 199.771100][ T61] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 199.772178][ T61] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 199.887603][ T1232] usb 4-1: USB disconnect, device number 5 [ 200.027158][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 200.035899][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 200.056883][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 200.058661][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 200.061437][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 200.094184][ T1225] veth1_macvtap: left promiscuous mode [ 200.121192][ T1225] veth0_macvtap: left promiscuous mode [ 200.121507][ T1225] veth1_vlan: left promiscuous mode [ 200.121706][ T1225] veth0_vlan: left promiscuous mode [ 200.197677][ T6438] binder: 6436:6438 ioctl c0306201 0 returned -14 [ 200.415533][ T61] Bluetooth: hci0: command tx timeout [ 201.295765][ T6444] netlink: 12 bytes leftover after parsing attributes in process `syz.4.124'. [ 203.126569][ T61] Bluetooth: hci2: command tx timeout [ 203.126749][ T61] Bluetooth: hci3: command tx timeout [ 203.126825][ T61] Bluetooth: hci0: command tx timeout [ 205.161144][ T5119] Bluetooth: hci0: command tx timeout [ 205.161184][ T5119] Bluetooth: hci3: command tx timeout [ 205.161209][ T5119] Bluetooth: hci2: command tx timeout [ 207.026062][ T1225] team0 (unregistering): Port device team_slave_1 removed [ 207.215037][ T61] Bluetooth: hci2: command tx timeout [ 207.215075][ T61] Bluetooth: hci3: command tx timeout [ 207.215098][ T61] Bluetooth: hci0: command tx timeout [ 207.244488][ T1225] team0 (unregistering): Port device team_slave_0 removed [ 207.734876][ T981] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 207.902842][ T981] usb 4-1: Using ep0 maxpacket: 8 [ 207.912227][ T981] usb 4-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 207.912261][ T981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.912282][ T981] usb 4-1: Product: syz [ 207.912296][ T981] usb 4-1: Manufacturer: syz [ 207.912310][ T981] usb 4-1: SerialNumber: syz [ 207.917393][ T981] usb 4-1: config 0 descriptor?? [ 207.944053][ T981] option 4-1:0.0: GSM modem (1-port) converter detected [ 208.152172][ T981] usb 4-1: USB disconnect, device number 6 [ 208.169169][ T981] option 4-1:0.0: device disconnected [ 208.933346][ C0] vkms_vblank_simulate: vblank timer overrun [ 209.295048][ T5119] Bluetooth: hci3: command tx timeout [ 209.295057][ T61] Bluetooth: hci2: command tx timeout [ 210.714924][ T5890] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 210.888982][ T5890] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 210.889029][ T5890] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 210.889054][ T5890] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 210.889067][ T5890] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 210.889082][ T5890] usb 4-1: config 0 interface 0 has no altsetting 0 [ 210.891864][ T5890] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 210.891891][ T5890] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 210.891902][ T5890] usb 4-1: Product: syz [ 210.891910][ T5890] usb 4-1: Manufacturer: syz [ 210.891919][ T5890] usb 4-1: SerialNumber: syz [ 210.899254][ T5890] usb 4-1: config 0 descriptor?? [ 210.910132][ T5890] ldusb 4-1:0.0: Interrupt in endpoint not found [ 211.885349][ T1225] team0 (unregistering): Port device team_slave_1 removed [ 212.106227][ T1225] team0 (unregistering): Port device team_slave_0 removed [ 214.648958][ T10] usb 4-1: USB disconnect, device number 7 [ 214.660765][ T6421] lo speed is unknown, defaulting to 1000 [ 214.844896][ T6429] lo speed is unknown, defaulting to 1000 [ 215.123819][ T6432] lo speed is unknown, defaulting to 1000 [ 217.988709][ T6521] netlink: 'syz.3.146': attribute type 1 has an invalid length. [ 217.988735][ T6521] netlink: 236 bytes leftover after parsing attributes in process `syz.3.146'. [ 221.203159][ T5890] IPVS: starting estimator thread 0... [ 221.284794][ T6536] IPVS: using max 6 ests per chain, 14400 per kthread [ 222.166274][ T6432] chnl_net:caif_netlink_parms(): no params data found [ 222.277676][ T6429] chnl_net:caif_netlink_parms(): no params data found [ 223.581659][ T6421] chnl_net:caif_netlink_parms(): no params data found [ 223.917854][ T6432] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.917957][ T6432] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.918145][ T6432] bridge_slave_0: entered allmulticast mode [ 223.920744][ T6432] bridge_slave_0: entered promiscuous mode [ 224.040702][ T6432] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.040947][ T6432] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.041217][ T6432] bridge_slave_1: entered allmulticast mode [ 224.047714][ T6432] bridge_slave_1: entered promiscuous mode [ 224.334029][ T6429] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.334190][ T6429] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.334463][ T6429] bridge_slave_0: entered allmulticast mode [ 224.380977][ T6429] bridge_slave_0: entered promiscuous mode [ 225.161391][ T6429] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.161559][ T6429] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.161821][ T6429] bridge_slave_1: entered allmulticast mode [ 225.219222][ T6429] bridge_slave_1: entered promiscuous mode [ 225.351215][ T6432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.441643][ T6588] netlink: 'syz.4.154': attribute type 1 has an invalid length. [ 225.441661][ T6588] netlink: 236 bytes leftover after parsing attributes in process `syz.4.154'. [ 225.547052][ T6432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.875928][ T6592] netlink: 32 bytes leftover after parsing attributes in process `syz.3.156'. [ 226.155320][ T6421] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.155614][ T6421] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.155880][ T6421] bridge_slave_0: entered allmulticast mode [ 226.159259][ T6421] bridge_slave_0: entered promiscuous mode [ 226.207740][ T6429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.485217][ T6421] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.485307][ T6421] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.485491][ T6421] bridge_slave_1: entered allmulticast mode [ 226.487239][ T6421] bridge_slave_1: entered promiscuous mode [ 226.490799][ T6429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.683214][ T6432] team0: Port device team_slave_0 added [ 227.490937][ T6432] team0: Port device team_slave_1 added [ 227.951899][ T6601] block nbd3: NBD_DISCONNECT [ 228.081918][ T6421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.203653][ T6429] team0: Port device team_slave_0 added [ 228.214053][ T6421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.216127][ T6432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.216143][ T6432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.216166][ T6432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.296061][ T6605] siw: device registration error -23 [ 228.735480][ T6432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.735499][ T6432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.735528][ T6432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.748499][ T6429] team0: Port device team_slave_1 added [ 231.659440][ T6421] team0: Port device team_slave_0 added [ 231.922076][ T6421] team0: Port device team_slave_1 added [ 231.925569][ T6429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.925584][ T6429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 231.925606][ T6429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.660101][ T6429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.660120][ T6429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.660146][ T6429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.679054][ T6634] block nbd4: NBD_DISCONNECT [ 233.263765][ T6432] hsr_slave_0: entered promiscuous mode [ 233.276056][ T6432] hsr_slave_1: entered promiscuous mode [ 233.280729][ T6432] debugfs: 'hsr0' already exists in 'hsr' [ 233.280759][ T6432] Cannot create hsr debugfs directory [ 233.286593][ T6421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.286609][ T6421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.286631][ T6421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.307832][ T6421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.307849][ T6421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.307873][ T6421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.743645][ T6429] hsr_slave_0: entered promiscuous mode [ 233.745833][ T6429] hsr_slave_1: entered promiscuous mode [ 233.746858][ T6429] debugfs: 'hsr0' already exists in 'hsr' [ 233.746882][ T6429] Cannot create hsr debugfs directory [ 234.501796][ T6421] hsr_slave_0: entered promiscuous mode [ 234.503500][ T6421] hsr_slave_1: entered promiscuous mode [ 234.507844][ T6421] debugfs: 'hsr0' already exists in 'hsr' [ 234.507872][ T6421] Cannot create hsr debugfs directory [ 235.389378][ T6674] block nbd4: NBD_DISCONNECT [ 235.658200][ T6677] binder: 6675:6677 ioctl c0306201 0 returned -14 [ 237.777850][ T6704] block nbd4: NBD_DISCONNECT [ 238.596332][ T6721] binder: 6719:6721 ioctl c0306201 0 returned -14 [ 240.024431][ T1225] bridge_slave_1: left allmulticast mode [ 240.024463][ T1225] bridge_slave_1: left promiscuous mode [ 240.025185][ T1225] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.117946][ T1225] bridge_slave_0: left allmulticast mode [ 240.117978][ T1225] bridge_slave_0: left promiscuous mode [ 240.118283][ T1225] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.211110][ T1225] bridge_slave_1: left allmulticast mode [ 240.211137][ T1225] bridge_slave_1: left promiscuous mode [ 240.211329][ T1225] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.297157][ T1225] bridge_slave_0: left allmulticast mode [ 240.297191][ T1225] bridge_slave_0: left promiscuous mode [ 240.297466][ T1225] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.429994][ T1225] bridge_slave_1: left allmulticast mode [ 240.430027][ T1225] bridge_slave_1: left promiscuous mode [ 240.430491][ T1225] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.521334][ T1225] bridge_slave_0: left allmulticast mode [ 240.521368][ T1225] bridge_slave_0: left promiscuous mode [ 240.521653][ T1225] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.122815][ T6763] netlink: 'syz.4.198': attribute type 1 has an invalid length. [ 242.496963][ T1225] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.556683][ T1225] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.577823][ T1225] bond0 (unregistering): Released all slaves [ 244.255603][ T1225] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.338065][ T1225] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.407766][ T1225] bond0 (unregistering): Released all slaves [ 245.816380][ T1225] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.890735][ T1225] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.939307][ T1225] bond0 (unregistering): Released all slaves [ 245.988885][ T6763] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 249.035008][ T1225] hsr_slave_0: left promiscuous mode [ 249.090933][ T1225] hsr_slave_1: left promiscuous mode [ 249.092072][ T1225] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.163163][ T1225] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.367680][ T1225] hsr_slave_0: left promiscuous mode [ 249.405503][ T1225] hsr_slave_1: left promiscuous mode [ 249.407571][ T1225] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.477954][ T1225] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.655595][ T1225] hsr_slave_0: left promiscuous mode [ 249.696997][ T1225] hsr_slave_1: left promiscuous mode [ 249.698261][ T1225] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.742556][ T1225] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.173366][ T6820] netlink: 'syz.3.209': attribute type 1 has an invalid length. [ 253.216092][ T1225] team0 (unregistering): Port device team_slave_1 removed [ 253.456191][ T1225] team0 (unregistering): Port device team_slave_0 removed [ 256.101414][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.101515][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.476371][ T1225] team0 (unregistering): Port device team_slave_1 removed [ 256.615569][ T1225] team0 (unregistering): Port device team_slave_0 removed [ 257.196938][ T6850] netlink: 52 bytes leftover after parsing attributes in process `syz.4.219'. [ 257.248921][ T6851] netlink: 4 bytes leftover after parsing attributes in process `syz.4.219'. [ 258.154457][ C0] vkms_vblank_simulate: vblank timer overrun [ 258.450821][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 258.460994][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 258.462310][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 258.473313][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 258.474164][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 258.522489][ C0] vkms_vblank_simulate: vblank timer overrun [ 258.955512][ T1225] team0 (unregistering): Port device team_slave_1 removed [ 259.171726][ T1225] team0 (unregistering): Port device team_slave_0 removed [ 259.438135][ C0] vkms_vblank_simulate: vblank timer overrun [ 259.523801][ C0] vkms_vblank_simulate: vblank timer overrun [ 259.713217][ T5119] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 259.738705][ T5119] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 259.740129][ T5119] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 259.742090][ T5119] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 259.743151][ T5119] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 259.839061][ T61] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 259.880753][ T61] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 259.881826][ T61] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 259.883000][ T61] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 259.883876][ T61] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 260.575397][ T5119] Bluetooth: hci5: command tx timeout [ 261.431604][ T6820] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 261.854974][ T5119] Bluetooth: hci6: command tx timeout [ 261.934913][ T5119] Bluetooth: hci7: command tx timeout [ 262.339588][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.655185][ T61] Bluetooth: hci5: command tx timeout [ 262.970252][ T5119] block nbd4: Receive control failed (result -32) [ 262.990680][ T6878] block nbd4: shutting down sockets [ 263.679716][ T6897] lo speed is unknown, defaulting to 1000 [ 263.720070][ T6897] lo speed is unknown, defaulting to 1000 [ 263.768255][ T6897] lo speed is unknown, defaulting to 1000 [ 263.787139][ C0] vkms_vblank_simulate: vblank timer overrun [ 263.935031][ T5119] Bluetooth: hci6: command tx timeout [ 263.957624][ T6897] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 264.011827][ T6432] netdevsim netdevsim7: probe with driver netdevsim failed with error -12 [ 264.016835][ T5119] Bluetooth: hci7: command tx timeout [ 264.232252][ T6897] lo speed is unknown, defaulting to 1000 [ 264.251578][ T6897] lo speed is unknown, defaulting to 1000 [ 264.614827][ T6897] lo speed is unknown, defaulting to 1000 [ 264.735135][ T5119] Bluetooth: hci5: command tx timeout [ 264.834029][ T6897] lo speed is unknown, defaulting to 1000 [ 264.894123][ T6897] lo speed is unknown, defaulting to 1000 [ 265.117614][ T6897] lo speed is unknown, defaulting to 1000 [ 265.177787][ T6897] lo speed is unknown, defaulting to 1000 [ 265.253347][ T6908] ======================================================= [ 265.253347][ T6908] WARNING: The mand mount option has been deprecated and [ 265.253347][ T6908] and is ignored by this kernel. Remove the mand [ 265.253347][ T6908] option from the mount to silence this warning. [ 265.253347][ T6908] ======================================================= [ 265.253507][ T6908] new mount options do not match the existing superblock, will be ignored [ 265.353838][ T6897] lo speed is unknown, defaulting to 1000 [ 265.433215][ T6911] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 265.523902][ T6860] chnl_net:caif_netlink_parms(): no params data found [ 265.554184][ T6913] netlink: 'syz.3.227': attribute type 1 has an invalid length. [ 266.014868][ T5119] Bluetooth: hci6: command tx timeout [ 266.094681][ T5119] Bluetooth: hci7: command tx timeout [ 266.124320][ T6913] 8021q: adding VLAN 0 to HW filter on device bond1 [ 266.532753][ T6916] bond1: (slave macvlan0): Enslaving as an active interface with an up link [ 266.757700][ T6930] netlink: 52 bytes leftover after parsing attributes in process `syz.3.228'. [ 266.798360][ T6858] chnl_net:caif_netlink_parms(): no params data found [ 266.808884][ T6933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.228'. [ 266.814828][ T5119] Bluetooth: hci5: command tx timeout [ 266.963389][ T6854] chnl_net:caif_netlink_parms(): no params data found [ 267.996126][ T5119] block nbd3: Receive control failed (result -32) [ 268.086983][ T6780] block nbd3: shutting down sockets [ 268.100743][ T5119] Bluetooth: hci6: command tx timeout [ 268.181179][ T5119] Bluetooth: hci7: command tx timeout [ 268.479718][ T6949] binder: 6948:6949 ioctl c0306201 0 returned -14 [ 268.745855][ T6860] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.746063][ T6860] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.746303][ T6860] bridge_slave_0: entered allmulticast mode [ 268.749025][ T6860] bridge_slave_0: entered promiscuous mode [ 268.802906][ T6860] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.803026][ T6860] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.803274][ T6860] bridge_slave_1: entered allmulticast mode [ 268.806686][ T6860] bridge_slave_1: entered promiscuous mode [ 269.187131][ T6858] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.187445][ T6858] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.187699][ T6858] bridge_slave_0: entered allmulticast mode [ 269.190722][ T6858] bridge_slave_0: entered promiscuous mode [ 269.298041][ T6860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.299560][ T6858] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.299711][ T6858] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.299936][ T6858] bridge_slave_1: entered allmulticast mode [ 269.303248][ T6858] bridge_slave_1: entered promiscuous mode [ 269.423190][ T6860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.498245][ T6966] netlink: 'syz.3.235': attribute type 1 has an invalid length. [ 269.558348][ T6854] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.558436][ T6854] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.559181][ T6854] bridge_slave_0: entered allmulticast mode [ 269.563109][ T6854] bridge_slave_0: entered promiscuous mode [ 269.882173][ C1] vkms_vblank_simulate: vblank timer overrun [ 269.905205][ T6966] 8021q: adding VLAN 0 to HW filter on device bond2 [ 270.332883][ T6967] bond1: (slave macvlan0): Releasing backup interface [ 270.387984][ T6967] bond2: (slave macvlan0): Enslaving as an active interface with an up link [ 270.653898][ T6854] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.654037][ T6854] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.654227][ T6854] bridge_slave_1: entered allmulticast mode [ 270.658034][ T6854] bridge_slave_1: entered promiscuous mode [ 270.909028][ T6973] new mount options do not match the existing superblock, will be ignored [ 270.937115][ T6973] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 271.283638][ T6858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.447467][ T6860] team0: Port device team_slave_0 added [ 271.450426][ T6858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.719853][ T6860] team0: Port device team_slave_1 added [ 271.867497][ T6978] netlink: 52 bytes leftover after parsing attributes in process `syz.4.238'. [ 271.880316][ T6854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.777021][ C1] vkms_vblank_simulate: vblank timer overrun [ 273.013475][ T6854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.512612][ T6858] team0: Port device team_slave_0 added [ 273.651830][ T5119] block nbd3: Receive control failed (result -32) [ 273.653011][ T6988] block nbd3: shutting down sockets [ 273.756768][ T6860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.756786][ T6860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 273.756814][ T6860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.763669][ T6858] team0: Port device team_slave_1 added [ 273.998199][ T6860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.998219][ T6860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 273.998247][ T6860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.099992][ T6854] team0: Port device team_slave_0 added [ 274.284106][ T6854] team0: Port device team_slave_1 added [ 274.303984][ T1225] bridge_slave_1: left allmulticast mode [ 274.304018][ T1225] bridge_slave_1: left promiscuous mode [ 274.304318][ T1225] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.386560][ T1225] bridge_slave_0: left allmulticast mode [ 274.386593][ T1225] bridge_slave_0: left promiscuous mode [ 274.386904][ T1225] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.588807][ C1] vkms_vblank_simulate: vblank timer overrun [ 274.627823][ T1225] bridge_slave_1: left allmulticast mode [ 274.627858][ T1225] bridge_slave_1: left promiscuous mode [ 274.628150][ T1225] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.742998][ T1225] bridge_slave_0: left allmulticast mode [ 274.743032][ T1225] bridge_slave_0: left promiscuous mode [ 274.797029][ T1225] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.809112][ T7006] netlink: 52 bytes leftover after parsing attributes in process `syz.4.246'. [ 274.848138][ T1225] bridge_slave_1: left allmulticast mode [ 274.848162][ T1225] bridge_slave_1: left promiscuous mode [ 274.848335][ T1225] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.918881][ T1225] bridge_slave_0: left allmulticast mode [ 274.918904][ T1225] bridge_slave_0: left promiscuous mode [ 274.919086][ T1225] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.690638][ T7009] new mount options do not match the existing superblock, will be ignored [ 276.315472][ T1225] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 276.421445][ T1225] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.477152][ T1225] bond0 (unregistering): Released all slaves [ 276.715413][ T1225] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 276.795819][ T1225] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.867348][ T1225] bond0 (unregistering): Released all slaves [ 277.098267][ T1225] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.175456][ T1225] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.237740][ T1225] bond0 (unregistering): Released all slaves [ 277.287012][ T6858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.287032][ T6858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 277.287046][ T6858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.349233][ C1] vkms_vblank_simulate: vblank timer overrun [ 277.598627][ T6858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.598642][ T6858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 277.598657][ T6858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.934724][ T6854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.934743][ T6854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 277.934769][ T6854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.048422][ C1] vkms_vblank_simulate: vblank timer overrun [ 278.156017][ T6854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.156037][ T6854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 278.156073][ T6854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.169742][ T6860] hsr_slave_0: entered promiscuous mode [ 278.171311][ T6860] hsr_slave_1: entered promiscuous mode [ 279.570821][ T6858] hsr_slave_0: entered promiscuous mode [ 279.577614][ T6858] hsr_slave_1: entered promiscuous mode [ 279.582301][ T6858] debugfs: 'hsr0' already exists in 'hsr' [ 279.582327][ T6858] Cannot create hsr debugfs directory [ 280.105246][ T1225] hsr_slave_0: left promiscuous mode [ 280.145318][ T1225] hsr_slave_1: left promiscuous mode [ 280.146570][ T1225] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.205749][ T1225] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.385054][ T1225] hsr_slave_0: left promiscuous mode [ 280.405155][ T1225] hsr_slave_1: left promiscuous mode [ 280.406036][ T1225] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.459542][ T1225] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.605819][ T1225] hsr_slave_0: left promiscuous mode [ 280.625146][ T1225] hsr_slave_1: left promiscuous mode [ 280.626057][ T1225] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.633937][ T5119] block nbd3: Receive control failed (result -32) [ 280.645057][ T7034] block nbd3: shutting down sockets [ 280.696068][ T1225] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.779074][ T7047] netlink: 52 bytes leftover after parsing attributes in process `syz.3.254'. [ 281.283592][ C1] vkms_vblank_simulate: vblank timer overrun [ 282.021676][ T7053] new mount options do not match the existing superblock, will be ignored [ 282.073056][ T7053] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 282.328416][ T1225] team0 (unregistering): Port device team_slave_1 removed [ 282.487372][ T1225] team0 (unregistering): Port device team_slave_0 removed [ 283.465625][ C1] vkms_vblank_simulate: vblank timer overrun [ 283.566295][ T1225] team0 (unregistering): Port device team_slave_1 removed [ 283.715461][ T1225] team0 (unregistering): Port device team_slave_0 removed [ 284.815568][ T1225] team0 (unregistering): Port device team_slave_1 removed [ 284.945509][ T1225] team0 (unregistering): Port device team_slave_0 removed [ 285.897174][ T6854] hsr_slave_0: entered promiscuous mode [ 285.900624][ T6854] hsr_slave_1: entered promiscuous mode [ 285.901952][ T6854] debugfs: 'hsr0' already exists in 'hsr' [ 285.901979][ T6854] Cannot create hsr debugfs directory [ 288.558718][ T7083] netlink: 52 bytes leftover after parsing attributes in process `syz.3.263'. [ 288.623644][ T7084] netlink: 4 bytes leftover after parsing attributes in process `syz.3.263'. [ 289.012920][ C0] vkms_vblank_simulate: vblank timer overrun [ 289.163190][ C0] vkms_vblank_simulate: vblank timer overrun [ 289.180917][ T5119] block nbd4: Receive control failed (result -32) [ 289.183437][ T7079] block nbd4: shutting down sockets [ 290.639848][ C0] vkms_vblank_simulate: vblank timer overrun [ 293.750241][ T7099] bond2: (slave macvlan0): Releasing backup interface [ 293.865059][ C0] vkms_vblank_simulate: vblank timer overrun [ 294.071842][ T6860] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 295.065722][ T6860] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 295.297786][ T6860] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 295.438812][ T6860] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 296.383995][ T6858] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 296.459674][ T5119] block nbd3: Receive control failed (result -32) [ 296.460117][ T6858] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 296.462131][ T7129] block nbd3: shutting down sockets [ 296.550349][ T6858] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 296.651571][ T6858] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 297.776137][ T6854] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 298.415646][ T6854] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 299.049134][ T7154] block nbd3: NBD_DISCONNECT [ 299.049267][ T7154] block nbd3: Disconnected due to user request. [ 299.049285][ T7154] block nbd3: shutting down sockets [ 299.053173][ T6854] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 299.130378][ T6854] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 299.620149][ T6860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.637396][ T7171] block nbd4: NBD_DISCONNECT [ 299.637518][ T7171] block nbd4: Disconnected due to user request. [ 299.637533][ T7171] block nbd4: shutting down sockets [ 299.873788][ T6860] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.960836][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.961229][ T5949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.049026][ T6858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.089329][ T6228] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.092257][ T6228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.204271][ T6858] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.215695][ T6854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.576110][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.576282][ T5949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.669982][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.670181][ T5949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.686559][ T6854] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.980159][ T1210] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.980398][ T1210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.707391][ T1210] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.707565][ T1210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.902292][ T6854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.977591][ T7202] block nbd4: NBD_DISCONNECT [ 303.977622][ T7202] block nbd4: Send disconnect failed -32 [ 303.977656][ T7202] block nbd4: Disconnected due to user request. [ 303.977671][ T7202] block nbd4: shutting down sockets [ 304.098743][ T6860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.322517][ T6858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.822611][ T7235] block nbd4: NBD_DISCONNECT [ 304.822738][ T7235] block nbd4: Disconnected due to user request. [ 304.822756][ T7235] block nbd4: shutting down sockets [ 305.853714][ T6854] veth0_vlan: entered promiscuous mode [ 305.939308][ T6854] veth1_vlan: entered promiscuous mode [ 305.988363][ T6860] veth0_vlan: entered promiscuous mode [ 306.071215][ T6860] veth1_vlan: entered promiscuous mode [ 306.189035][ T6854] veth0_macvtap: entered promiscuous mode [ 306.250476][ T6858] veth0_vlan: entered promiscuous mode [ 306.505370][ T6854] veth1_macvtap: entered promiscuous mode [ 306.895869][ T6858] veth1_vlan: entered promiscuous mode [ 306.902624][ T6860] veth0_macvtap: entered promiscuous mode [ 306.936335][ T6860] veth1_macvtap: entered promiscuous mode [ 306.945806][ T6854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.997761][ T6854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.091040][ T6860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.092536][ T1921] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.109368][ T6228] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.123277][ T1921] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.137699][ T6860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.167550][ T6228] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.178349][ T6858] veth0_macvtap: entered promiscuous mode [ 308.373134][ T6225] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.395457][ T6225] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.398773][ T6225] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.648785][ T6858] veth1_macvtap: entered promiscuous mode [ 308.664965][ T6225] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.960116][ T7273] block nbd4: NBD_DISCONNECT [ 308.960264][ T7273] block nbd4: Disconnected due to user request. [ 308.960282][ T7273] block nbd4: shutting down sockets [ 309.018212][ T6858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.025182][ T7276] block nbd3: NBD_DISCONNECT [ 309.025293][ T7276] block nbd3: Disconnected due to user request. [ 309.025308][ T7276] block nbd3: shutting down sockets [ 309.085341][ T6228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.085365][ T6228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.159296][ T6858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.218282][ T1921] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.294227][ T1921] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.317153][ T1921] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.339115][ T1921] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.395272][ T5949] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.395293][ T5949] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.556272][ T5949] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.556298][ T5949] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.189177][ T6228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.189201][ T6228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.321310][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.321334][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.423759][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.423783][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.891762][ T5891] IPVS: starting estimator thread 0... [ 313.953480][ T7302] IPVS: using max 7 ests per chain, 16800 per kthread [ 315.388390][ T7318] block nbd3: NBD_DISCONNECT [ 315.388422][ T7318] block nbd3: Send disconnect failed -32 [ 315.388455][ T7318] block nbd3: Disconnected due to user request. [ 315.388472][ T7318] block nbd3: shutting down sockets [ 316.478987][ T7331] block nbd4: NBD_DISCONNECT [ 316.479131][ T7331] block nbd4: Disconnected due to user request. [ 316.479145][ T7331] block nbd4: shutting down sockets [ 317.111046][ T7360] binder: 7356:7360 ioctl c0306201 0 returned -14 [ 317.546550][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.546625][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.541181][ T7390] block nbd3: NBD_DISCONNECT [ 320.541595][ T7390] block nbd3: Disconnected due to user request. [ 320.541690][ T7390] block nbd3: shutting down sockets [ 320.872758][ T7408] netlink: 28 bytes leftover after parsing attributes in process `syz.7.327'. [ 320.985333][ T7412] binder: 7409:7412 ioctl c0306201 0 returned -14 [ 324.912708][ T7463] netlink: 28 bytes leftover after parsing attributes in process `syz.3.342'. [ 328.563468][ T7507] netlink: 28 bytes leftover after parsing attributes in process `syz.5.354'. [ 333.123548][ T7570] netlink: 28 bytes leftover after parsing attributes in process `syz.3.369'. [ 334.049590][ T981] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 335.037360][ T981] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 335.037418][ T981] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 335.037467][ T981] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 335.037490][ T981] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 335.037519][ T981] usb 7-1: config 0 interface 0 has no altsetting 0 [ 336.062337][ T981] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 336.062363][ T981] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 336.062375][ T981] usb 7-1: Product: syz [ 336.062384][ T981] usb 7-1: Manufacturer: syz [ 336.062392][ T981] usb 7-1: SerialNumber: syz [ 336.189998][ T981] usb 7-1: config 0 descriptor?? [ 336.225436][ T981] ldusb 7-1:0.0: Interrupt in endpoint not found [ 337.014761][ T9] usb 7-1: USB disconnect, device number 2 [ 337.229560][ T7604] block nbd3: NBD_DISCONNECT [ 337.233994][ T7604] block nbd3: Disconnected due to user request. [ 337.234020][ T7604] block nbd3: shutting down sockets [ 340.867700][ T7630] netlink: 28 bytes leftover after parsing attributes in process `syz.5.384'. [ 342.799523][ T7662] block nbd6: NBD_DISCONNECT [ 342.799657][ T7662] block nbd6: Disconnected due to user request. [ 342.799675][ T7662] block nbd6: shutting down sockets [ 345.020027][ T7697] netlink: 28 bytes leftover after parsing attributes in process `syz.6.397'. [ 347.767841][ T7729] block nbd3: NBD_DISCONNECT [ 347.770553][ T7729] block nbd3: Disconnected due to user request. [ 347.770578][ T7729] block nbd3: shutting down sockets [ 348.477885][ T7745] block nbd3: NBD_DISCONNECT [ 348.478029][ T7745] block nbd3: Disconnected due to user request. [ 348.478047][ T7745] block nbd3: shutting down sockets [ 349.392291][ T7754] netlink: 8 bytes leftover after parsing attributes in process `syz.6.410'. [ 350.886950][ T7776] binder: 7775:7776 ioctl c0306201 0 returned -14 [ 350.962162][ T7782] block nbd5: NBD_DISCONNECT [ 350.962306][ T7782] block nbd5: Disconnected due to user request. [ 350.962324][ T7782] block nbd5: shutting down sockets [ 351.338866][ T7795] netlink: 52 bytes leftover after parsing attributes in process `syz.6.422'. [ 351.393436][ T7797] netlink: 4 bytes leftover after parsing attributes in process `syz.6.422'. [ 351.724469][ C0] vkms_vblank_simulate: vblank timer overrun [ 352.193636][ T7809] netlink: 8 bytes leftover after parsing attributes in process `syz.3.425'. [ 353.142188][ C0] vkms_vblank_simulate: vblank timer overrun [ 353.625046][ T7822] block nbd5: NBD_DISCONNECT [ 353.625222][ T7822] block nbd5: Disconnected due to user request. [ 353.625240][ T7822] block nbd5: shutting down sockets [ 353.709166][ C0] vkms_vblank_simulate: vblank timer overrun [ 354.622039][ T7836] binder: 7835:7836 ioctl c0306201 0 returned -14 [ 354.893993][ T7844] 9pnet_fd: Insufficient options for proto=fd [ 356.371341][ T7868] netlink: 12 bytes leftover after parsing attributes in process `syz.6.440'. [ 356.496536][ C0] vkms_vblank_simulate: vblank timer overrun [ 356.835614][ T7878] binder: 7875:7878 ioctl c0306201 0 returned -14 [ 358.100079][ T7892] netlink: 8 bytes leftover after parsing attributes in process `syz.6.446'. [ 358.402735][ T7902] 9pnet_fd: Insufficient options for proto=fd [ 358.606632][ T7907] netlink: 52 bytes leftover after parsing attributes in process `syz.6.450'. [ 358.615632][ T7907] netlink: 4 bytes leftover after parsing attributes in process `syz.6.450'. [ 358.945144][ T5882] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 359.855415][ T5882] usb 4-1: Using ep0 maxpacket: 8 [ 359.861881][ T5882] usb 4-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 359.861913][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.861947][ T5882] usb 4-1: Product: syz [ 359.861963][ T5882] usb 4-1: Manufacturer: syz [ 359.861978][ T5882] usb 4-1: SerialNumber: syz [ 359.930747][ T5882] usb 4-1: config 0 descriptor?? [ 359.957039][ T5882] option 4-1:0.0: GSM modem (1-port) converter detected [ 359.964298][ C0] vkms_vblank_simulate: vblank timer overrun [ 360.168376][ T5882] usb 4-1: USB disconnect, device number 8 [ 360.171046][ T5882] option 4-1:0.0: device disconnected [ 361.072717][ T7939] netlink: 28 bytes leftover after parsing attributes in process `syz.3.460'. [ 361.619753][ T7950] netlink: 52 bytes leftover after parsing attributes in process `syz.5.465'. [ 361.636553][ T7950] netlink: 4 bytes leftover after parsing attributes in process `syz.5.465'. [ 364.016972][ T7992] netlink: 28 bytes leftover after parsing attributes in process `syz.3.474'. [ 364.472051][ T7994] netlink: 52 bytes leftover after parsing attributes in process `syz.4.477'. [ 364.485348][ T7994] netlink: 4 bytes leftover after parsing attributes in process `syz.4.477'. [ 364.702573][ T8003] binder: BINDER_SET_CONTEXT_MGR already set [ 364.702591][ T8003] binder: 7998:8003 ioctl 4018620d 200000004a80 returned -16 [ 365.841725][ T8017] lo speed is unknown, defaulting to 1000 [ 366.475795][ T8030] netlink: 28 bytes leftover after parsing attributes in process `syz.3.489'. [ 366.875908][ T8039] netlink: 4 bytes leftover after parsing attributes in process `syz.7.492'. [ 368.140731][ T8053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.497'. [ 369.432963][ C0] vkms_vblank_simulate: vblank timer overrun [ 369.710935][ T8066] netlink: 'syz.7.500': attribute type 1 has an invalid length. [ 370.049457][ T8066] 8021q: adding VLAN 0 to HW filter on device bond1 [ 371.164212][ T8091] netlink: 8 bytes leftover after parsing attributes in process `syz.5.508'. [ 372.351703][ C0] vkms_vblank_simulate: vblank timer overrun [ 374.908088][ T8127] netlink: 'syz.7.522': attribute type 1 has an invalid length. [ 375.008872][ T8127] 8021q: adding VLAN 0 to HW filter on device bond2 [ 375.067320][ T8134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.523'. [ 375.067361][ T8134] netlink: 12 bytes leftover after parsing attributes in process `syz.3.523'. [ 376.835875][ C0] vkms_vblank_simulate: vblank timer overrun [ 377.389838][ T8157] siw: device registration error -23 [ 378.556670][ C0] vkms_vblank_simulate: vblank timer overrun [ 378.817038][ T8170] netlink: 'syz.5.534': attribute type 1 has an invalid length. [ 378.974170][ T8170] 8021q: adding VLAN 0 to HW filter on device bond1 [ 378.984295][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.984399][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.351733][ C0] vkms_vblank_simulate: vblank timer overrun [ 380.605600][ C0] vkms_vblank_simulate: vblank timer overrun [ 381.054737][ T61] Bluetooth: hci5: command 0x0406 tx timeout [ 382.251588][ C0] vkms_vblank_simulate: vblank timer overrun [ 383.917082][ T8219] netlink: 'syz.7.552': attribute type 1 has an invalid length. [ 384.067849][ T8221] 9pnet: Could not find request transport: fd00000000000000000010 [ 384.079553][ T8219] 8021q: adding VLAN 0 to HW filter on device bond3 [ 384.183687][ T61] Bluetooth: hci5: unexpected event for opcode 0x2041 [ 386.713503][ T61] Bluetooth: hci6: command 0x0406 tx timeout [ 386.758693][ C0] vkms_vblank_simulate: vblank timer overrun [ 387.257769][ C0] vkms_vblank_simulate: vblank timer overrun [ 387.260187][ T5868] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 387.406745][ T5868] usb 4-1: Using ep0 maxpacket: 32 [ 387.414307][ T5868] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 387.434848][ T5868] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 387.434882][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 387.434903][ T5868] usb 4-1: Product: syz [ 387.434918][ T5868] usb 4-1: Manufacturer: syz [ 387.434932][ T5868] usb 4-1: SerialNumber: syz [ 387.490119][ T5868] usb 4-1: config 0 descriptor?? [ 387.494016][ T8244] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 387.794758][ T5868] usb 4-1: USB disconnect, device number 9 [ 388.587393][ C0] vkms_vblank_simulate: vblank timer overrun [ 388.676424][ T8253] siw: device registration error -23 [ 389.558421][ T8265] 9pnet: Could not find request transport: fd00000000000000000010 [ 389.851047][ T8275] netlink: 'syz.3.572': attribute type 1 has an invalid length. [ 390.035294][ T8275] 8021q: adding VLAN 0 to HW filter on device bond3 [ 390.994265][ T37] audit: type=1326 audit(1760791285.880:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8286 comm="syz.7.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42fe25efc9 code=0x7ffc0000 [ 391.193067][ T37] audit: type=1326 audit(1760791286.310:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8286 comm="syz.7.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f42fe1fb099 code=0x7ffc0000 [ 391.193130][ T37] audit: type=1326 audit(1760791286.310:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8286 comm="syz.7.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f42fe1fb099 code=0x7ffc0000 [ 391.193179][ T37] audit: type=1326 audit(1760791286.310:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8286 comm="syz.7.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f42fe1fb099 code=0x7ffc0000 [ 391.262912][ C0] vkms_vblank_simulate: vblank timer overrun [ 392.557676][ T37] audit: type=1326 audit(1760791286.480:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8286 comm="syz.7.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f42fe1fb099 code=0x7ffc0000 [ 392.558377][ T37] audit: type=1326 audit(1760791287.680:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8286 comm="syz.7.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f42fe1fb099 code=0x7ffc0000 [ 392.561106][ T37] audit: type=1326 audit(1760791287.680:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8286 comm="syz.7.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f42fe1fb099 code=0x7ffc0000 [ 392.569535][ T37] audit: type=1326 audit(1760791287.690:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8286 comm="syz.7.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f42fe1fb099 code=0x7ffc0000 [ 392.569589][ T37] audit: type=1326 audit(1760791287.690:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8286 comm="syz.7.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f42fe1fb099 code=0x7ffc0000 [ 392.569631][ T37] audit: type=1326 audit(1760791287.690:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8286 comm="syz.7.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f42fe1fb099 code=0x7ffc0000 [ 392.698917][ T8292] siw: device registration error -23 [ 393.406480][ C0] vkms_vblank_simulate: vblank timer overrun [ 394.269289][ T8308] 9pnet: Could not find request transport: fd00000000000000000010 [ 394.866423][ T8321] netlink: 'syz.5.588': attribute type 1 has an invalid length. [ 395.196906][ T8321] 8021q: adding VLAN 0 to HW filter on device bond2 [ 396.770458][ C0] vkms_vblank_simulate: vblank timer overrun [ 398.233400][ T8343] siw: device registration error -23 [ 400.613670][ T8355] vxfs: WRONG superblock magic 00000000 at 1 [ 400.626782][ T8355] vxfs: WRONG superblock magic 00000000 at 8 [ 400.626837][ T8355] vxfs: can't find superblock. [ 400.693459][ C1] vkms_vblank_simulate: vblank timer overrun [ 400.742986][ C1] vkms_vblank_simulate: vblank timer overrun [ 400.764369][ C1] vkms_vblank_simulate: vblank timer overrun [ 400.894202][ T8353] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 401.122562][ C1] vkms_vblank_simulate: vblank timer overrun [ 401.144270][ C1] vkms_vblank_simulate: vblank timer overrun [ 401.223634][ T8364] 9pnet_fd: Insufficient options for proto=fd [ 401.342760][ T8367] netlink: 'syz.3.600': attribute type 1 has an invalid length. [ 401.463634][ T8374] block nbd6: NBD_DISCONNECT [ 401.469504][ T8374] block nbd6: Disconnected due to user request. [ 401.470577][ T8374] block nbd6: shutting down sockets [ 401.575637][ T8375] netlink: 'syz.4.602': attribute type 10 has an invalid length. [ 401.833068][ T8367] 8021q: adding VLAN 0 to HW filter on device bond4 [ 402.002095][ T8376] netlink: 4 bytes leftover after parsing attributes in process `syz.4.602'. [ 402.295294][ T8390] netlink: 40 bytes leftover after parsing attributes in process `syz.6.606'. [ 402.369395][ T8372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 402.432236][ T8375] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 402.475506][ T8383] netlink: 8 bytes leftover after parsing attributes in process `syz.7.604'. [ 404.214310][ C1] vkms_vblank_simulate: vblank timer overrun [ 404.663794][ C1] vkms_vblank_simulate: vblank timer overrun [ 405.000018][ C1] vkms_vblank_simulate: vblank timer overrun [ 405.620249][ T8413] netlink: 'syz.6.615': attribute type 1 has an invalid length. [ 405.666866][ T8416] 9pnet_fd: Insufficient options for proto=fd [ 405.671105][ T8413] 8021q: adding VLAN 0 to HW filter on device bond1 [ 407.186070][ T61] Bluetooth: hci7: command 0x0405 tx timeout [ 407.208806][ T8398] block nbd7: Receive control failed (result -32) [ 407.261624][ T8417] input: syz1 as /devices/virtual/input/input5 [ 407.442856][ T8415] block nbd7: NBD_DISCONNECT [ 407.442888][ T8415] block nbd7: Send disconnect failed -32 [ 407.442907][ T8415] block nbd7: shutting down sockets [ 408.248791][ T8438] ------------[ cut here ]------------ [ 408.248807][ T8438] WARNING: CPU: 1 PID: 8438 at ./include/linux/seqlock.h:221 cgroup_freeze+0x80a/0xf90 [ 408.248853][ T8438] Modules linked in: [ 408.248873][ T8438] CPU: 1 UID: 0 PID: 8438 Comm: syz.3.620 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 408.248897][ T8438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 408.248910][ T8438] RIP: 0010:cgroup_freeze+0x80a/0xf90 [ 408.248944][ T8438] Code: 90 e9 9e fb ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c e7 f9 ff ff 4c 89 f7 e8 11 1a 68 00 e9 da f9 ff ff e8 37 68 06 00 90 <0f> 0b 90 e9 10 fc ff ff 44 89 f9 80 e1 07 38 c1 48 8b 0c 24 0f 8c [ 408.248963][ T8438] RSP: 0018:ffffc9000697f8e0 EFLAGS: 00010287 [ 408.248982][ T8438] RAX: ffffffff81b894f9 RBX: 0000000000000000 RCX: 0000000000080000 [ 408.248997][ T8438] RDX: ffffc9000e92c000 RSI: 00000000000000fb RDI: 00000000000000fc [ 408.249011][ T8438] RBP: ffffc9000697fa70 R08: 0000000000000000 R09: 0000000000000000 [ 408.249023][ T8438] R10: dffffc0000000000 R11: fffffbfff1deee6f R12: dffffc0000000000 [ 408.249037][ T8438] R13: 0000000000000000 R14: 0000000000000001 R15: ffff888021312791 [ 408.249050][ T8438] FS: 00007eff2b0656c0(0000) GS:ffff888126cc6000(0000) knlGS:0000000000000000 [ 408.249067][ T8438] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 408.249082][ T8438] CR2: 000000110c29bb17 CR3: 000000005e458000 CR4: 00000000003526f0 [ 408.249103][ T8438] Call Trace: [ 408.249114][ T8438] [ 408.249128][ T8438] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 408.249169][ T8438] ? __pfx_cgroup_freeze+0x10/0x10 [ 408.249196][ T8438] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 408.249227][ T8438] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 408.249256][ T8438] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 408.249297][ T8438] ? mutex_lock_nested+0x154/0x1d0 [ 408.249322][ T8438] ? cgroup_kn_lock_live+0x13c/0x230 [ 408.249358][ T8438] cgroup_freeze_write+0x156/0x1c0 [ 408.249388][ T8438] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 408.249414][ T8438] ? kernfs_root+0x1c/0x230 [ 408.249441][ T8438] ? kernfs_root+0x1c/0x230 [ 408.249472][ T8438] ? kernfs_root+0x1ea/0x230 [ 408.249501][ T8438] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 408.249530][ T8438] cgroup_file_write+0x39e/0x740 [ 408.249562][ T8438] ? __pfx_cgroup_file_write+0x10/0x10 [ 408.249604][ T8438] ? __pfx_cgroup_file_write+0x10/0x10 [ 408.249643][ T8438] kernfs_fop_write_iter+0x3b0/0x540 [ 408.249677][ T8438] vfs_write+0x5d5/0xb40 [ 408.249718][ T8438] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 408.249742][ T8438] ? __pfx_vfs_write+0x10/0x10 [ 408.249772][ T8438] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 408.249813][ T8438] ? mutex_lock_nested+0x154/0x1d0 [ 408.249840][ T8438] ? fdget_pos+0x253/0x320 [ 408.249876][ T8438] ksys_write+0x14b/0x260 [ 408.249915][ T8438] ? __pfx_ksys_write+0x10/0x10 [ 408.249956][ T8438] ? do_syscall_64+0xbe/0xfa0 [ 408.249995][ T8438] do_syscall_64+0xfa/0xfa0 [ 408.250027][ T8438] ? lockdep_hardirqs_on+0x9c/0x150 [ 408.250061][ T8438] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.250084][ T8438] ? clear_bhb_loop+0x60/0xb0 [ 408.250112][ T8438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.250133][ T8438] RIP: 0033:0x7eff2ce1efc9 [ 408.250154][ T8438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.250172][ T8438] RSP: 002b:00007eff2b065038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 408.250193][ T8438] RAX: ffffffffffffffda RBX: 00007eff2d076090 RCX: 00007eff2ce1efc9 [ 408.250208][ T8438] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 0000000000000009 [ 408.250221][ T8438] RBP: 00007eff2cea1f91 R08: 0000000000000000 R09: 0000000000000000 [ 408.250234][ T8438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 408.250246][ T8438] R13: 00007eff2d076128 R14: 00007eff2d076090 R15: 00007ffc46fc9e38 [ 408.250283][ T8438] [ 408.250293][ T8438] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 408.250305][ T8438] CPU: 1 UID: 0 PID: 8438 Comm: syz.3.620 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 408.250320][ T8438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 408.250327][ T8438] Call Trace: [ 408.250332][ T8438] [ 408.250337][ T8438] dump_stack_lvl+0x99/0x250 [ 408.250354][ T8438] ? __asan_memcpy+0x40/0x70 [ 408.250377][ T8438] ? __pfx_dump_stack_lvl+0x10/0x10 [ 408.250391][ T8438] ? __pfx__printk+0x10/0x10 [ 408.250418][ T8438] vpanic+0x237/0x6d0 [ 408.250431][ T8438] ? __pfx_vpanic+0x10/0x10 [ 408.250449][ T8438] panic+0xb9/0xc0 [ 408.250460][ T8438] ? __pfx_panic+0x10/0x10 [ 408.250480][ T8438] __warn+0x31b/0x4b0 [ 408.250499][ T8438] ? cgroup_freeze+0x80a/0xf90 [ 408.250523][ T8438] ? cgroup_freeze+0x80a/0xf90 [ 408.250541][ T8438] report_bug+0x2be/0x4f0 [ 408.250559][ T8438] ? cgroup_freeze+0x80a/0xf90 [ 408.250577][ T8438] ? cgroup_freeze+0x80a/0xf90 [ 408.250595][ T8438] ? cgroup_freeze+0x80c/0xf90 [ 408.250618][ T8438] handle_bug+0x84/0x160 [ 408.250632][ T8438] exc_invalid_op+0x1a/0x50 [ 408.250644][ T8438] asm_exc_invalid_op+0x1a/0x20 [ 408.250656][ T8438] RIP: 0010:cgroup_freeze+0x80a/0xf90 [ 408.250674][ T8438] Code: 90 e9 9e fb ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c e7 f9 ff ff 4c 89 f7 e8 11 1a 68 00 e9 da f9 ff ff e8 37 68 06 00 90 <0f> 0b 90 e9 10 fc ff ff 44 89 f9 80 e1 07 38 c1 48 8b 0c 24 0f 8c [ 408.250683][ T8438] RSP: 0018:ffffc9000697f8e0 EFLAGS: 00010287 [ 408.250694][ T8438] RAX: ffffffff81b894f9 RBX: 0000000000000000 RCX: 0000000000080000 [ 408.250702][ T8438] RDX: ffffc9000e92c000 RSI: 00000000000000fb RDI: 00000000000000fc [ 408.250709][ T8438] RBP: ffffc9000697fa70 R08: 0000000000000000 R09: 0000000000000000 [ 408.250716][ T8438] R10: dffffc0000000000 R11: fffffbfff1deee6f R12: dffffc0000000000 [ 408.250725][ T8438] R13: 0000000000000000 R14: 0000000000000001 R15: ffff888021312791 [ 408.250743][ T8438] ? cgroup_freeze+0x809/0xf90 [ 408.250769][ T8438] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 408.250789][ T8438] ? __pfx_cgroup_freeze+0x10/0x10 [ 408.250806][ T8438] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 408.250824][ T8438] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 408.250841][ T8438] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 408.250862][ T8438] ? mutex_lock_nested+0x154/0x1d0 [ 408.250875][ T8438] ? cgroup_kn_lock_live+0x13c/0x230 [ 408.250895][ T8438] cgroup_freeze_write+0x156/0x1c0 [ 408.250911][ T8438] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 408.250925][ T8438] ? kernfs_root+0x1c/0x230 [ 408.250939][ T8438] ? kernfs_root+0x1c/0x230 [ 408.250956][ T8438] ? kernfs_root+0x1ea/0x230 [ 408.250971][ T8438] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 408.250986][ T8438] cgroup_file_write+0x39e/0x740 [ 408.251002][ T8438] ? __pfx_cgroup_file_write+0x10/0x10 [ 408.251022][ T8438] ? __pfx_cgroup_file_write+0x10/0x10 [ 408.251032][ T8438] kernfs_fop_write_iter+0x3b0/0x540 [ 408.251049][ T8438] vfs_write+0x5d5/0xb40 [ 408.251071][ T8438] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 408.251084][ T8438] ? __pfx_vfs_write+0x10/0x10 [ 408.251100][ T8438] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 408.251120][ T8438] ? mutex_lock_nested+0x154/0x1d0 [ 408.251134][ T8438] ? fdget_pos+0x253/0x320 [ 408.251152][ T8438] ksys_write+0x14b/0x260 [ 408.251177][ T8438] ? __pfx_ksys_write+0x10/0x10 [ 408.251198][ T8438] ? do_syscall_64+0xbe/0xfa0 [ 408.251218][ T8438] do_syscall_64+0xfa/0xfa0 [ 408.251234][ T8438] ? lockdep_hardirqs_on+0x9c/0x150 [ 408.251252][ T8438] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.251263][ T8438] ? clear_bhb_loop+0x60/0xb0 [ 408.251278][ T8438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.251289][ T8438] RIP: 0033:0x7eff2ce1efc9 [ 408.251299][ T8438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.251308][ T8438] RSP: 002b:00007eff2b065038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 408.251319][ T8438] RAX: ffffffffffffffda RBX: 00007eff2d076090 RCX: 00007eff2ce1efc9 [ 408.251328][ T8438] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 0000000000000009 [ 408.251335][ T8438] RBP: 00007eff2cea1f91 R08: 0000000000000000 R09: 0000000000000000 [ 408.251342][ T8438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 408.251349][ T8438] R13: 00007eff2d076128 R14: 00007eff2d076090 R15: 00007ffc46fc9e38 [ 408.251368][ T8438] [ 408.251721][ T8438] Kernel Offset: disabled