last executing test programs: 15m48.244819801s ago: executing program 1 (id=52): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = getpgrp(0x0) r3 = syz_pidfd_open(r2, 0x0) r4 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000180)) r5 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r5, 0x7, r3, &(0x7f0000000040)={r4, r3}) 15m47.657968889s ago: executing program 0 (id=54): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000000)=0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) creat(0x0, 0x41) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xd, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="090000000400000004000000070000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000082f177", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="020000000100"/25], 0x48) 15m47.650652437s ago: executing program 1 (id=55): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0x5, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000500)=""/194, &(0x7f0000000300)=0xc2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000001e0000850000008200000095000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$BLKPG(r5, 0x1269, &(0x7f00000000c0)={0xf7c8561671f7aa05, 0x0, 0x98, &(0x7f0000000000)={0x0, 0x200, 0x801000e}}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r6, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r6, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) socket$kcm(0x29, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x8, 0x63b2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x20000, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x3ff}, 0x8) ioctl$int_in(r7, 0x5421, &(0x7f0000001100)=0x2000000009) connect$bt_sco(r7, &(0x7f0000000040)={0x1f, @fixed}, 0x8) 15m46.365446882s ago: executing program 0 (id=58): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0xf, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) write(r2, &(0x7f0000000040), 0x0) 15m45.584779814s ago: executing program 1 (id=60): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b0000000000000000000000018000000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) r2 = semget$private(0x0, 0x4, 0x30) semctl$IPC_STAT(r2, 0x0, 0x2, 0x0) getresuid(&(0x7f0000000140), 0x0, &(0x7f0000000300)) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000480)) semctl$IPC_SET(r2, 0x0, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) accept4(r3, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000080)=0x4) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f}}, 0x20) 15m44.157984554s ago: executing program 1 (id=63): epoll_create(0x2a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) read$FUSE(r2, &(0x7f0000001740)={0x2020}, 0x2020) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xdd218) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) prlimit64(0x0, 0xb, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000280), 0x120008, &(0x7f00000002c0)={'trans=virtio,', {[{@msize={'msize', 0x3d, 0x4}}, {@loose}]}}) gettid() r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r4, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 15m42.501873306s ago: executing program 0 (id=65): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0xf, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='\x00'/15, @ANYBLOB], 0x50) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f00000002c0)={0xc, r3}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r2, 0x3b72, &(0x7f0000000300)={0x18, 0x2, 0xfdfd}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) write(r4, &(0x7f0000000040), 0x0) 15m41.229951933s ago: executing program 0 (id=67): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b0000000000000000000000018000000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) r4 = semget$private(0x0, 0x4, 0x30) semctl$IPC_STAT(r4, 0x0, 0x2, 0x0) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8814}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, r3]}}, @rights={{0x20, 0x1, 0x1, [r3, 0xffffffffffffffff, r2, r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r5}}}], 0x58, 0x20000801}}, {{&(0x7f0000000d00)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x2b, 0x1, 0x2, {r0}}}, @cred={{0x1c}}], 0x58, 0x20004040}}, {{&(0x7f0000001480)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001580)=[{0x0}], 0x1, 0x0, 0xfffffffffffffe8d, 0x40010}}], 0x4, 0x24048880) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$kcm(r7, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001a00)="e8", 0x3f}], 0x1}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101000) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f}}, 0x20) 15m39.248392017s ago: executing program 0 (id=71): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0001}]}) getrusage(0x0, &(0x7f0000000180)) unshare(0x4a050800) socket$inet_tcp(0x2, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r0 = getpid() ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'erspan0\x00', 0x0}) futex(0x0, 0x4, 0xffffffba, 0x0, 0x0, 0x4000000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x1010, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x1, 0xfffffff8, @loopback}, 0x1c) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r3, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00051400000000000000000000000800120000000200c06b6e000000000006000000000000000000000000000000e00000020000000000000000000000000000000000000000000000000000000105000500008000000a0000000000000000000000000000000000000000000001000000000000000005000600ff"], 0xa0}}, 0x0) 15m36.647272063s ago: executing program 1 (id=72): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b0000000000000000000000018000000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000480)) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000080)=0x4) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f}}, 0x20) 15m34.060522585s ago: executing program 0 (id=75): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 15m33.119482831s ago: executing program 1 (id=77): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_S_MODE(r5, 0x40046109, &(0x7f00000000c0)=0x6189) connect$inet6(r4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000440)={0x6, @local, 0x0, 0xfffffffc, 'lblc\x00'}, 0x2c) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x14, r8, 0x6c04073ee59f7719, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 15m18.736814502s ago: executing program 32 (id=75): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 15m16.533454074s ago: executing program 33 (id=77): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_S_MODE(r5, 0x40046109, &(0x7f00000000c0)=0x6189) connect$inet6(r4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000440)={0x6, @local, 0x0, 0xfffffffc, 'lblc\x00'}, 0x2c) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x14, r8, 0x6c04073ee59f7719, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 6m26.950728567s ago: executing program 2 (id=885): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@ldst={0x6}]}, 0x0, 0xf, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='\x00'/15, @ANYBLOB], 0x50) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f00000002c0)={0xc, r3}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r2, 0x3b72, &(0x7f0000000300)={0x18, 0x2, 0xfdfd}) r4 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) sendmsg$inet(r4, &(0x7f00000004c0)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe0000000}, 0x40) r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0x80045505, &(0x7f0000000340)=@usbdevfs_connect) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000180)=@urb_type_control={0x2, {0x8, 0x1}, 0x9, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x9, 0x4, 0x0}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='net/route\x00') preadv(r6, &(0x7f00000025c0)=[{&(0x7f0000002500)=""/79, 0x4f}], 0x1, 0x10006c, 0x0) 6m24.120878143s ago: executing program 2 (id=887): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='\x00'/15, @ANYBLOB], 0x50) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000200)={0x15}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r2, 0x3b72, &(0x7f0000000300)={0x18, 0x2, 0xfdfd}) r3 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='net/route\x00') preadv(r5, &(0x7f00000025c0)=[{&(0x7f0000002500)=""/79, 0x4f}], 0x1, 0x10006c, 0x0) 6m23.833731963s ago: executing program 2 (id=890): epoll_create(0x2a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) read$FUSE(r3, &(0x7f0000001740)={0x2020}, 0x2020) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xdd218) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) prlimit64(0x0, 0xb, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000280), 0x120008, 0x0) gettid() r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r5, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 6m20.694607656s ago: executing program 2 (id=894): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x40000000015, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0xa, 0x801, 0x40000084) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) request_key(0x0, 0x0, &(0x7f0000001fee)='y\xa9rust\xe3c*s\xb8dn::e\x00\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r4 = dup(r3) ioctl$TCSETSF(r4, 0x5404, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7c, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000140)={0x2, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000040)=0x1) 6m11.494306006s ago: executing program 2 (id=910): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[], 0x50) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) r4 = semget$private(0x0, 0x4, 0x30) semctl$IPC_STAT(r4, 0x0, 0x2, 0x0) getresuid(&(0x7f0000000140), 0x0, &(0x7f0000000300)=0x0) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r4, 0x0, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8814}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, r3]}}, @rights={{0x20, 0x1, 0x1, [r3, 0xffffffffffffffff, r2, r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r6}}}], 0x58, 0x20000801}}, {{&(0x7f0000000d00)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x2b, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r5}}}], 0x58, 0x20004040}}, {{&(0x7f0000001480)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001580)=[{0x0}], 0x1, 0x0, 0xfffffffffffffe8d, 0x40010}}], 0x4, 0x24048880) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) accept4(r7, 0x0, 0x0, 0x0) r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r8, 0x40045532, &(0x7f0000000080)=0x4) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f}}, 0x20) 6m9.549540444s ago: executing program 2 (id=914): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b0000000000000000000000018000000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) r3 = semget$private(0x0, 0x4, 0x30) semctl$IPC_STAT(r3, 0x0, 0x2, 0x0) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8814}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r2, r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r4}}}], 0x58, 0x20000801}}, {{&(0x7f0000000d00)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x2b, 0x1, 0x2, {r0}}}, @cred={{0x1c}}], 0x58, 0x20004040}}, {{&(0x7f0000001480)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001580)=[{0x0}], 0x1, 0x0, 0xfffffffffffffe8d, 0x40010}}], 0x4, 0x24048880) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001a00)="e8", 0x3f}], 0x1}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101000) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f}}, 0x20) 5m52.50975927s ago: executing program 34 (id=914): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b0000000000000000000000018000000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) r3 = semget$private(0x0, 0x4, 0x30) semctl$IPC_STAT(r3, 0x0, 0x2, 0x0) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8814}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r2, r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r4}}}], 0x58, 0x20000801}}, {{&(0x7f0000000d00)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x2b, 0x1, 0x2, {r0}}}, @cred={{0x1c}}], 0x58, 0x20004040}}, {{&(0x7f0000001480)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001580)=[{0x0}], 0x1, 0x0, 0xfffffffffffffe8d, 0x40010}}], 0x4, 0x24048880) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001a00)="e8", 0x3f}], 0x1}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101000) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f}}, 0x20) 4m53.952582534s ago: executing program 6 (id=1025): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='\x00'/14], 0x50) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f00000002c0)={0xc, r3}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r2, 0x3b72, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='net/route\x00') preadv(r6, &(0x7f00000025c0)=[{0x0}], 0x1, 0x10006c, 0x0) 4m49.221124012s ago: executing program 6 (id=1029): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) unlink(&(0x7f0000000100)='./file0\x00') write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000121000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r6, &(0x7f0000000340)={0x230, 0x7d, 0x40, {{0x500, 0xef, 0x0, 0xb000000, {0x0, 0x2, 0x7}, 0x0, 0x0, 0x0, 0x5, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x14, '\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e<]\xb4Z', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1h\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\b\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x230) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="940000001000010000000000000000000000000afbff0000090a010400000000000000000700000008000a4000e4ffff0800020073797a3100000000080005400000000d140000001000010000000000000000000084000a"], 0x58}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002640), 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r7, 0x5404) close_range(r0, 0xffffffffffffffff, 0x0) socket$qrtr(0x2a, 0x2, 0x0) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='DIGITAL1 \'Master Plack\' 00000000000000000000\nMIC \'Synth Capture Switch'], 0x6f) 4m47.617401969s ago: executing program 6 (id=1032): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0x5, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000500)=""/194, &(0x7f0000000300)=0xc2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000001e0000850000008200000095000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$BLKPG(r5, 0x1269, &(0x7f00000000c0)={0xf7c8561671f7aa05, 0x0, 0x98, &(0x7f0000000000)={0x0, 0x200, 0x801000e}}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r6, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r6, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x8, 0x63b2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x20000, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x3ff}, 0x8) ioctl$int_in(r7, 0x5421, &(0x7f0000001100)=0x2000000009) connect$bt_sco(r7, &(0x7f0000000040)={0x1f, @fixed}, 0x8) close(r7) 4m45.466881961s ago: executing program 6 (id=1037): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) setsockopt$ax25_int(r1, 0x101, 0x6, &(0x7f0000000640)=0x26a, 0x4) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCAX25GETINFO(r1, 0x89ed, &(0x7f0000000180)) setsockopt$sock_attach_bpf(r2, 0x84, 0x10, &(0x7f0000000000), 0xc) socket(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = gettid() timer_create(0x4, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r8, &(0x7f0000000300)="ab", 0x1, 0x0, 0x0, 0x0) 4m42.379595278s ago: executing program 6 (id=1040): r0 = socket(0x400000000010, 0x3, 0x0) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x101) 4m41.962423021s ago: executing program 6 (id=1044): syz_clone(0xc00e4000, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000180)=[{0x9c}, {0x6}]}) 4m26.597079027s ago: executing program 35 (id=1044): syz_clone(0xc00e4000, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000180)=[{0x9c}, {0x6}]}) 3m15.838047857s ago: executing program 7 (id=1167): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) unlink(&(0x7f0000000100)='./file0\x00') write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000121000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r6, &(0x7f0000000340)={0x230, 0x7d, 0x40, {{0x500, 0xef, 0x0, 0xb000000, {0x0, 0x2, 0x7}, 0x0, 0x0, 0x0, 0x5, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x14, '\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e<]\xb4Z', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1h\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\b\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x230) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="940000001000010000000000000000000000000afbff0000090a010400000000000000000700000008000a4000e4ffff0800020073797a3100000000080005400000000d140000001000010000000000000000000084000a"], 0x58}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002640), 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r7, 0x5404) close_range(r0, 0xffffffffffffffff, 0x0) socket$qrtr(0x2a, 0x2, 0x0) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='DIGITAL1 \'Master Plack\' 00000000000000000000\nMIC \'Synth Capture Switch'], 0x6f) 3m12.615069543s ago: executing program 7 (id=1170): socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) unlink(&(0x7f0000000100)='./file0\x00') write$USERIO_CMD_REGISTER(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000121000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r4, &(0x7f0000000340)={0x230, 0x7d, 0x40, {{0x500, 0xef, 0x0, 0xb000000, {0x0, 0x2, 0x7}, 0x0, 0x0, 0x0, 0x5, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x14, '\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e<]\xb4Z', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1h\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\b\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x230) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002640), 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r5, 0x5404) 3m10.690035673s ago: executing program 7 (id=1173): socket$inet_tcp(0x2, 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r0 = getpid() ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'erspan0\x00', 0x0}) futex(0x0, 0x4, 0xffffffba, 0x0, 0x0, 0x4000000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) close(0xffffffffffffffff) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0x0) 3m7.06528016s ago: executing program 7 (id=1176): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba52344000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000093160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f40000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000be00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000000000000002000", 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000d290000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$hfsplus(&(0x7f0000000180), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x4812, &(0x7f0000002140)=ANY=[], 0x11, 0x6b1, &(0x7f0000000240)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) lseek(r5, 0xae, 0x0) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) getdents(r5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r7, 0x0, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup/syz1\x00', 0x200002, 0x0) fchdir(r8) mkdir(0x0, 0x0) rmdir(&(0x7f0000000040)='./control\x00') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 3m4.994552504s ago: executing program 7 (id=1179): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='\x00'/15, @ANYBLOB], 0x50) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f00000002c0)={0xc, r2}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r1, 0x3b72, &(0x7f0000000300)={0x18, 0x2, 0xfdfd}) r3 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='net/route\x00') preadv(r5, &(0x7f00000025c0)=[{&(0x7f0000002500)=""/79, 0x4f}], 0x1, 0x10006c, 0x0) 3m1.759539328s ago: executing program 7 (id=1184): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x40000000015, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0xa, 0x801, 0x40000084) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) request_key(0x0, 0x0, &(0x7f0000001fee)='y\xa9rust\xe3c*s\xb8dn::e\x00\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r5 = dup(r4) ioctl$TCSETSF(r5, 0x5404, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7c, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000140)={0x2, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000040)=0x1) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x28, r7, 0x7d243a6ea807936d, 0x10, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x20000080) 2m45.751003435s ago: executing program 36 (id=1184): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x40000000015, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0xa, 0x801, 0x40000084) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) request_key(0x0, 0x0, &(0x7f0000001fee)='y\xa9rust\xe3c*s\xb8dn::e\x00\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r5 = dup(r4) ioctl$TCSETSF(r5, 0x5404, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7c, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000140)={0x2, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000040)=0x1) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x28, r7, 0x7d243a6ea807936d, 0x10, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x20000080) 20.981370393s ago: executing program 3 (id=1386): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0xf, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(0xffffffffffffffff, 0x3b88, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000180)=@urb_type_control={0x2, {0x8, 0x1}, 0x9, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x9, 0x4, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='net/route\x00') preadv(r1, &(0x7f00000025c0)=[{&(0x7f0000002500)=""/79, 0x4f}], 0x1, 0x10006c, 0x0) 19.434258894s ago: executing program 3 (id=1388): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) setsockopt$ax25_int(r1, 0x101, 0x6, &(0x7f0000000640)=0x26a, 0x4) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCAX25GETINFO(r1, 0x89ed, &(0x7f0000000180)) setsockopt$sock_attach_bpf(r2, 0x84, 0x10, &(0x7f0000000000), 0xc) socket(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = gettid() timer_create(0x4, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r7, &(0x7f0000000040)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r7, &(0x7f0000000300)="ab", 0x1, 0x0, 0x0, 0x0) 12.737435962s ago: executing program 3 (id=1396): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b0000000000000000000000018000000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) r3 = semget$private(0x0, 0x4, 0x30) semctl$IPC_STAT(r3, 0x0, 0x2, 0x0) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8814}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, r2]}}, @rights={{0x20, 0x1, 0x1, [r2, 0xffffffffffffffff, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r4}}}], 0x58, 0x20000801}}, {{&(0x7f0000000d00)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x2b}}, @cred={{0x1c}}], 0x58, 0x20004040}}, {{&(0x7f0000001480)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001580)=[{0x0}], 0x1, 0x0, 0xfffffffffffffe8d, 0x40010}}], 0x4, 0x24048880) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001a00)="e8", 0x3f}], 0x1}, 0x0) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f}}, 0x20) 12.641435041s ago: executing program 5 (id=1397): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) unlink(&(0x7f0000000100)='./file0\x00') write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000121000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r6, &(0x7f0000000340)={0x230, 0x7d, 0x40, {{0x500, 0xef, 0x0, 0xb000000, {0x0, 0x2, 0x7}, 0x0, 0x0, 0x0, 0x5, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x14, '\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e<]\xb4Z', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1h\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\b\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x230) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="940000001000010000000000000000000000000afbff0000090a010400000000000000000700000008000a4000e4ffff0800020073797a3100000000080005400000000d140000001000010000000000000000000084000a"], 0x58}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002640), 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r7, 0x5404) close_range(r0, 0xffffffffffffffff, 0x0) socket$qrtr(0x2a, 0x2, 0x0) r8 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x101501, 0x0) write$proc_mixer(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='DIGITAL1 \'Master Plack\' 00000000000000000000\nMIC \'Synth Capture Switch'], 0x6f) 11.193330593s ago: executing program 5 (id=1399): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b0000000000000000000000018000000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) r4 = semget$private(0x0, 0x4, 0x30) semctl$IPC_STAT(r4, 0x0, 0x2, 0x0) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8814}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, r3]}}, @rights={{0x20, 0x1, 0x1, [r3, 0xffffffffffffffff, r2, r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r5}}}], 0x58, 0x20000801}}, {{&(0x7f0000000d00)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x2b, 0x1, 0x2, {r0}}}, @cred={{0x1c}}], 0x58, 0x20004040}}, {{&(0x7f0000001480)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001580)=[{0x0}], 0x1, 0x0, 0xfffffffffffffe8d, 0x40010}}], 0x4, 0x24048880) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$kcm(r7, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001a00)="e8", 0x3f}], 0x1}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101000) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f}}, 0x20) 9.577325974s ago: executing program 5 (id=1401): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[], 0x50) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) r3 = semget$private(0x0, 0x4, 0x30) semctl$IPC_STAT(r3, 0x0, 0x2, 0x0) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8814}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r2]}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r4}}}], 0x48, 0x20000801}}, {{&(0x7f0000000d00)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c}}], 0x58, 0x20004040}}], 0x3, 0x24048880) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001a00)="e8", 0x3f}], 0x1}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101000) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f}}, 0x20) 7.41566912s ago: executing program 4 (id=1402): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0xf, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB], 0x50) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f00000002c0)={0xc, r3}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r2, 0x3b72, &(0x7f0000000300)={0x18, 0x2, 0xfdfd}) r4 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) sendmsg$inet(r4, &(0x7f00000004c0)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe0000000}, 0x40) r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0x80045505, &(0x7f0000000340)=@usbdevfs_connect) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000180)=@urb_type_control={0x2, {0x8, 0x1}, 0x9, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x9, 0x4, 0x0}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='net/route\x00') preadv(r6, &(0x7f00000025c0)=[{&(0x7f0000002500)=""/79, 0x4f}], 0x1, 0x10006c, 0x0) 7.181948806s ago: executing program 5 (id=1403): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) unlink(&(0x7f0000000100)='./file0\x00') write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000121000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r6, &(0x7f0000000340)={0x230, 0x7d, 0x40, {{0x500, 0xef, 0x0, 0xb000000, {0x0, 0x2, 0x7}, 0x0, 0x0, 0x0, 0x5, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x14, '\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e<]\xb4Z', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1h\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\b\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x230) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="940000001000010000000000000000000000000afbff0000090a010400000000000000000700000008000a4000e4ffff0800020073797a3100000000080005400000000d140000001000010000000000000000000084000a"], 0x58}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002640), 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r7, 0x5404) close_range(r0, 0xffffffffffffffff, 0x0) socket$qrtr(0x2a, 0x2, 0x0) r8 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x101501, 0x0) write$proc_mixer(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='DIGITAL1 \'Master Plack\' 00000000000000000000\nMIC \'Synth Capture Switch'], 0x6f) 6.574457663s ago: executing program 4 (id=1404): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x40000000015, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0xa, 0x801, 0x40000084) syz_open_dev$tty1(0xc, 0x4, 0x2) request_key(0x0, 0x0, &(0x7f0000001fee)='y\xa9rust\xe3c*s\xb8dn::e\x00\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7c, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000140)={0x2, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000040)=0x1) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x28, r5, 0x7d243a6ea807936d, 0x10, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x20000080) 6.526739164s ago: executing program 3 (id=1405): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0x5, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000500)=""/194, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$BLKPG(r5, 0x1269, &(0x7f00000000c0)={0xf7c8561671f7aa05, 0x0, 0x98, &(0x7f0000000000)={0x0, 0x200, 0x801000e}}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r6, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r6, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x8, 0x63b2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x20000, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x3ff}, 0x8) ioctl$int_in(r7, 0x5421, &(0x7f0000001100)=0x2000000009) connect$bt_sco(r7, &(0x7f0000000040)={0x1f, @fixed}, 0x8) close(r7) 4.894837674s ago: executing program 4 (id=1406): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b0000000000000000000000018000000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0], 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) r2 = semget$private(0x0, 0x4, 0x30) semctl$IPC_STAT(r2, 0x0, 0x2, 0x0) getresuid(&(0x7f0000000140), 0x0, &(0x7f0000000300)) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000480)) semctl$IPC_SET(r2, 0x0, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003a40), 0x0, 0x24048880) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) accept4(r3, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000080)=0x4) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f}}, 0x20) 4.262871196s ago: executing program 3 (id=1407): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) setsockopt$ax25_int(r1, 0x101, 0x6, &(0x7f0000000640)=0x26a, 0x4) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCAX25GETINFO(r1, 0x89ed, &(0x7f0000000180)) setsockopt$sock_attach_bpf(r2, 0x84, 0x10, &(0x7f0000000000), 0xc) socket(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = gettid() timer_create(0x4, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r8, &(0x7f0000000040)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r8, &(0x7f0000000300)="ab", 0x1, 0x0, 0x0, 0x0) 2.901030503s ago: executing program 4 (id=1408): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) unlink(&(0x7f0000000100)='./file0\x00') write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000121000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r6, &(0x7f0000000340)={0x230, 0x7d, 0x40, {{0x500, 0xef, 0x0, 0xb000000, {0x0, 0x2, 0x7}, 0x0, 0x0, 0x0, 0x5, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x14, '\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e<]\xb4Z', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1h\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\b\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x230) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="940000001000010000000000000000000000000afbff0000090a010400000000000000000700000008000a4000e4ffff0800020073797a3100000000080005400000000d140000001000010000000000000000000084000a"], 0x58}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002640), 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r7, 0x5404) close_range(r0, 0xffffffffffffffff, 0x0) socket$qrtr(0x2a, 0x2, 0x0) r8 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x101501, 0x0) write$proc_mixer(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='DIGITAL1 \'Master Plack\' 00000000000000000000\nMIC \'Synth Capture Switch'], 0x6f) 1.801388486s ago: executing program 5 (id=1409): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x40103) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f00000002c0), r3) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="01000000030000006102000002000000000000001b137adb3395cf895427014adb1c090364bc6a7a142dd31560482d25f5d277792060f601e342221bd34c", @ANYRES32=r3, @ANYRES16=0x0, @ANYRES32=r2, @ANYRES32=r2, @ANYRES8=r1], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{0x1}, &(0x7f00000004c0), 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000880)="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", 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000c40)={0x2000000b}) r6 = socket$kcm(0xa, 0x2, 0x88) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r4, 0xc08c5336, &(0x7f0000000400)={0x5, 0x7, 0x0, 'queue0\x00', 0x4}) ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f0000000180)=0x2) r7 = memfd_create(&(0x7f00000002c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x98m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x0) ftruncate(r7, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x1000001, 0x2012, r5, 0x76997000) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}}) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00004bd000/0x3000)=nil, 0x3000}}) syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$inet(r9, &(0x7f0000001600)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @remote}}}], 0x20}, 0x8040) sendmsg$inet(r6, &(0x7f0000000140), 0x4050) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TUNGETIFF(r4, 0x800454d2, &(0x7f00000000c0)={'veth0_to_hsr\x00'}) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000580)) 934.823592ms ago: executing program 4 (id=1410): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='\x00'/15, @ANYBLOB], 0x50) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f00000002c0)={0xc, r3}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r2, 0x3b72, &(0x7f0000000300)={0x18, 0x2, 0xfdfd}) r4 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='net/route\x00') preadv(r6, &(0x7f00000025c0)=[{&(0x7f0000002500)=""/79, 0x4f}], 0x1, 0x10006c, 0x0) 605.055082ms ago: executing program 5 (id=1411): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) unlink(&(0x7f0000000100)='./file0\x00') write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000121000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r6, &(0x7f0000000340)={0x230, 0x7d, 0x40, {{0x500, 0xef, 0x0, 0xb000000, {0x0, 0x2, 0x7}, 0x0, 0x0, 0x0, 0x5, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x14, '\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e<]\xb4Z', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1h\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\b\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x230) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="940000001000010000000000000000000000000afbff0000090a010400000000000000000700000008000a4000e4ffff0800020073797a3100000000080005400000000d140000001000010000000000000000000084000a"], 0x58}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002640), 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r7, 0x5404) close_range(r0, 0xffffffffffffffff, 0x0) socket$qrtr(0x2a, 0x2, 0x0) r8 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x101501, 0x0) write$proc_mixer(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='DIGITAL1 \'Master Plack\' 00000000000000000000\nMIC \'Synth Capture Switch'], 0x6f) 63.216644ms ago: executing program 4 (id=1412): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0x5, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000500)=""/194, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$BLKPG(r5, 0x1269, &(0x7f00000000c0)={0xf7c8561671f7aa05, 0x0, 0x98, &(0x7f0000000000)={0x0, 0x200, 0x801000e}}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r6, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r6, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x8, 0x63b2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x20000, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x3ff}, 0x8) ioctl$int_in(r7, 0x5421, &(0x7f0000001100)=0x2000000009) connect$bt_sco(r7, &(0x7f0000000040)={0x1f, @fixed}, 0x8) close(r7) 0s ago: executing program 3 (id=1413): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0x5, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000500)=""/194, &(0x7f0000000300)=0xc2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$BLKPG(r5, 0x1269, &(0x7f00000000c0)={0xf7c8561671f7aa05, 0x0, 0x98, &(0x7f0000000000)={0x0, 0x200, 0x801000e}}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r6, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r6, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) socket$kcm(0x29, 0x2, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x3ff}, 0x8) ioctl$int_in(r7, 0x5421, &(0x7f0000001100)=0x2000000009) connect$bt_sco(r7, &(0x7f0000000040)={0x1f, @fixed}, 0x8) close(r7) kernel console output (not intermixed with test programs): ][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 410.662734][ T11] team0 (unregistering): Port device team_slave_1 removed [ 410.877438][ T11] team0 (unregistering): Port device team_slave_0 removed [ 414.540022][ T8187] loop5: detected capacity change from 0 to 256 [ 414.547725][ T8187] ======================================================= [ 414.547725][ T8187] WARNING: The mand mount option has been deprecated and [ 414.547725][ T8187] and is ignored by this kernel. Remove the mand [ 414.547725][ T8187] option from the mount to silence this warning. [ 414.547725][ T8187] ======================================================= [ 416.687212][ T5850] Bluetooth: hci0: command 0x040f tx timeout [ 419.084522][ T8026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.105949][ T8026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.691158][ T8026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.764156][ T8026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.771731][ T8026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.801397][ T8026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.541511][ T5850] Bluetooth: hci0: command 0x040f tx timeout [ 425.839777][ T120] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 425.884997][ T8026] hsr_slave_0: entered promiscuous mode [ 425.942136][ T8026] hsr_slave_1: entered promiscuous mode [ 425.962426][ T8026] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 425.990527][ T8026] Cannot create hsr debugfs directory [ 426.269804][ T120] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.294459][ T8069] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.311451][ T120] usb 4-1: New USB device found, idVendor=056a, idProduct=0314, bcdDevice= 0.00 [ 426.322228][ T8069] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.329482][ T8069] bridge_slave_0: entered allmulticast mode [ 426.344708][ T120] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.363466][ T8069] bridge_slave_0: entered promiscuous mode [ 426.453567][ T120] usb 4-1: config 0 descriptor?? [ 426.483702][ T8069] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.582655][ T8069] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.619136][ T8069] bridge_slave_1: entered allmulticast mode [ 426.633344][ T8069] bridge_slave_1: entered promiscuous mode [ 426.788672][ T8069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.898059][ T8069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.929952][ T120] wacom 0003:056A:0314.0001: unknown main item tag 0x0 [ 426.961649][ T120] wacom 0003:056A:0314.0001: unknown main item tag 0x0 [ 427.001688][ T120] wacom 0003:056A:0314.0001: unknown main item tag 0x0 [ 427.011417][ T120] wacom 0003:056A:0314.0001: unknown main item tag 0x0 [ 427.041747][ T120] wacom 0003:056A:0314.0001: unknown main item tag 0x0 [ 427.048676][ T120] wacom 0003:056A:0314.0001: unknown main item tag 0x0 [ 427.054696][ T8069] team0: Port device team_slave_0 added [ 427.067503][ T120] wacom 0003:056A:0314.0001: unknown main item tag 0x0 [ 427.092603][ T8069] team0: Port device team_slave_1 added [ 427.106052][ T120] wacom 0003:056A:0314.0001: Unknown device_type for 'HID 056a:0314'. Assuming pen. [ 427.191558][ T120] wacom 0003:056A:0314.0001: hidraw0: USB HID v0.00 Device [HID 056a:0314] on usb-dummy_hcd.3-1/input0 [ 427.225208][ T120] input: Wacom Intuos Pro S Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0314.0001/input/input5 [ 427.352131][ T120] usb 4-1: USB disconnect, device number 2 [ 427.412320][ T8069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.429692][ T8069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.511529][ T8069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 427.576266][ T8069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.605907][ T8069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.658107][ T8069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.138111][ T8278] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 428.223339][ T1198] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 428.761468][ T1198] usb 3-1: Using ep0 maxpacket: 16 [ 428.772888][ T1198] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.784932][ T1198] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.795544][ T1198] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 428.808568][ T1198] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 428.817665][ T1198] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.828237][ T1198] usb 3-1: config 0 descriptor?? [ 429.130565][ T8281] netlink: 9 bytes leftover after parsing attributes in process `syz.3.517'. [ 429.632487][ T8281] 0·: renamed from hsr0 (while UP) [ 429.659131][ T8281] 0·: entered promiscuous mode [ 429.664764][ T8281] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 429.778000][ T8069] hsr_slave_0: entered promiscuous mode [ 429.784945][ T8069] hsr_slave_1: entered promiscuous mode [ 429.921526][ T8069] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 429.929234][ T8069] Cannot create hsr debugfs directory [ 429.952254][ T8298] loop5: detected capacity change from 0 to 256 [ 430.678072][ T8289] loop2: detected capacity change from 0 to 32768 [ 430.694497][ T8289] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 430.703016][ T8289] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 430.719551][ T8289] gfs2: fsid=syz:syz.0: can't lookup journal index: 0 [ 431.302442][ T5896] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 431.309897][ T8312] loop5: detected capacity change from 0 to 32768 [ 431.425863][ T1198] usbhid 3-1:0.0: can't add hid device: -71 [ 431.463253][ T1198] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 431.496787][ T5896] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 431.516200][ T1198] usb 3-1: USB disconnect, device number 2 [ 431.529947][ T5896] usb 5-1: config 0 has no interface number 0 [ 431.576774][ T5896] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 431.606708][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.656614][ T8312] [ 431.656614][ T8312] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 431.656614][ T8312] [ 432.597013][ T5896] usb 5-1: Product: syz [ 432.601466][ T5896] usb 5-1: Manufacturer: syz [ 432.606400][ T5896] usb 5-1: SerialNumber: syz [ 432.617504][ T5896] usb 5-1: config 0 descriptor?? [ 433.242926][ T8325] netlink: 12 bytes leftover after parsing attributes in process `syz.5.521'. [ 433.663472][ T8326] find_entry called with index = 0 [ 433.669963][ T8326] read_mapping_page failed! [ 433.674749][ T8326] ERROR: (device loop5): txCommit: [ 433.674749][ T8326] [ 433.943552][ T8328] sed (8328) used greatest stack depth: 18672 bytes left [ 434.537534][ T5896] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected [ 434.553699][ T5896] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81 [ 434.561811][ T5896] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1 [ 434.569664][ T5896] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2 [ 434.640610][ T5896] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 434.684194][ T5896] usb 5-1: USB disconnect, device number 2 [ 435.511126][ T5833] [ 435.511126][ T5833] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 435.511126][ T5833] [ 435.525988][ T5833] [ 435.525988][ T5833] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 435.525988][ T5833] [ 435.539309][ T3482] bridge_slave_1: left allmulticast mode [ 435.541650][ T5896] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 435.545920][ T3482] bridge_slave_1: left promiscuous mode [ 435.555105][ T5896] keyspan 5-1:0.133: device disconnected [ 435.575708][ T3482] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.729583][ T3482] bridge_slave_0: left allmulticast mode [ 435.738676][ T3482] bridge_slave_0: left promiscuous mode [ 436.052094][ T3482] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.576491][ T5850] Bluetooth: hci0: command 0x040f tx timeout [ 438.000705][ T3482] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 438.134253][ T3482] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 438.412793][ T3482] bond0 (unregistering): Released all slaves [ 439.011255][ T8026] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 439.107365][ T8026] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 440.031855][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.047837][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.161808][ T25] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 440.618078][ T8382] loop5: detected capacity change from 0 to 1024 [ 440.628075][ T8382] EXT4-fs: Ignoring removed orlov option [ 440.634120][ T8382] EXT4-fs: Ignoring removed nomblk_io_submit option [ 440.791175][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 440.805769][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 440.805918][ T3482] hsr_slave_0: left promiscuous mode [ 440.822562][ T8382] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 440.822746][ T8382] System zones: [ 440.830780][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 440.848527][ T25] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 440.858483][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 440.870318][ T25] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 440.881155][ T25] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 440.890383][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.943811][ T8382] 0-1, 3-36 [ 440.983486][ T8382] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 441.229790][ T3482] hsr_slave_1: left promiscuous mode [ 441.261540][ T3482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 441.277661][ T3482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 441.479305][ T25] usb 5-1: config 0 descriptor?? [ 441.485294][ T8364] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 441.586721][ T5833] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.053394][ T3482] team0 (unregistering): Port device team_slave_1 removed [ 442.142283][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88807e003c00: rx timeout, send abort [ 442.177409][ T3482] team0 (unregistering): Port device team_slave_0 removed [ 442.651666][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88807e003c00: abort rx timeout. Force session deactivation [ 442.845149][ T8026] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 442.884088][ T8026] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 443.046089][ T8407] loop5: detected capacity change from 0 to 32768 [ 443.154053][ T8407] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 443.218737][ T8407] JBD2: Ignoring recovery information on journal [ 443.406752][ T8407] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 443.487509][ T5897] usb 5-1: USB disconnect, device number 3 [ 443.488474][ T5841] Bluetooth: hci1: Opcode 0x0c03 failed: -71 [ 443.580107][ T8026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.636870][ T8026] 8021q: adding VLAN 0 to HW filter on device team0 [ 443.659714][ T8413] FAULT_INJECTION: forcing a failure. [ 443.659714][ T8413] name failslab, interval 1, probability 0, space 0, times 1 [ 443.713154][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.720362][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.720358][ T8413] CPU: 1 UID: 0 PID: 8413 Comm: syz.4.537 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 443.738334][ T8413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 443.748411][ T8413] Call Trace: [ 443.751706][ T8413] [ 443.754663][ T8413] dump_stack_lvl+0x241/0x360 [ 443.759386][ T8413] ? __pfx_dump_stack_lvl+0x10/0x10 [ 443.764712][ T8413] ? __pfx__printk+0x10/0x10 [ 443.769332][ T8413] ? __pfx_lock_acquire+0x10/0x10 [ 443.774375][ T8413] ? __pfx___might_resched+0x10/0x10 [ 443.779673][ T8413] should_fail_ex+0x3b0/0x4e0 [ 443.784373][ T8413] should_failslab+0xac/0x100 [ 443.789069][ T8413] kmem_cache_alloc_node_noprof+0x77/0x380 [ 443.795330][ T8413] ? zswap_store+0x9e7/0x1ba0 [ 443.800033][ T8413] ? percpu_ref_put+0x18b/0x250 [ 443.804895][ T8413] zswap_store+0x9e7/0x1ba0 [ 443.809418][ T8413] ? srso_alias_return_thunk+0x5/0xfbef5 [ 443.815071][ T8413] ? srso_alias_return_thunk+0x5/0xfbef5 [ 443.820718][ T8413] ? zswap_store+0x577/0x1ba0 [ 443.825422][ T8413] ? __pfx_zswap_store+0x10/0x10 [ 443.830382][ T8413] ? do_raw_spin_lock+0x14f/0x370 [ 443.835515][ T8413] ? srso_alias_return_thunk+0x5/0xfbef5 [ 443.841158][ T8413] ? do_raw_spin_unlock+0x13c/0x8b0 [ 443.846377][ T8413] ? _raw_spin_unlock+0x28/0x50 [ 443.851243][ T8413] ? srso_alias_return_thunk+0x5/0xfbef5 [ 443.856890][ T8413] ? folio_free_swap+0x2e1/0x480 [ 443.861845][ T8413] swap_writepage+0x647/0xce0 [ 443.866554][ T8413] shrink_folio_list+0x3b6a/0x5ca0 [ 443.871719][ T8413] ? __pfx_shrink_folio_list+0x10/0x10 [ 443.877283][ T8413] ? __pfx_validate_chain+0x10/0x10 [ 443.882503][ T8413] ? __pfx_validate_chain+0x10/0x10 [ 443.887762][ T8413] ? srso_alias_return_thunk+0x5/0xfbef5 [ 443.893407][ T8413] ? validate_chain+0x11e/0x5920 [ 443.898452][ T8413] ? srso_alias_return_thunk+0x5/0xfbef5 [ 443.904098][ T8413] ? mark_lock+0x9a/0x360 [ 443.908493][ T8413] reclaim_folio_list+0x13c/0x5f0 [ 443.913530][ T8413] ? __mod_memcg_lruvec_state+0x2f7/0x4d0 [ 443.919271][ T8413] ? srso_alias_return_thunk+0x5/0xfbef5 [ 443.924917][ T8413] ? __pfx_reclaim_folio_list+0x10/0x10 [ 443.930477][ T8413] ? srso_alias_return_thunk+0x5/0xfbef5 [ 443.936118][ T8413] ? __mod_node_page_state+0xf2/0x170 [ 443.941526][ T8413] ? srso_alias_return_thunk+0x5/0xfbef5 [ 443.947174][ T8413] reclaim_pages+0x49e/0x5e0 [ 443.951784][ T8413] ? __pfx_reclaim_pages+0x10/0x10 [ 443.956913][ T8413] ? folio_isolate_lru+0x743/0x900 [ 443.962043][ T8413] madvise_cold_or_pageout_pte_range+0x1ea8/0x2360 [ 443.968566][ T8413] ? mark_lock+0x9a/0x360 [ 443.972939][ T8413] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 443.979901][ T8413] ? srso_alias_return_thunk+0x5/0xfbef5 [ 443.985635][ T8413] ? mt_find+0x2a9/0x920 [ 443.989901][ T8413] walk_pgd_range+0xc3f/0x17e0 [ 443.994710][ T8413] ? __pfx_walk_pgd_range+0x10/0x10 [ 444.000025][ T8413] __walk_page_range+0x15f/0x700 [ 444.004983][ T8413] ? find_vma+0xf9/0x170 [ 444.009251][ T8413] ? __pfx_find_vma+0x10/0x10 [ 444.013959][ T8413] ? srso_alias_return_thunk+0x5/0xfbef5 [ 444.019602][ T8413] ? process_vma_walk_lock+0x135/0x390 [ 444.025083][ T8413] walk_page_range_mm+0x58f/0x7c0 [ 444.030146][ T8413] ? __pfx_walk_page_range_mm+0x10/0x10 [ 444.035724][ T8413] ? srso_alias_return_thunk+0x5/0xfbef5 [ 444.041369][ T8413] ? tlb_gather_mmu+0x24e/0x310 [ 444.046239][ T8413] ? srso_alias_return_thunk+0x5/0xfbef5 [ 444.051972][ T8413] ? walk_page_range+0x6a/0x90 [ 444.056845][ T8413] do_madvise+0x391c/0x4d10 [ 444.061456][ T8413] ? mark_lock+0x9a/0x360 [ 444.065831][ T8413] ? __pfx_do_madvise+0x10/0x10 [ 444.070701][ T8413] ? __pfx_lock_acquire+0x10/0x10 [ 444.075739][ T8413] ? get_pid_task+0x23/0x1f0 [ 444.080348][ T8413] ? __pfx_lock_release+0x10/0x10 [ 444.085390][ T8413] ? kstrtouint_from_user+0x128/0x190 [ 444.090870][ T8413] ? srso_alias_return_thunk+0x5/0xfbef5 [ 444.096713][ T8413] ? srso_alias_return_thunk+0x5/0xfbef5 [ 444.102358][ T8413] ? srso_alias_return_thunk+0x5/0xfbef5 [ 444.108083][ T8413] ? vfs_write+0x730/0xd30 [ 444.112514][ T8413] ? srso_alias_return_thunk+0x5/0xfbef5 [ 444.118151][ T8413] ? __mutex_unlock_slowpath+0x21e/0x790 [ 444.123806][ T8413] ? __pfx_vfs_write+0x10/0x10 [ 444.128754][ T8413] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 444.134752][ T8413] ? __fget_files+0x2a/0x410 [ 444.139455][ T8413] ? __fget_files+0x2a/0x410 [ 444.144085][ T8413] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 444.150429][ T8413] ? do_syscall_64+0x100/0x230 [ 444.155221][ T8413] __x64_sys_madvise+0xa6/0xc0 [ 444.160007][ T8413] do_syscall_64+0xf3/0x230 [ 444.164537][ T8413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.170538][ T8413] RIP: 0033:0x7fc077d85d19 [ 444.174960][ T8413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 444.194578][ T8413] RSP: 002b:00007fc078c92038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 444.203006][ T8413] RAX: ffffffffffffffda RBX: 00007fc077f75fa0 RCX: 00007fc077d85d19 [ 444.210985][ T8413] RDX: 0000000000000015 RSI: 0000000000600000 RDI: 0000000020000000 [ 444.218961][ T8413] RBP: 00007fc078c92090 R08: 0000000000000000 R09: 0000000000000000 [ 444.226942][ T8413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 444.234935][ T8413] R13: 0000000000000000 R14: 00007fc077f75fa0 R15: 00007ffc5c4463e8 [ 444.242934][ T8413] [ 444.273281][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.280395][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.358991][ T8069] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 444.379123][ T8069] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 444.416973][ T8069] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 444.442635][ T8069] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 444.491897][ T8407] OCFS2: ERROR (device loop5): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 23 has 4294967295 used bits but only 16777215 total [ 444.499370][ T8026] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 444.551641][ T8407] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 444.569056][ T8407] OCFS2: Returning error to the calling process. [ 444.612423][ T8407] (syz.5.536,8407,0):ocfs2_claim_suballoc_bits:2038 ERROR: status = -5 [ 444.625834][ T8407] (syz.5.536,8407,0):__ocfs2_claim_clusters:2412 ERROR: status = -5 [ 444.663943][ T8407] (syz.5.536,8407,0):__ocfs2_claim_clusters:2420 ERROR: status = -5 [ 444.677226][ T8407] (syz.5.536,8407,0):ocfs2_local_alloc_new_window:1216 ERROR: status = -5 [ 444.753047][ T8407] (syz.5.536,8407,0):ocfs2_local_alloc_new_window:1241 ERROR: status = -5 [ 444.835194][ T8407] (syz.5.536,8407,0):ocfs2_local_alloc_slide_window:1315 ERROR: status = -5 [ 444.914040][ T8407] (syz.5.536,8407,0):ocfs2_local_alloc_slide_window:1334 ERROR: status = -5 [ 444.941544][ T8407] (syz.5.536,8407,1):ocfs2_reserve_local_alloc_bits:672 ERROR: status = -5 [ 444.950391][ T8407] (syz.5.536,8407,1):ocfs2_reserve_local_alloc_bits:710 ERROR: status = -5 [ 445.088378][ T8419] loop4: detected capacity change from 0 to 1024 [ 445.281599][ T8407] (syz.5.536,8407,1):ocfs2_reserve_clusters_with_limit:1170 ERROR: status = -5 [ 445.311726][ T8069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.820969][ T8069] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.929070][ T8069] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 445.939699][ T8069] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 445.941706][ T8407] (syz.5.536,8407,1):ocfs2_reserve_clusters_with_limit:1219 ERROR: status = -5 [ 446.002014][ T8407] (syz.5.536,8407,1):ocfs2_lock_allocators:2749 ERROR: status = -5 [ 446.090697][ T8407] (syz.5.536,8407,1):ocfs2_write_begin_nolock:1742 ERROR: status = -5 [ 446.124130][ T3526] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.131273][ T3526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.609654][ T3526] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.617494][ T3526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.718535][ T8407] (syz.5.536,8407,1):ocfs2_write_begin:1905 ERROR: status = -5 [ 447.994076][ T8432] FAULT_INJECTION: forcing a failure. [ 447.994076][ T8432] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 448.159374][ T5833] ocfs2: Unmounting device (7,5) on (node local) [ 448.204604][ T8432] CPU: 0 UID: 0 PID: 8432 Comm: syz.2.541 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 448.215433][ T8432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 448.225515][ T8432] Call Trace: [ 448.228818][ T8432] [ 448.231771][ T8432] dump_stack_lvl+0x241/0x360 [ 448.236502][ T8432] ? __pfx_dump_stack_lvl+0x10/0x10 [ 448.241739][ T8432] ? __pfx__printk+0x10/0x10 [ 448.246370][ T8432] ? snprintf+0xda/0x120 [ 448.250732][ T8432] should_fail_ex+0x3b0/0x4e0 [ 448.255445][ T8432] _copy_to_user+0x31/0xb0 [ 448.259905][ T8432] simple_read_from_buffer+0xca/0x150 [ 448.265314][ T8432] proc_fail_nth_read+0x1e9/0x250 [ 448.270363][ T8432] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 448.275931][ T8432] ? srso_alias_return_thunk+0x5/0xfbef5 [ 448.281573][ T8432] ? rw_verify_area+0x55e/0x6f0 [ 448.286435][ T8432] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 448.291993][ T8432] vfs_read+0x1fe/0xb70 [ 448.296166][ T8432] ? __pfx___mutex_lock+0x10/0x10 [ 448.301210][ T8432] ? __pfx_vfs_read+0x10/0x10 [ 448.305897][ T8432] ? __fget_files+0x2a/0x410 [ 448.310505][ T8432] ? __fget_files+0x395/0x410 [ 448.315201][ T8432] ? __fget_files+0x2a/0x410 [ 448.319813][ T8432] ? srso_alias_return_thunk+0x5/0xfbef5 [ 448.325464][ T8432] ksys_read+0x18f/0x2b0 [ 448.329719][ T8432] ? __pfx_ksys_read+0x10/0x10 [ 448.334494][ T8432] ? do_syscall_64+0x100/0x230 [ 448.339286][ T8432] ? do_syscall_64+0xb6/0x230 [ 448.343993][ T8432] do_syscall_64+0xf3/0x230 [ 448.348616][ T8432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.354531][ T8432] RIP: 0033:0x7f3b7e38472c [ 448.358951][ T8432] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 448.378653][ T8432] RSP: 002b:00007f3b7f169030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 448.387083][ T8432] RAX: ffffffffffffffda RBX: 00007f3b7e575fa0 RCX: 00007f3b7e38472c [ 448.395064][ T8432] RDX: 000000000000000f RSI: 00007f3b7f1690a0 RDI: 0000000000000004 [ 448.403042][ T8432] RBP: 00007f3b7f169090 R08: 0000000000000000 R09: 0000000000000000 [ 448.411108][ T8432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.419173][ T8432] R13: 0000000000000000 R14: 00007f3b7e575fa0 R15: 00007fffac5655a8 [ 448.427519][ T8432] [ 449.177652][ T8069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 449.252327][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 449.295720][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 449.304615][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 449.313489][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 449.322083][ T5850] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 449.329433][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 449.360297][ T8441] netlink: 132 bytes leftover after parsing attributes in process `syz.3.542'. [ 451.959257][ T8464] loop2: detected capacity change from 0 to 128 [ 452.094215][ T8466] FAT-fs (loop2): FAT read failed (blocknr 234) [ 452.212908][ T8466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.548'. [ 453.359325][ T5850] Bluetooth: hci1: command tx timeout [ 454.120143][ T8437] chnl_net:caif_netlink_parms(): no params data found [ 454.398874][ T8437] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.406605][ T8437] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.414874][ T8437] bridge_slave_0: entered allmulticast mode [ 454.423990][ T8437] bridge_slave_0: entered promiscuous mode [ 454.478736][ T8437] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.487776][ T8437] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.495066][ T8437] bridge_slave_1: entered allmulticast mode [ 454.502241][ T8437] bridge_slave_1: entered promiscuous mode [ 454.605018][ T8437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.657905][ T8437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 454.818863][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 454.827708][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 454.835974][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 454.843954][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 454.852666][ T5846] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 454.861070][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 454.998241][ T8437] team0: Port device team_slave_0 added [ 455.038071][ T8437] team0: Port device team_slave_1 added [ 455.203409][ T8437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.210418][ T8437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.305636][ T8437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.358464][ T3500] bridge_slave_1: left allmulticast mode [ 455.373725][ T3500] bridge_slave_1: left promiscuous mode [ 455.396309][ T3500] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.414683][ T5845] Bluetooth: hci1: command 0x041b tx timeout [ 455.558354][ T3500] bridge_slave_0: left allmulticast mode [ 455.587268][ T3500] bridge_slave_0: left promiscuous mode [ 456.260997][ T3500] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.489552][ T5841] Bluetooth: hci0: command tx timeout [ 457.501835][ T5845] Bluetooth: hci1: command 0x041b tx timeout [ 459.572159][ T5841] Bluetooth: hci1: command 0x041b tx timeout [ 459.967023][ T5841] Bluetooth: hci0: command tx timeout [ 461.194144][ T3500] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 461.663543][ T5845] Bluetooth: hci1: command 0x041b tx timeout [ 462.403996][ T5845] Bluetooth: hci0: command tx timeout [ 462.673657][ T3500] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 462.768323][ T3500] bond0 (unregistering): Released all slaves [ 464.513952][ T5845] Bluetooth: hci0: command 0x0419 tx timeout [ 464.905648][ T3500] hsr_slave_0: left promiscuous mode [ 465.446624][ T8537] loop4: detected capacity change from 0 to 256 [ 465.455012][ T3500] hsr_slave_1: left promiscuous mode [ 465.505934][ T3500] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 465.520858][ T3500] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 466.661547][ T5845] Bluetooth: hci0: command 0x0419 tx timeout [ 466.830212][ T8538] loop5: detected capacity change from 0 to 32768 [ 467.002677][ T8538] [ 467.002677][ T8538] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 467.002677][ T8538] [ 467.538865][ T8551] netlink: 12 bytes leftover after parsing attributes in process `syz.5.561'. [ 467.597329][ T8551] find_entry called with index = 0 [ 467.603466][ T8551] read_mapping_page failed! [ 467.608123][ T8551] ERROR: (device loop5): txCommit: [ 467.608123][ T8551] [ 468.237951][ T3500] team0 (unregistering): Port device team_slave_1 removed [ 468.241711][ T5833] [ 468.241711][ T5833] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 468.241711][ T5833] [ 468.721828][ T5845] Bluetooth: hci0: command 0x0419 tx timeout [ 468.742709][ T5833] [ 468.742709][ T5833] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 468.742709][ T5833] [ 469.559687][ T3500] team0 (unregistering): Port device team_slave_0 removed [ 469.833312][ T8564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.568'. [ 475.903381][ T5899] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 477.291011][ T8597] loop4: detected capacity change from 0 to 32768 [ 478.369466][ T8597] [ 478.369466][ T8597] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 478.369466][ T8597] [ 478.971837][ T8604] netlink: 12 bytes leftover after parsing attributes in process `syz.4.573'. [ 479.650497][ T8605] read_mapping_page failed! [ 480.038361][ T5835] [ 480.038361][ T5835] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 480.038361][ T5835] [ 480.061790][ T5835] [ 480.061790][ T5835] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 480.061790][ T5835] [ 480.388270][ T8437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.406583][ T8437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.516528][ T8437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 480.801216][ T5899] usb 3-1: device descriptor read/all, error -71 [ 481.240750][ T8437] hsr_slave_0: entered promiscuous mode [ 481.384234][ T8437] hsr_slave_1: entered promiscuous mode [ 481.458334][ T8437] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 481.466406][ T8437] Cannot create hsr debugfs directory [ 481.557830][ T5899] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 481.771612][ T5899] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 482.100440][ T5899] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 482.228080][ T5899] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 482.271637][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.587047][ T8621] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 484.001898][ T5899] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 484.458745][ T5899] usb 3-1: USB disconnect, device number 4 [ 484.913796][ T8487] chnl_net:caif_netlink_parms(): no params data found [ 484.927590][ T8640] netlink: 'syz.3.586': attribute type 1 has an invalid length. [ 485.749398][ T8487] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.770207][ T8487] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.778970][ T8487] bridge_slave_0: entered allmulticast mode [ 485.792892][ T8487] bridge_slave_0: entered promiscuous mode [ 485.812324][ T8487] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.820907][ T8487] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.829204][ T8487] bridge_slave_1: entered allmulticast mode [ 485.843822][ T8487] bridge_slave_1: entered promiscuous mode [ 487.933028][ T8487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 487.949027][ T8664] loop5: detected capacity change from 0 to 512 [ 488.038082][ T8664] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 488.088583][ T8666] loop3: detected capacity change from 0 to 512 [ 488.122642][ T8664] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 488.191834][ T8666] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 488.262321][ T8666] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 488.276901][ T8487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 488.297367][ T8664] EXT4-fs (loop5): 1 orphan inode deleted [ 488.326980][ T8664] EXT4-fs (loop5): 1 truncate cleaned up [ 488.333759][ T8666] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.594: Failed to acquire dquot type 1 [ 488.368521][ T8664] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 488.389277][ T8666] EXT4-fs (loop3): 1 truncate cleaned up [ 488.397433][ T8666] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 488.425861][ T8666] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 488.794159][ T8487] team0: Port device team_slave_0 added [ 488.814435][ T8487] team0: Port device team_slave_1 added [ 490.311582][ T5993] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 490.665790][ T8487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 490.672990][ T8487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.708579][ T8487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 490.732589][ T8487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 490.740493][ T8487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.766769][ T5993] usb 4-1: device descriptor read/64, error -71 [ 490.773399][ T8487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 490.842625][ T8437] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 490.910994][ T8437] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 491.018869][ T5833] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.028086][ T5993] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 491.040537][ T8437] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 491.165388][ T8487] hsr_slave_0: entered promiscuous mode [ 491.215432][ T5836] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.235198][ T8487] hsr_slave_1: entered promiscuous mode [ 491.273639][ T8487] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 491.281258][ T8487] Cannot create hsr debugfs directory [ 491.355194][ T8437] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 491.488627][ T3500] bridge_slave_1: left allmulticast mode [ 491.513892][ T3500] bridge_slave_1: left promiscuous mode [ 491.556533][ T3500] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.552602][ T3500] bridge_slave_0: left allmulticast mode [ 492.558307][ T3500] bridge_slave_0: left promiscuous mode [ 492.564266][ T3500] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.407854][ T8697] vivid-004: kernel_thread() failed [ 498.555568][ T8733] loop5: detected capacity change from 0 to 256 [ 500.725949][ T3500] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 500.934495][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.941085][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.051969][ T3500] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 501.112837][ T3500] bond0 (unregistering): Released all slaves [ 504.804963][ T3500] hsr_slave_0: left promiscuous mode [ 504.837127][ T3500] hsr_slave_1: left promiscuous mode [ 504.935302][ T3500] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 504.954601][ T3500] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 507.803319][ T8786] loop5: detected capacity change from 0 to 256 [ 510.274052][ T3500] team0 (unregistering): Port device team_slave_1 removed [ 510.460781][ T3500] team0 (unregistering): Port device team_slave_0 removed [ 511.330524][ T8806] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 514.450638][ T5841] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 514.466080][ T5841] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 514.476202][ T5841] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 514.500494][ T5841] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 514.513033][ T5841] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 514.523996][ T5841] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 516.528352][ T5845] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 516.789650][ T5845] Bluetooth: hci6: command tx timeout [ 516.810211][ T5850] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 517.342521][ T5850] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 517.366998][ T5850] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 517.374915][ T5850] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 517.382626][ T5850] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 518.075459][ T8825] chnl_net:caif_netlink_parms(): no params data found [ 518.855232][ T8855] loop4: detected capacity change from 0 to 256 [ 519.371636][ T5841] Bluetooth: hci6: command tx timeout [ 519.528462][ T5841] Bluetooth: hci7: command tx timeout [ 520.132005][ T8859] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 521.480800][ T5841] Bluetooth: hci6: command tx timeout [ 521.651520][ T5841] Bluetooth: hci7: command tx timeout [ 523.504531][ T5841] Bluetooth: hci6: command tx timeout [ 523.781471][ T5841] Bluetooth: hci7: command tx timeout [ 523.942658][ T8825] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.950056][ T8825] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.979854][ T8825] bridge_slave_0: entered allmulticast mode [ 524.162874][ T8825] bridge_slave_0: entered promiscuous mode [ 524.810580][ T8825] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.823539][ T8825] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.841556][ T8825] bridge_slave_1: entered allmulticast mode [ 524.848598][ T8825] bridge_slave_1: entered promiscuous mode [ 525.565367][ T8908] loop4: detected capacity change from 0 to 256 [ 525.985206][ T5841] Bluetooth: hci7: command tx timeout [ 526.148275][ T8836] chnl_net:caif_netlink_parms(): no params data found [ 526.206216][ T8825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 526.347716][ T8825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 526.629809][ T8911] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 527.016143][ T8825] team0: Port device team_slave_0 added [ 527.895198][ T8825] team0: Port device team_slave_1 added [ 530.931505][ T5850] Bluetooth: hci7: command 0x0405 tx timeout [ 532.761778][ T8836] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.769011][ T8836] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.840132][ T8836] bridge_slave_0: entered allmulticast mode [ 532.862559][ T8836] bridge_slave_0: entered promiscuous mode [ 532.874611][ T8836] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.901429][ T8836] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.933830][ T8836] bridge_slave_1: entered allmulticast mode [ 532.962114][ T8836] bridge_slave_1: entered promiscuous mode [ 533.013836][ T8825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 533.031412][ T8825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 533.079845][ T8825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 533.092482][ T8825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 533.099463][ T8825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 533.126044][ T8825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 533.251064][ T8825] hsr_slave_0: entered promiscuous mode [ 533.282343][ T8825] hsr_slave_1: entered promiscuous mode [ 533.392640][ T8825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 533.419240][ T8825] Cannot create hsr debugfs directory [ 534.378056][ T8947] loop3: detected capacity change from 0 to 32768 [ 536.234767][ T8836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 536.976935][ T8836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 537.436485][ T8836] team0: Port device team_slave_0 added [ 538.091580][ T5845] Bluetooth: hci7: command 0x0405 tx timeout [ 539.260580][ T8836] team0: Port device team_slave_1 added [ 539.586246][ T8836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 539.597255][ T8836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 540.302084][ T8836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 540.619018][ T8836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 541.169000][ T8836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 541.195209][ T8836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 541.879560][ T3500] bridge_slave_1: left allmulticast mode [ 541.947556][ T3500] bridge_slave_1: left promiscuous mode [ 542.001014][ T3500] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.260709][ T3500] bridge_slave_0: left allmulticast mode [ 542.411471][ T3500] bridge_slave_0: left promiscuous mode [ 542.417289][ T3500] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.588551][ T3500] bridge_slave_1: left allmulticast mode [ 542.612690][ T3500] bridge_slave_1: left promiscuous mode [ 542.655120][ T3500] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.714245][ T3500] bridge_slave_0: left allmulticast mode [ 542.742842][ T3500] bridge_slave_0: left promiscuous mode [ 542.769845][ T3500] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.281197][ T5850] Bluetooth: hci7: command 0x0405 tx timeout [ 547.131976][ T3500] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 547.336307][ T3500] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 547.500926][ T3500] bond0 (unregistering): Released all slaves [ 547.913331][ T3500] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 548.147843][ T3500] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 548.654875][ T3500] bond0 (unregistering): Released all slaves [ 550.376670][ T8836] hsr_slave_0: entered promiscuous mode [ 550.678771][ T8836] hsr_slave_1: entered promiscuous mode [ 550.771631][ T8836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 550.831234][ T8836] Cannot create hsr debugfs directory [ 552.911188][ T3500] hsr_slave_0: left promiscuous mode [ 552.917645][ T3500] hsr_slave_1: left promiscuous mode [ 552.935339][ T3500] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 552.967253][ T3500] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 553.013957][ T3500] hsr_slave_0: left promiscuous mode [ 553.534234][ T3500] hsr_slave_1: left promiscuous mode [ 553.713129][ T3500] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 553.778238][ T3500] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 554.061670][ T5850] Bluetooth: hci7: command 0x0405 tx timeout [ 561.761044][ T9105] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 561.962874][ T3500] team0 (unregistering): Port device team_slave_1 removed [ 562.002626][ T3500] team0 (unregistering): Port device team_slave_0 removed [ 562.432858][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.439245][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.623355][ T3500] team0 (unregistering): Port device team_slave_1 removed [ 566.635218][ T3500] team0 (unregistering): Port device team_slave_0 removed [ 570.690840][ T8825] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 570.863056][ T8825] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 570.898985][ T8825] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 570.997029][ T8825] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 574.449625][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 574.459878][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 574.469432][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 574.479973][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 574.492239][ T5841] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 574.501285][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 575.029120][ T8836] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 575.108736][ T8836] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 575.228462][ T8836] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 576.015131][ T8836] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 576.611906][ T5841] Bluetooth: hci0: command tx timeout [ 578.088423][ T9183] chnl_net:caif_netlink_parms(): no params data found [ 579.422084][ T5850] Bluetooth: hci0: command tx timeout [ 581.093063][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 581.103256][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 581.112779][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 581.121151][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 581.134188][ T5845] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 581.143362][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 581.500603][ T5850] Bluetooth: hci0: command 0x040f tx timeout [ 582.099021][ T9183] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.106500][ T9183] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.113774][ T9183] bridge_slave_0: entered allmulticast mode [ 582.120831][ T9183] bridge_slave_0: entered promiscuous mode [ 582.128731][ T9183] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.136189][ T9183] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.143546][ T9183] bridge_slave_1: entered allmulticast mode [ 582.150661][ T9183] bridge_slave_1: entered promiscuous mode [ 582.764510][ T9183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 582.886982][ T9183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 583.252179][ T5841] Bluetooth: hci1: command tx timeout [ 583.552637][ T6108] bridge_slave_1: left allmulticast mode [ 583.558348][ T6108] bridge_slave_1: left promiscuous mode [ 583.574183][ T5841] Bluetooth: hci0: command 0x040f tx timeout [ 583.651844][ T6108] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.689521][ T6108] bridge_slave_0: left allmulticast mode [ 583.695895][ T6108] bridge_slave_0: left promiscuous mode [ 583.709998][ T6108] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.376347][ T5841] Bluetooth: hci1: command tx timeout [ 585.416565][ T6108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 585.752175][ T5841] Bluetooth: hci0: command 0x040f tx timeout [ 586.581172][ T6108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 586.605429][ T6108] bond0 (unregistering): Released all slaves [ 586.933850][ T9183] team0: Port device team_slave_0 added [ 587.433228][ T5841] Bluetooth: hci1: command tx timeout [ 587.862578][ T9183] team0: Port device team_slave_1 added [ 588.182682][ T6108] hsr_slave_0: left promiscuous mode [ 588.188879][ T6108] hsr_slave_1: left promiscuous mode [ 588.196761][ T6108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 588.235714][ T6108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 589.502008][ T5841] Bluetooth: hci1: command 0x0419 tx timeout [ 589.800806][ T6108] team0 (unregistering): Port device team_slave_1 removed [ 589.880441][ T6108] team0 (unregistering): Port device team_slave_0 removed [ 591.690408][ T5850] Bluetooth: hci1: command 0x0419 tx timeout [ 592.731949][ T9183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 592.744155][ T9183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 592.851987][ T9183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 592.865378][ T9183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 592.873708][ T9183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 592.900400][ T9183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 592.939408][ T9244] chnl_net:caif_netlink_parms(): no params data found [ 595.135376][ T9183] hsr_slave_0: entered promiscuous mode [ 595.188907][ T9183] hsr_slave_1: entered promiscuous mode [ 595.280603][ T9183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 595.309723][ T9183] Cannot create hsr debugfs directory [ 595.491594][ T9244] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.498740][ T9244] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.512392][ T9244] bridge_slave_0: entered allmulticast mode [ 595.539912][ T9244] bridge_slave_0: entered promiscuous mode [ 596.853463][ T9244] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.860681][ T9244] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.881558][ T9244] bridge_slave_1: entered allmulticast mode [ 596.888972][ T9244] bridge_slave_1: entered promiscuous mode [ 597.061187][ T5841] Bluetooth: hci1: command 0x0419 tx timeout [ 597.645198][ T9244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 597.664224][ T9244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 597.899407][ T9244] team0: Port device team_slave_0 added [ 597.934814][ T9244] team0: Port device team_slave_1 added [ 599.560146][ T9244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 599.610336][ T9244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 599.873968][ T9244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 600.212298][ T9244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 600.271592][ T9244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 600.413330][ T9244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 600.722856][ T9244] hsr_slave_0: entered promiscuous mode [ 600.783427][ T9244] hsr_slave_1: entered promiscuous mode [ 600.798330][ T9244] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 600.830055][ T9244] Cannot create hsr debugfs directory [ 601.912022][ T9183] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 602.267537][ T9183] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 603.019519][ T9183] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 603.163199][ T9183] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 603.529482][ T6108] bridge_slave_1: left allmulticast mode [ 603.558545][ T6108] bridge_slave_1: left promiscuous mode [ 603.591945][ T6108] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.643013][ T6108] bridge_slave_0: left allmulticast mode [ 603.675111][ T6108] bridge_slave_0: left promiscuous mode [ 603.732213][ T6108] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.423763][ T6108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 604.732627][ T6108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 605.014835][ T6108] bond0 (unregistering): Released all slaves [ 606.840022][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 606.851740][ T0] NOHZ tick-stop error: local softirq work is pending, handler #340!!! [ 606.860159][ T0] NOHZ tick-stop error: local softirq work is pending, handler #340!!! [ 606.869437][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 606.878496][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 606.887695][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 608.490339][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 608.592453][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 608.600807][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 608.881584][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 609.595332][ T6108] hsr_slave_0: left promiscuous mode [ 609.731833][ T6108] hsr_slave_1: left promiscuous mode [ 609.968542][ T6108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 609.980998][ T6108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 610.111463][ T9506] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 611.528789][ T6108] team0 (unregistering): Port device team_slave_1 removed [ 611.602763][ T6108] team0 (unregistering): Port device team_slave_0 removed [ 612.053882][ T9183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 612.080615][ T9183] 8021q: adding VLAN 0 to HW filter on device team0 [ 612.146961][ T6993] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.154137][ T6993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 612.177622][ T6993] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.184780][ T6993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 612.676119][ T9244] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 613.295467][ T9244] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 614.093398][ T9244] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 614.668883][ T9244] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 616.225765][ T9244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 616.327403][ T9244] 8021q: adding VLAN 0 to HW filter on device team0 [ 616.383520][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.390694][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 616.493406][ T3425] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.500607][ T3425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 616.583134][ T9244] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 616.616255][ T9244] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 616.677897][ T9183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 616.987326][ T9565] loop5: detected capacity change from 0 to 1024 [ 619.073376][ T9244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 620.205005][ T9183] veth0_vlan: entered promiscuous mode [ 620.344985][ T9183] veth1_vlan: entered promiscuous mode [ 620.696229][ T9183] veth0_macvtap: entered promiscuous mode [ 620.707319][ T9183] veth1_macvtap: entered promiscuous mode [ 620.721907][ T9183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 620.732386][ T9183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.742340][ T9183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 620.752820][ T9183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.762689][ T9183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 620.773186][ T9183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.783574][ T9183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 620.794718][ T9183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.806222][ T9183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 620.826035][ T9183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 620.845547][ T9183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.872599][ T9183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 620.888522][ T9183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.921617][ T9183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 620.951484][ T9183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.963314][ T9183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.025662][ T9183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.132948][ T9183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 621.486010][ T9610] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 623.013739][ T9183] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.094365][ T9183] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.156845][ T9183] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.251583][ T9183] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.842786][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.850595][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.790774][ T9244] veth0_vlan: entered promiscuous mode [ 624.877108][ T9244] veth1_vlan: entered promiscuous mode [ 625.108081][ T6109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.116134][ T6109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.124764][ T6109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.137923][ T6109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.018357][ T9244] veth0_macvtap: entered promiscuous mode [ 626.450945][ T9244] veth1_macvtap: entered promiscuous mode [ 627.087137][ T9244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.097802][ T9244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.107764][ T9244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.118278][ T9244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.128720][ T9244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.153091][ T9244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.163395][ T9244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.174527][ T9244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.184618][ T9244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.195143][ T9244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.206371][ T9244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 627.353690][ T9244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.374844][ T9244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.459946][ T9244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.470948][ T9244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.480903][ T9244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.491501][ T9244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.645384][ T9642] loop4: detected capacity change from 0 to 1024 [ 628.217492][ T9244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 628.284891][ T9244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.421621][ T9244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 628.435706][ T9244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.465536][ T9244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 628.563981][ T9244] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.753922][ T9244] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.973343][ T9244] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.211554][ T9244] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.515572][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.557840][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.586998][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 631.596453][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 631.872670][ T9677] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 636.878663][ T9710] loop2: detected capacity change from 0 to 4096 [ 636.933567][ T9710] ntfs3: Unknown parameter ' ' [ 637.750668][ T9715] loop4: detected capacity change from 0 to 1024 [ 648.983507][ T9798] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 649.591565][ T9780] vivid-003: kernel_thread() failed [ 651.375014][ T9807] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 661.647061][ T9879] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 670.639001][ T9959] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 670.648732][ T9959] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 670.657551][ T9959] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 670.666372][ T9959] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 670.675222][ T9959] vxlan0: entered promiscuous mode [ 670.680809][ T9959] vxlan0: entered allmulticast mode [ 670.832806][ T9959] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 670.841873][ T9959] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 670.850774][ T9959] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 670.860554][ T9959] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 675.170858][ T9992] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 679.399009][ T5900] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 679.626658][ T5900] usb 6-1: config 0 has an invalid interface number: 84 but max is 0 [ 680.216672][ T5900] usb 6-1: config 0 has an invalid interface number: 66 but max is 0 [ 680.226740][ T5900] usb 6-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 680.236068][ T5900] usb 6-1: config 0 has no interface number 0 [ 680.242381][ T5900] usb 6-1: config 0 has no interface number 1 [ 680.259504][ T5900] usb 6-1: config 0 interface 84 altsetting 0 endpoint 0x4 has invalid maxpacket 1560, setting to 64 [ 680.270727][ T5900] usb 6-1: config 0 interface 84 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 680.284267][ T5900] usb 6-1: too many endpoints for config 0 interface 66 altsetting 153: 216, using maximum allowed: 30 [ 680.296659][ T5900] usb 6-1: config 0 interface 66 altsetting 153 bulk endpoint 0x5 has invalid maxpacket 32 [ 680.307048][ T5900] usb 6-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0x12, changing to 0x2 [ 680.319079][ T5900] usb 6-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 680.331067][ T5900] usb 6-1: config 0 interface 66 altsetting 153 endpoint 0x86 has invalid maxpacket 34869, setting to 1024 [ 680.342636][ T5900] usb 6-1: config 0 interface 66 altsetting 153 bulk endpoint 0x86 has invalid maxpacket 1024 [ 680.353131][ T5900] usb 6-1: config 0 interface 66 altsetting 153 has 3 endpoint descriptors, different from the interface descriptor's value: 216 [ 680.366663][ T5900] usb 6-1: config 0 interface 66 has no altsetting 0 [ 681.188943][ T5900] usb 6-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3 [ 681.202328][ T5900] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.210352][ T5900] usb 6-1: Product: syz [ 681.258207][ T5900] usb 6-1: Manufacturer: syz [ 681.263091][ T5900] usb 6-1: SerialNumber: syz [ 681.270235][ T5900] usb 6-1: config 0 descriptor?? [ 681.385650][ T5900] ljca 6-1:0.84: bulk endpoints not found [ 683.242209][ T5900] ljca 6-1:0.66: probe with driver ljca failed with error -71 [ 683.271130][ T5900] usb 6-1: USB disconnect, device number 2 [ 684.002058][T10059] loop6: detected capacity change from 0 to 32768 [ 684.311970][T10059] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.893 (10059) [ 684.627053][T10059] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 684.655609][T10059] BTRFS info (device loop6): using sha256 (sha256-ni) checksum algorithm [ 685.373465][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.379835][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.622375][T10083] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 687.399896][T10059] BTRFS error (device loop6): open_ctree failed [ 689.208450][T10119] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 695.068014][T10163] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 695.983841][T10164] vivid-003: kernel_thread() failed [ 698.812854][T10181] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 699.480051][ T5841] Bluetooth: hci0: command 0x040f tx timeout [ 707.559946][T10255] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 707.784317][T10254] loop5: detected capacity change from 0 to 256 [ 709.242647][ T5845] Bluetooth: hci1: command 0x0419 tx timeout [ 714.529538][ T5845] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 714.736468][T10312] loop6: detected capacity change from 0 to 1024 [ 715.601542][ T5845] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 715.765436][ T5845] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 715.784555][ T5845] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 715.798381][ T5845] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 715.813320][ T5845] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 718.171621][ T5850] Bluetooth: hci6: command tx timeout [ 720.330752][ T5850] Bluetooth: hci6: command tx timeout [ 723.095146][ T5845] Bluetooth: hci6: command tx timeout [ 725.461431][ T5845] Bluetooth: hci6: command tx timeout [ 725.725853][T10296] chnl_net:caif_netlink_parms(): no params data found [ 733.599184][ T5850] Bluetooth: hci6: command 0x0405 tx timeout [ 733.692849][T10296] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.700122][T10296] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.851763][T10296] bridge_slave_0: entered allmulticast mode [ 734.051787][T10296] bridge_slave_0: entered promiscuous mode [ 734.128078][T10296] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.172285][T10296] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.180857][T10296] bridge_slave_1: entered allmulticast mode [ 734.197611][T10296] bridge_slave_1: entered promiscuous mode [ 744.197276][ T3500] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.662169][T10296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 744.685813][T10296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 746.797509][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.803933][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.523417][T10535] loop3: detected capacity change from 0 to 1024 [ 748.064514][T10534] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 752.300584][ T3500] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.471385][ T5850] Bluetooth: hci6: command 0x0405 tx timeout [ 753.482757][T10296] team0: Port device team_slave_0 added [ 760.275822][ T3500] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.974116][T10612] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 761.793695][T10296] team0: Port device team_slave_1 added [ 762.027016][ T3500] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.934415][T10296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 763.955912][T10296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 764.001647][ T5850] Bluetooth: hci6: command 0x0405 tx timeout [ 764.250659][T10296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 766.055386][T10296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 766.067389][T10296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 766.677777][T10296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 770.621693][ T5850] Bluetooth: hci6: command 0x0405 tx timeout [ 771.176151][T10296] hsr_slave_0: entered promiscuous mode [ 771.794974][T10296] hsr_slave_1: entered promiscuous mode [ 771.903328][T10695] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 772.790322][T10296] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 772.802239][T10296] Cannot create hsr debugfs directory [ 776.001788][ T3500] bridge_slave_1: left allmulticast mode [ 776.008507][ T3500] bridge_slave_1: left promiscuous mode [ 776.015017][ T3500] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.238226][ T3500] bridge_slave_0: left allmulticast mode [ 776.293985][ T3500] bridge_slave_0: left promiscuous mode [ 777.053114][ T3500] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.313350][ T5841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 779.373324][ T5841] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 779.501111][ T5841] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 779.509524][ T5841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 779.517575][ T5841] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 779.524944][ T5841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 783.209500][ T5850] Bluetooth: hci5: command tx timeout [ 785.251576][ T5845] Bluetooth: hci5: command tx timeout [ 785.945163][ T3500] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 786.431863][ T3500] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 786.764000][T10813] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 787.050169][ T3500] bond0 (unregistering): Released all slaves [ 787.331950][ T5845] Bluetooth: hci5: command 0x040f tx timeout [ 787.564232][T10785] netlink: 93 bytes leftover after parsing attributes in process `syz.3.1048'. [ 789.433257][T10833] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 790.094899][ T5850] Bluetooth: hci5: command 0x040f tx timeout [ 793.351380][ T5850] Bluetooth: hci5: command 0x040f tx timeout [ 798.181525][ T5841] Bluetooth: hci5: command 0x040f tx timeout [ 800.283094][ T3500] hsr_slave_0: left promiscuous mode [ 800.338259][ T3500] hsr_slave_1: left promiscuous mode [ 800.351971][ T3500] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 800.359415][ T3500] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 800.422324][ T3500] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 800.430822][ T5841] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 800.445047][ T5841] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 800.493269][ T3500] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 800.503148][ T5841] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 800.511447][ T5841] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 800.519720][ T5841] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 800.527920][ T5841] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 800.715315][ T3500] veth1_macvtap: left promiscuous mode [ 800.720899][ T3500] veth0_macvtap: left promiscuous mode [ 800.750640][ T3500] veth1_vlan: left promiscuous mode [ 800.781602][ T3500] veth0_vlan: left promiscuous mode [ 802.974201][ T5841] Bluetooth: hci6: command tx timeout [ 805.110346][ T5841] Bluetooth: hci6: command tx timeout [ 805.479240][T10933] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 806.267976][ T3500] team0 (unregistering): Port device team_slave_1 removed [ 806.312799][ T3500] team0 (unregistering): Port device team_slave_0 removed [ 807.185151][ T5841] Bluetooth: hci6: command tx timeout [ 807.552822][T10729] chnl_net:caif_netlink_parms(): no params data found [ 808.192293][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.198783][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.905576][ T5841] Bluetooth: hci6: command tx timeout [ 813.340785][T10729] bridge0: port 1(bridge_slave_0) entered blocking state [ 813.838905][T10729] bridge0: port 1(bridge_slave_0) entered disabled state [ 813.941606][T10729] bridge_slave_0: entered allmulticast mode [ 813.948738][T10729] bridge_slave_0: entered promiscuous mode [ 814.179465][T10729] bridge0: port 2(bridge_slave_1) entered blocking state [ 814.216218][T10729] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.274728][T10729] bridge_slave_1: entered allmulticast mode [ 814.642665][T10729] bridge_slave_1: entered promiscuous mode [ 817.099660][T10729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 817.375768][T10999] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 818.395705][T10729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 819.357312][ T3500] IPVS: stop unused estimator thread 0... [ 820.652948][T10729] team0: Port device team_slave_0 added [ 820.660941][T10729] team0: Port device team_slave_1 added [ 823.311658][T10891] chnl_net:caif_netlink_parms(): no params data found [ 823.489579][T10729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 823.785284][ T5841] Bluetooth: hci6: command 0x0405 tx timeout [ 823.875389][T10729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 823.967050][T10729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 824.799331][ T3500] bridge_slave_1: left allmulticast mode [ 824.805781][ T3500] bridge_slave_1: left promiscuous mode [ 824.827665][ T3500] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.943749][ T3500] bridge_slave_0: left allmulticast mode [ 824.987384][ T3500] bridge_slave_0: left promiscuous mode [ 825.008191][ T3500] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.291064][ T3500] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 825.305507][ T3500] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 825.317065][ T3500] bond0 (unregistering): Released all slaves [ 825.390083][T10729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 825.506624][T10729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 826.231434][T10729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 826.503928][ T3500] hsr_slave_0: left promiscuous mode [ 826.510191][ T3500] hsr_slave_1: left promiscuous mode [ 826.546022][ T3500] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 826.620742][ T3500] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 829.557489][ T3500] team0 (unregistering): Port device team_slave_1 removed [ 829.641706][ T3500] team0 (unregistering): Port device team_slave_0 removed [ 831.827210][ T5841] Bluetooth: hci6: command 0x0405 tx timeout [ 836.993121][T10891] bridge0: port 1(bridge_slave_0) entered blocking state [ 837.051528][T10891] bridge0: port 1(bridge_slave_0) entered disabled state [ 837.249032][T10891] bridge_slave_0: entered allmulticast mode [ 837.435143][T10891] bridge_slave_0: entered promiscuous mode [ 837.610073][T10891] bridge0: port 2(bridge_slave_1) entered blocking state [ 837.786517][T10891] bridge0: port 2(bridge_slave_1) entered disabled state [ 837.797323][T10891] bridge_slave_1: entered allmulticast mode [ 837.804680][T10891] bridge_slave_1: entered promiscuous mode [ 838.067052][T10891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 838.144917][T10891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 838.362158][T10891] team0: Port device team_slave_0 added [ 838.396070][T10891] team0: Port device team_slave_1 added [ 838.707475][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 838.716773][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 838.733024][T10891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 838.743795][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 838.784434][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 838.791226][T10891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 838.824730][ T5850] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 838.839349][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 839.031523][T10891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 839.089562][T10891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 839.151613][T10891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 839.269474][T10891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 841.054193][ T5845] Bluetooth: hci0: command tx timeout [ 843.222780][T10891] hsr_slave_0: entered promiscuous mode [ 843.251737][ T5845] Bluetooth: hci0: command 0x041b tx timeout [ 843.259557][T10891] hsr_slave_1: entered promiscuous mode [ 843.276498][T10891] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 843.290801][T10891] Cannot create hsr debugfs directory [ 843.399685][ T3500] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.249184][ T3500] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.335506][ T5850] Bluetooth: hci0: command 0x041b tx timeout [ 846.962528][ T3500] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.411718][ T5850] Bluetooth: hci0: command 0x041b tx timeout [ 848.664006][ T3500] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.647796][ T5845] Bluetooth: hci0: command 0x041b tx timeout [ 851.654893][T11149] chnl_net:caif_netlink_parms(): no params data found [ 854.630381][T10891] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 854.665117][T10891] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 854.905761][ T3500] bridge_slave_1: left allmulticast mode [ 854.912231][ T3500] bridge_slave_1: left promiscuous mode [ 855.302066][ T3500] bridge0: port 2(bridge_slave_1) entered disabled state [ 856.472019][ T3500] bridge_slave_0: left allmulticast mode [ 856.477736][ T3500] bridge_slave_0: left promiscuous mode [ 856.531552][ T3500] bridge0: port 1(bridge_slave_0) entered disabled state [ 857.825217][ T3500] bridge_slave_1: left allmulticast mode [ 857.856419][ T3500] bridge_slave_1: left promiscuous mode [ 857.881656][ T3500] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.922125][ T3500] bridge_slave_0: left allmulticast mode [ 857.927831][ T3500] bridge_slave_0: left promiscuous mode [ 858.032120][ T3500] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.565154][ T5841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 862.673621][ T5841] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 862.708513][ T5841] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 862.944240][ T5850] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 862.952993][ T5850] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 862.961273][ T5850] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 863.328994][ T3500] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 863.342923][ T3500] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 864.373313][ T3500] bond0 (unregistering): Released all slaves [ 865.094319][ T5845] Bluetooth: hci5: command tx timeout [ 865.254949][ T3500] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 865.319649][ T3500] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 866.526136][ T3500] bond0 (unregistering): Released all slaves [ 866.656135][T10891] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 867.402880][ T5845] Bluetooth: hci5: command tx timeout [ 868.535522][T11149] bridge0: port 1(bridge_slave_0) entered blocking state [ 868.561605][T11149] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.587583][T11149] bridge_slave_0: entered allmulticast mode [ 868.639125][T11149] bridge_slave_0: entered promiscuous mode [ 869.110567][T11149] bridge0: port 2(bridge_slave_1) entered blocking state [ 869.133787][T11149] bridge0: port 2(bridge_slave_1) entered disabled state [ 869.166680][T11149] bridge_slave_1: entered allmulticast mode [ 869.197462][T11149] bridge_slave_1: entered promiscuous mode [ 869.422459][ T5850] Bluetooth: hci5: command tx timeout [ 869.575259][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.581921][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.605844][T11149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 869.764030][T11149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 871.660389][ T5850] Bluetooth: hci5: command 0x0419 tx timeout [ 872.634153][T11149] team0: Port device team_slave_0 added [ 873.831988][ T5850] Bluetooth: hci5: command 0x0419 tx timeout [ 874.373464][ T3500] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 876.404420][ T3500] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 877.370842][ T3500] hsr_slave_0: left promiscuous mode [ 877.380630][ T3500] hsr_slave_1: left promiscuous mode [ 877.405117][ T3500] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 877.414075][ T3500] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 877.665870][ T3500] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 877.760076][ T3500] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 878.340782][ T3500] veth1_macvtap: left promiscuous mode [ 878.509599][T11423] loop7: detected capacity change from 0 to 1024 [ 879.451809][ T3500] veth0_macvtap: left promiscuous mode [ 879.457945][ T3500] veth1_vlan: left promiscuous mode [ 879.511639][ T3500] veth0_vlan: left promiscuous mode [ 880.419645][T11432] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 883.316934][ T3500] team0 (unregistering): Port device team_slave_1 removed [ 883.356627][ T3500] team0 (unregistering): Port device team_slave_0 removed [ 884.095744][T11452] loop5: detected capacity change from 0 to 1024 [ 885.362264][T11455] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 892.710376][ T3500] team0 (unregistering): Port device team_slave_1 removed [ 892.807014][ T3500] team0 (unregistering): Port device team_slave_0 removed [ 898.443440][ T5850] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 898.485123][ T5850] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 898.493763][ T5850] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 898.512758][ T5850] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 898.520889][ T5850] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 898.528540][ T5850] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 900.038744][ T5845] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 900.060729][ T5845] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 900.070078][ T5845] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 900.088451][ T5845] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 900.101673][ T5845] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 900.111521][ T5845] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 900.611491][ T5845] Bluetooth: hci6: command tx timeout [ 900.746275][T11149] team0: Port device team_slave_1 added [ 902.311500][ T5845] Bluetooth: hci7: command tx timeout [ 902.876937][ T5850] Bluetooth: hci6: command tx timeout [ 903.894186][T11516] chnl_net:caif_netlink_parms(): no params data found [ 904.193058][T11300] chnl_net:caif_netlink_parms(): no params data found [ 904.380345][ T5850] Bluetooth: hci7: command tx timeout [ 905.144198][ T5850] Bluetooth: hci6: command tx timeout [ 906.609335][ T5850] Bluetooth: hci7: command tx timeout [ 907.019116][T11581] loop4: detected capacity change from 0 to 1024 [ 908.000571][ T5850] Bluetooth: hci6: command tx timeout [ 909.028119][ T5845] Bluetooth: hci7: command tx timeout [ 910.099296][T11300] bridge0: port 1(bridge_slave_0) entered blocking state [ 910.319749][T11300] bridge0: port 1(bridge_slave_0) entered disabled state [ 910.330629][T11300] bridge_slave_0: entered allmulticast mode [ 910.338635][T11300] bridge_slave_0: entered promiscuous mode [ 910.775824][T11300] bridge0: port 2(bridge_slave_1) entered blocking state [ 910.783261][T11300] bridge0: port 2(bridge_slave_1) entered disabled state [ 910.790505][T11300] bridge_slave_1: entered allmulticast mode [ 910.834217][T11300] bridge_slave_1: entered promiscuous mode [ 911.140328][T11516] bridge0: port 1(bridge_slave_0) entered blocking state [ 911.148108][T11516] bridge0: port 1(bridge_slave_0) entered disabled state [ 911.157086][T11516] bridge_slave_0: entered allmulticast mode [ 911.174080][T11516] bridge_slave_0: entered promiscuous mode [ 911.197178][T11516] bridge0: port 2(bridge_slave_1) entered blocking state [ 911.204961][T11516] bridge0: port 2(bridge_slave_1) entered disabled state [ 911.213284][T11516] bridge_slave_1: entered allmulticast mode [ 911.229162][T11516] bridge_slave_1: entered promiscuous mode [ 911.485017][T11300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 912.165144][T11516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 913.039858][T11300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 913.301769][T11526] chnl_net:caif_netlink_parms(): no params data found [ 913.354162][T11516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 914.067207][T11300] team0: Port device team_slave_0 added [ 914.122528][T11300] team0: Port device team_slave_1 added [ 914.188969][T11516] team0: Port device team_slave_0 added [ 914.232910][T11516] team0: Port device team_slave_1 added [ 914.546693][T11516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 914.577615][T11516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 914.691889][T11516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 915.374780][T11300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 915.485621][T11300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 915.609685][T11300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 916.017930][T11516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 916.128561][T11516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 916.421515][T11516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 916.525654][T11300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 916.559849][T11300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 916.711476][T11300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 917.393533][T11516] hsr_slave_0: entered promiscuous mode [ 917.976255][T11516] hsr_slave_1: entered promiscuous mode [ 918.027640][T11516] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 918.066401][T11516] Cannot create hsr debugfs directory [ 918.525239][ T3500] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.656375][T11526] bridge0: port 1(bridge_slave_0) entered blocking state [ 918.676360][T11526] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.737529][T11526] bridge_slave_0: entered allmulticast mode [ 918.762976][T11526] bridge_slave_0: entered promiscuous mode [ 918.833565][T11526] bridge0: port 2(bridge_slave_1) entered blocking state [ 918.840883][T11526] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.890448][T11526] bridge_slave_1: entered allmulticast mode [ 918.912580][T11526] bridge_slave_1: entered promiscuous mode [ 918.989350][T11300] hsr_slave_0: entered promiscuous mode [ 919.030472][T11300] hsr_slave_1: entered promiscuous mode [ 919.141610][T11300] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 919.149254][T11300] Cannot create hsr debugfs directory [ 919.289274][ T3500] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.379439][ T3500] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.810030][T11526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 920.847952][T11526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 921.115408][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 921.254384][ T3500] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.271405][ T5841] Bluetooth: hci7: command 0x0405 tx timeout [ 921.282424][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 921.311621][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 921.385346][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 921.437872][ T5841] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 921.451492][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 921.828166][T11710] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 922.728083][T11526] team0: Port device team_slave_0 added [ 922.963386][T11526] team0: Port device team_slave_1 added [ 923.441165][T11526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 923.458802][T11526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 923.511442][T11526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 923.571535][ T5850] Bluetooth: hci0: command tx timeout [ 923.590849][T11526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 923.606839][T11526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 923.633019][T11526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 923.968164][T11526] hsr_slave_0: entered promiscuous mode [ 924.087421][T11526] hsr_slave_1: entered promiscuous mode [ 924.220870][T11721] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 925.140746][T11526] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 925.148547][T11526] Cannot create hsr debugfs directory [ 925.521962][T11516] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 925.534358][T11516] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 925.745501][ T5850] Bluetooth: hci0: command tx timeout [ 926.506660][T11516] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 928.140164][ T5850] Bluetooth: hci0: command tx timeout [ 928.858184][T11743] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 929.192284][T11516] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 929.360879][T11695] chnl_net:caif_netlink_parms(): no params data found [ 930.212412][ T5850] Bluetooth: hci0: command tx timeout [ 930.263557][T11695] bridge0: port 1(bridge_slave_0) entered blocking state [ 930.270966][T11695] bridge0: port 1(bridge_slave_0) entered disabled state [ 930.311755][T11695] bridge_slave_0: entered allmulticast mode [ 930.318988][T11695] bridge_slave_0: entered promiscuous mode [ 930.363984][T11695] bridge0: port 2(bridge_slave_1) entered blocking state [ 930.371123][T11695] bridge0: port 2(bridge_slave_1) entered disabled state [ 930.412078][T11695] bridge_slave_1: entered allmulticast mode [ 930.431099][T11695] bridge_slave_1: entered promiscuous mode [ 931.014486][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.029013][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.224941][T11695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 933.295122][T11695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 933.316309][ T3500] bridge_slave_1: left allmulticast mode [ 933.322827][ T3500] bridge_slave_1: left promiscuous mode [ 934.053209][ T3500] bridge0: port 2(bridge_slave_1) entered disabled state [ 934.334717][ T3500] bridge_slave_0: left allmulticast mode [ 934.350678][ T3500] bridge_slave_0: left promiscuous mode [ 934.371217][ T3500] bridge0: port 1(bridge_slave_0) entered disabled state [ 934.461669][T11775] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 934.752991][ T3500] bridge_slave_1: left allmulticast mode [ 934.763000][ T3500] bridge_slave_1: left promiscuous mode [ 934.768802][ T3500] bridge0: port 2(bridge_slave_1) entered disabled state [ 934.784919][ T3500] bridge_slave_0: left allmulticast mode [ 934.794487][ T3500] bridge_slave_0: left promiscuous mode [ 934.801594][ T3500] bridge0: port 1(bridge_slave_0) entered disabled state [ 935.110674][ T3500] bridge_slave_1: left allmulticast mode [ 935.130206][ T3500] bridge_slave_1: left promiscuous mode [ 935.402521][ T3500] bridge0: port 2(bridge_slave_1) entered disabled state [ 935.431120][ T3500] bridge_slave_0: left allmulticast mode [ 935.652274][ T3500] bridge_slave_0: left promiscuous mode [ 935.772883][ T3500] bridge0: port 1(bridge_slave_0) entered disabled state [ 939.542067][ T3500] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 939.570674][ T3500] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 939.706686][ T3500] bond0 (unregistering): Released all slaves [ 939.972358][ T5845] Bluetooth: hci0: command 0x0405 tx timeout [ 940.563192][ T3500] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 940.596932][ T3500] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 940.643453][ T3500] bond0 (unregistering): Released all slaves [ 940.704333][ T3500] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 940.974947][ T3500] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 941.063641][ T3500] bond0 (unregistering): Released all slaves [ 941.582390][T11516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 944.789879][T11695] team0: Port device team_slave_0 added [ 949.662108][T11695] team0: Port device team_slave_1 added [ 951.982987][T11873] loop5: detected capacity change from 0 to 1024 [ 952.646990][T11874] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 953.219449][T11516] 8021q: adding VLAN 0 to HW filter on device team0 [ 953.563323][T11695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 953.570334][T11695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 953.700323][T11695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 953.714160][T11695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 953.721261][T11695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 953.758663][T11695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 953.955028][ T3500] hsr_slave_0: left promiscuous mode [ 953.969602][ T3500] hsr_slave_1: left promiscuous mode [ 953.997756][ T3500] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 954.010825][ T3500] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 954.056065][ T3500] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 954.064394][ T3500] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 954.091267][ T3500] hsr_slave_0: left promiscuous mode [ 955.352935][ T3500] hsr_slave_1: left promiscuous mode [ 955.376658][ T3500] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 955.395937][ T3500] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 956.488323][ T3500] veth1_macvtap: left promiscuous mode [ 956.494417][ T3500] veth0_macvtap: left promiscuous mode [ 956.500247][ T3500] veth1_vlan: left promiscuous mode [ 956.507067][ T3500] veth0_vlan: left promiscuous mode [ 956.696930][ T3500] team0 (unregistering): Port device team_slave_1 removed [ 956.718290][ T3500] team0 (unregistering): Port device team_slave_0 removed [ 959.668696][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 959.677267][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 959.684984][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 959.693122][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 959.701123][ T5845] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 959.708439][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 960.229225][T11918] loop5: detected capacity change from 0 to 1024 [ 961.811447][ T5845] Bluetooth: hci1: command tx timeout [ 961.924476][ T5850] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 961.933386][ T5850] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 961.941104][ T5850] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 961.950393][ T5850] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 962.065458][ T5850] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 962.073228][ T5850] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 962.552107][T11930] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 963.911734][ T5850] Bluetooth: hci1: command tx timeout [ 963.951742][ T3500] team0 (unregistering): Port device team_slave_1 removed [ 964.133686][ T5850] Bluetooth: hci5: command tx timeout [ 964.632941][ T3500] team0 (unregistering): Port device team_slave_0 removed [ 965.981534][ T5850] Bluetooth: hci1: command tx timeout [ 966.225346][ T5850] Bluetooth: hci5: command tx timeout [ 967.492495][ T3500] team0 (unregistering): Port device team_slave_1 removed [ 967.553106][ T3500] team0 (unregistering): Port device team_slave_0 removed [ 967.977505][T11695] hsr_slave_0: entered promiscuous mode [ 968.051490][ T5845] Bluetooth: hci1: command tx timeout [ 968.065854][T11695] hsr_slave_1: entered promiscuous mode [ 968.078468][T11695] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 968.091040][T11695] Cannot create hsr debugfs directory [ 968.291442][ T5845] Bluetooth: hci5: command tx timeout [ 970.107509][T11970] loop3: detected capacity change from 0 to 1024 [ 970.751445][ T5845] Bluetooth: hci5: command 0x0419 tx timeout [ 972.148983][T11975] loop4: detected capacity change from 0 to 1024 [ 972.771449][ T5850] Bluetooth: hci5: command 0x0419 tx timeout [ 974.469839][T11990] loop4: detected capacity change from 0 to 1024 [ 975.811559][T11992] loop3: detected capacity change from 0 to 1024 [ 978.135281][T12014] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 979.536256][T11922] chnl_net:caif_netlink_parms(): no params data found [ 979.790282][ T5845] Bluetooth: hci5: command 0x0419 tx timeout [ 984.362331][T11908] chnl_net:caif_netlink_parms(): no params data found [ 984.460872][T11922] bridge0: port 1(bridge_slave_0) entered blocking state [ 984.491560][T11922] bridge0: port 1(bridge_slave_0) entered disabled state [ 984.509839][T11922] bridge_slave_0: entered allmulticast mode [ 984.520870][T11922] bridge_slave_0: entered promiscuous mode [ 984.709848][T11922] bridge0: port 2(bridge_slave_1) entered blocking state [ 985.115808][T11922] bridge0: port 2(bridge_slave_1) entered disabled state [ 985.188071][T11922] bridge_slave_1: entered allmulticast mode [ 985.247957][T11922] bridge_slave_1: entered promiscuous mode [ 986.200193][T12065] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 986.758149][ T5845] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 986.777117][ T5845] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 986.785387][ T5845] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 986.793921][ T5845] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 986.806663][ T5845] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 986.816693][ T5845] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 987.509145][T12077] loop3: detected capacity change from 0 to 1024 [ 988.868110][ T5845] Bluetooth: hci6: command tx timeout [ 989.275408][T11922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 990.972904][ T5845] Bluetooth: hci6: command 0x041b tx timeout [ 991.768226][T11922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 991.829408][T11908] bridge0: port 1(bridge_slave_0) entered blocking state [ 991.865412][T11908] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.896716][T11908] bridge_slave_0: entered allmulticast mode [ 991.935810][T11908] bridge_slave_0: entered promiscuous mode [ 992.023195][T11908] bridge0: port 2(bridge_slave_1) entered blocking state [ 992.050815][T11908] bridge0: port 2(bridge_slave_1) entered disabled state [ 992.093211][T11908] bridge_slave_1: entered allmulticast mode [ 992.121569][T11908] bridge_slave_1: entered promiscuous mode [ 992.290084][T11922] team0: Port device team_slave_0 added [ 992.551848][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.558202][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.649857][T11908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 992.665794][T11922] team0: Port device team_slave_1 added [ 992.831251][T11908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 993.013854][ T5845] Bluetooth: hci6: command 0x041b tx timeout [ 993.098505][T11922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 993.108332][T11922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 993.171377][T11922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 993.193396][T11922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 993.200372][T11922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 993.230577][T11922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 993.873387][T11908] team0: Port device team_slave_0 added [ 993.891677][T11908] team0: Port device team_slave_1 added [ 995.111594][ T5845] Bluetooth: hci6: command 0x041b tx timeout [ 995.688931][T11922] hsr_slave_0: entered promiscuous mode [ 995.737678][T11922] hsr_slave_1: entered promiscuous mode [ 995.749635][T11922] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 995.766379][T11922] Cannot create hsr debugfs directory [ 996.027504][T11908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 996.612170][T11908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 996.668696][T11908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 996.680396][T12122] loop4: detected capacity change from 0 to 256 [ 996.738847][T11908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 996.790878][T11908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 996.904733][T11908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 997.247167][ T5850] Bluetooth: hci6: command 0x041b tx timeout [ 1000.159733][ T5845] Bluetooth: hci6: command 0x041b tx timeout [ 1000.672643][T11908] hsr_slave_0: entered promiscuous mode [ 1000.703522][T11908] hsr_slave_1: entered promiscuous mode [ 1000.742478][T11908] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1000.770498][T11908] Cannot create hsr debugfs directory [ 1000.838880][T12071] chnl_net:caif_netlink_parms(): no params data found [ 1002.252993][ T5845] Bluetooth: hci6: command 0x041b tx timeout [ 1003.395423][T12167] loop3: detected capacity change from 0 to 256 [ 1004.983421][T12174] loop5: detected capacity change from 0 to 1024 [ 1007.254931][T12182] loop4: detected capacity change from 0 to 1024 [ 1008.192893][T12071] bridge0: port 1(bridge_slave_0) entered blocking state [ 1008.775588][T12071] bridge0: port 1(bridge_slave_0) entered disabled state [ 1008.783058][T12071] bridge_slave_0: entered allmulticast mode [ 1008.793919][T12071] bridge_slave_0: entered promiscuous mode [ 1009.164549][T12071] bridge0: port 2(bridge_slave_1) entered blocking state [ 1009.172554][T12071] bridge0: port 2(bridge_slave_1) entered disabled state [ 1009.190262][T12071] bridge_slave_1: entered allmulticast mode [ 1009.271740][T12071] bridge_slave_1: entered promiscuous mode [ 1010.589377][T12071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1010.694746][T12071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1010.795362][T12071] team0: Port device team_slave_0 added [ 1010.859256][T12071] team0: Port device team_slave_1 added [ 1010.920654][ T3500] bridge_slave_1: left allmulticast mode [ 1010.947871][ T3500] bridge_slave_1: left promiscuous mode [ 1010.972929][ T3500] bridge0: port 2(bridge_slave_1) entered disabled state [ 1011.001939][ T3500] bridge_slave_0: left allmulticast mode [ 1011.007629][ T3500] bridge_slave_0: left promiscuous mode [ 1011.030449][ T3500] bridge0: port 1(bridge_slave_0) entered disabled state [ 1011.054006][ T3500] bridge_slave_1: left allmulticast mode [ 1011.061569][ T3500] bridge_slave_1: left promiscuous mode [ 1011.067287][ T3500] bridge0: port 2(bridge_slave_1) entered disabled state [ 1011.089902][ T3500] bridge_slave_0: left allmulticast mode [ 1011.358132][ T3500] bridge_slave_0: left promiscuous mode [ 1011.367070][ T3500] bridge0: port 1(bridge_slave_0) entered disabled state [ 1011.901776][ T3500] bridge_slave_1: left allmulticast mode [ 1011.901818][T12203] loop5: detected capacity change from 0 to 1024 [ 1011.907468][ T3500] bridge_slave_1: left promiscuous mode [ 1012.361191][ T3500] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.399314][ T3500] bridge_slave_0: left allmulticast mode [ 1012.405324][ T3500] bridge_slave_0: left promiscuous mode [ 1012.411029][ T3500] bridge0: port 1(bridge_slave_0) entered disabled state [ 1012.467022][ T3500] bridge_slave_1: left allmulticast mode [ 1012.676666][ T3500] bridge_slave_1: left promiscuous mode [ 1012.898656][ T3500] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.952191][ T3500] bridge_slave_0: left allmulticast mode [ 1012.980906][ T3500] bridge_slave_0: left promiscuous mode [ 1013.001250][ T3500] bridge0: port 1(bridge_slave_0) entered disabled state [ 1014.901601][T12217] loop4: detected capacity change from 0 to 1024 [ 1015.592798][T12221] loop5: detected capacity change from 0 to 1024 [ 1018.119022][ T3500] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1018.254596][ T3500] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1018.285067][ T3500] bond0 (unregistering): Released all slaves [ 1018.460068][ T3500] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1018.532082][ T3500] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1018.639269][ T3500] bond0 (unregistering): Released all slaves [ 1020.354504][ T5841] Bluetooth: hci6: command 0x041b tx timeout [ 1021.998286][T12260] loop3: detected capacity change from 0 to 1024 [ 1023.872282][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1023.960715][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1024.433563][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1024.467376][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1024.539346][ T5841] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1024.548477][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1025.002710][ T5845] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1025.012513][ T5845] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1025.450510][ T5850] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1026.590712][ T3500] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1026.595128][ T5850] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1026.607662][ T5850] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1026.615391][ T5850] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1026.673545][ T3500] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1026.806336][ T3500] bond0 (unregistering): Released all slaves [ 1026.881593][ T5850] Bluetooth: hci0: command tx timeout [ 1026.901184][ T3500] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1026.926821][ T3500] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1026.948842][ T3500] bond0 (unregistering): Released all slaves [ 1028.474206][T12071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1028.541924][T12071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1028.672717][T12071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1028.781446][ T5841] Bluetooth: hci7: command tx timeout [ 1029.037567][ T5841] Bluetooth: hci0: command tx timeout [ 1029.433203][T12071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1029.440478][T12071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1029.599020][T12071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1030.456184][ T3500] hsr_slave_0: left promiscuous mode [ 1030.468197][ T3500] hsr_slave_1: left promiscuous mode [ 1030.475888][ T3500] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1030.496024][ T3500] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1030.592889][ T3500] hsr_slave_0: left promiscuous mode [ 1030.617545][ T3500] hsr_slave_1: left promiscuous mode [ 1030.638198][ T3500] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1030.668017][ T3500] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1030.806381][ T3500] hsr_slave_0: left promiscuous mode [ 1030.839370][ T3500] hsr_slave_1: left promiscuous mode [ 1030.856611][ T3500] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1030.865041][ T5841] Bluetooth: hci7: command 0x041b tx timeout [ 1030.878948][ T3500] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1030.956295][ T3500] hsr_slave_0: left promiscuous mode [ 1030.965256][ T3500] hsr_slave_1: left promiscuous mode [ 1030.989975][ T3500] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1031.101706][ T5850] Bluetooth: hci0: command tx timeout [ 1031.240630][ T3500] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1033.084400][ T5850] Bluetooth: hci7: command 0x041b tx timeout [ 1033.171643][ T5850] Bluetooth: hci0: command tx timeout [ 1033.462129][ T3500] team0 (unregistering): Port device team_slave_1 removed [ 1034.674876][ T3500] team0 (unregistering): Port device team_slave_0 removed [ 1035.102455][ T5850] Bluetooth: hci7: command 0x041b tx timeout [ 1036.702555][T12352] loop4: detected capacity change from 0 to 1024 [ 1037.189883][ T5850] Bluetooth: hci7: command 0x041b tx timeout [ 1038.375921][ T3500] team0 (unregistering): Port device team_slave_1 removed [ 1038.510641][ T3500] team0 (unregistering): Port device team_slave_0 removed [ 1041.579877][ T3500] team0 (unregistering): Port device team_slave_1 removed [ 1042.862981][ T5841] Bluetooth: hci7: command 0x041b tx timeout [ 1043.046753][ T3500] team0 (unregistering): Port device team_slave_0 removed [ 1043.419466][T12396] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1044.458965][ T5841] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1044.471486][ T5841] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1044.479320][ T5841] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1044.487712][ T5841] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1044.495678][ T5841] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1044.503440][ T5841] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1045.282129][ T3500] team0 (unregistering): Port device team_slave_1 removed [ 1045.380660][ T3500] team0 (unregistering): Port device team_slave_0 removed [ 1046.531443][ T5850] Bluetooth: hci8: command tx timeout [ 1048.612531][ T5850] Bluetooth: hci8: command tx timeout [ 1050.771747][ T5841] Bluetooth: hci8: command tx timeout [ 1052.217543][T12275] chnl_net:caif_netlink_parms(): no params data found [ 1053.530249][ T5845] Bluetooth: hci8: command 0x0419 tx timeout [ 1053.616035][T12398] chnl_net:caif_netlink_parms(): no params data found [ 1053.735902][T12268] chnl_net:caif_netlink_parms(): no params data found [ 1053.933651][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1053.940000][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.422738][T12465] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1054.955607][T12275] bridge0: port 1(bridge_slave_0) entered blocking state [ 1055.001718][T12275] bridge0: port 1(bridge_slave_0) entered disabled state [ 1055.009014][T12275] bridge_slave_0: entered allmulticast mode [ 1055.087948][T12275] bridge_slave_0: entered promiscuous mode [ 1055.238461][T12275] bridge0: port 2(bridge_slave_1) entered blocking state [ 1055.271653][T12275] bridge0: port 2(bridge_slave_1) entered disabled state [ 1055.282403][T12275] bridge_slave_1: entered allmulticast mode [ 1055.289575][T12275] bridge_slave_1: entered promiscuous mode [ 1056.531543][ T5850] Bluetooth: hci8: command 0x0419 tx timeout [ 1057.420952][T12275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1057.547617][T12398] bridge0: port 1(bridge_slave_0) entered blocking state [ 1057.580393][T12398] bridge0: port 1(bridge_slave_0) entered disabled state [ 1057.592766][T12398] bridge_slave_0: entered allmulticast mode [ 1057.601075][T12398] bridge_slave_0: entered promiscuous mode [ 1057.766471][T12398] bridge0: port 2(bridge_slave_1) entered blocking state [ 1057.773925][T12398] bridge0: port 2(bridge_slave_1) entered disabled state [ 1057.782859][T12398] bridge_slave_1: entered allmulticast mode [ 1057.811016][T12398] bridge_slave_1: entered promiscuous mode [ 1057.954432][T12275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1058.822760][T12268] bridge0: port 1(bridge_slave_0) entered blocking state [ 1058.830146][T12268] bridge0: port 1(bridge_slave_0) entered disabled state [ 1058.910285][T12487] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1058.983315][T12268] bridge_slave_0: entered allmulticast mode [ 1059.073010][T12268] bridge_slave_0: entered promiscuous mode [ 1059.149766][T12398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1059.584489][T12398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1059.656943][T12275] team0: Port device team_slave_0 added [ 1059.701850][T12275] team0: Port device team_slave_1 added [ 1059.775206][T12275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1059.801493][T12275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1059.841649][T12275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1059.854608][T12275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1059.861777][T12275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1060.328378][T12275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1060.512582][T12268] bridge0: port 2(bridge_slave_1) entered blocking state [ 1060.550241][T12268] bridge0: port 2(bridge_slave_1) entered disabled state [ 1060.569340][T12268] bridge_slave_1: entered allmulticast mode [ 1061.014096][T12268] bridge_slave_1: entered promiscuous mode [ 1061.545061][T12268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1061.624349][T12398] team0: Port device team_slave_0 added [ 1061.673912][T12398] team0: Port device team_slave_1 added [ 1062.893722][ T5845] Bluetooth: hci8: command 0x0419 tx timeout [ 1062.986373][T12268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1064.063678][T12398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1064.081523][T12398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1064.115646][T12398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1064.327173][T12268] team0: Port device team_slave_0 added [ 1064.537437][T12398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1064.545774][T12398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1064.992397][T12398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1066.705475][T12275] hsr_slave_0: entered promiscuous mode [ 1067.097188][ T5845] ------------[ cut here ]------------ [ 1067.103241][ T5845] WARNING: CPU: 1 PID: 5845 at net/bluetooth/hci_conn.c:567 hci_conn_timeout+0xfb/0x290 [ 1067.113151][ T5845] Modules linked in: [ 1067.117072][ T5845] CPU: 1 UID: 0 PID: 5845 Comm: kworker/u9:3 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 1067.127970][ T5845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1067.138128][ T5845] Workqueue: hci8 hci_conn_timeout [ 1067.143805][ T5845] RIP: 0010:hci_conn_timeout+0xfb/0x290 [ 1067.149392][ T5845] Code: 4c 89 f7 e8 07 c2 09 00 eb 07 e8 70 55 e5 f6 b0 13 0f b6 f0 4c 89 f7 5b 41 5c 41 5e 41 5f 5d e9 5b b3 fe ff e8 56 55 e5 f6 90 <0f> 0b 90 eb 8f 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 36 ff ff ff 48 [ 1067.169534][ T5845] RSP: 0018:ffffc9000427fb90 EFLAGS: 00010293 [ 1067.175794][ T5845] RAX: ffffffff8aba1e9a RBX: ffff888079fa48e8 RCX: ffff8880633b1e00 [ 1067.183929][ T5845] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 1067.192006][ T5845] RBP: 00000000ffffffff R08: ffffffff8aba1e03 R09: 1ffff1100f3f4802 [ 1067.200172][ T5845] R10: dffffc0000000000 R11: ffffed100f3f4803 R12: dffffc0000000000 [ 1067.208311][ T5845] R13: ffffffff8168ee96 R14: ffff888079fa4000 R15: 0000000002400000 [ 1067.216332][ T5845] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1067.225356][ T5845] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1067.232008][ T5845] CR2: 00007f4798147ab8 CR3: 000000007e924000 CR4: 0000000000350ef0 [ 1067.240002][ T5845] Call Trace: [ 1067.243745][ T5845] [ 1067.246696][ T5845] ? __warn+0x165/0x4d0 [ 1067.250883][ T5845] ? hci_conn_timeout+0xfb/0x290 [ 1067.256261][ T5845] ? report_bug+0x2b3/0x500 [ 1067.260814][ T5845] ? hci_conn_timeout+0xfb/0x290 [ 1067.265833][ T5845] ? handle_bug+0x60/0x90 [ 1067.270186][ T5845] ? exc_invalid_op+0x1a/0x50 [ 1067.274925][ T5845] ? asm_exc_invalid_op+0x1a/0x20 [ 1067.279985][ T5845] ? process_scheduled_works+0x976/0x1840 [ 1067.285828][ T5845] ? hci_conn_timeout+0x63/0x290 [ 1067.290799][ T5845] ? hci_conn_timeout+0xfa/0x290 [ 1067.295803][ T5845] ? hci_conn_timeout+0xfb/0x290 [ 1067.300866][ T5845] process_scheduled_works+0xa68/0x1840 [ 1067.306536][ T5845] ? __pfx_process_scheduled_works+0x10/0x10 [ 1067.312612][ T5845] ? assign_work+0x364/0x3d0 [ 1067.317230][ T5845] worker_thread+0x870/0xd30 [ 1067.321912][ T5845] ? __kthread_parkme+0x169/0x1d0 [ 1067.327142][ T5845] ? __pfx_worker_thread+0x10/0x10 [ 1067.332387][ T5845] kthread+0x2f2/0x390 [ 1067.336488][ T5845] ? __pfx_worker_thread+0x10/0x10 [ 1067.341707][ T5845] ? __pfx_kthread+0x10/0x10 [ 1067.346730][ T5845] ret_from_fork+0x4d/0x80 [ 1067.351722][ T5845] ? __pfx_kthread+0x10/0x10 [ 1067.356350][ T5845] ret_from_fork_asm+0x1a/0x30 [ 1067.361180][ T5845] [ 1067.364397][ T5845] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1067.371687][ T5845] CPU: 1 UID: 0 PID: 5845 Comm: kworker/u9:3 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 1067.382540][ T5845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1067.392692][ T5845] Workqueue: hci8 hci_conn_timeout [ 1067.397839][ T5845] Call Trace: [ 1067.401119][ T5845] [ 1067.404051][ T5845] dump_stack_lvl+0x241/0x360 [ 1067.408929][ T5845] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1067.414150][ T5845] ? __pfx__printk+0x10/0x10 [ 1067.418764][ T5845] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1067.424411][ T5845] ? vscnprintf+0x5d/0x90 [ 1067.428758][ T5845] panic+0x349/0x880 [ 1067.432675][ T5845] ? __warn+0x174/0x4d0 [ 1067.436858][ T5845] ? __pfx_panic+0x10/0x10 [ 1067.441301][ T5845] ? ret_from_fork_asm+0x1a/0x30 [ 1067.446258][ T5845] __warn+0x344/0x4d0 [ 1067.450345][ T5845] ? hci_conn_timeout+0xfb/0x290 [ 1067.455306][ T5845] report_bug+0x2b3/0x500 [ 1067.459652][ T5845] ? hci_conn_timeout+0xfb/0x290 [ 1067.464621][ T5845] handle_bug+0x60/0x90 [ 1067.468785][ T5845] exc_invalid_op+0x1a/0x50 [ 1067.473298][ T5845] asm_exc_invalid_op+0x1a/0x20 [ 1067.478166][ T5845] RIP: 0010:hci_conn_timeout+0xfb/0x290 [ 1067.483730][ T5845] Code: 4c 89 f7 e8 07 c2 09 00 eb 07 e8 70 55 e5 f6 b0 13 0f b6 f0 4c 89 f7 5b 41 5c 41 5e 41 5f 5d e9 5b b3 fe ff e8 56 55 e5 f6 90 <0f> 0b 90 eb 8f 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 36 ff ff ff 48 [ 1067.503342][ T5845] RSP: 0018:ffffc9000427fb90 EFLAGS: 00010293 [ 1067.509421][ T5845] RAX: ffffffff8aba1e9a RBX: ffff888079fa48e8 RCX: ffff8880633b1e00 [ 1067.517400][ T5845] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 1067.525380][ T5845] RBP: 00000000ffffffff R08: ffffffff8aba1e03 R09: 1ffff1100f3f4802 [ 1067.533358][ T5845] R10: dffffc0000000000 R11: ffffed100f3f4803 R12: dffffc0000000000 [ 1067.541596][ T5845] R13: ffffffff8168ee96 R14: ffff888079fa4000 R15: 0000000002400000 [ 1067.549752][ T5845] ? process_scheduled_works+0x976/0x1840 [ 1067.555490][ T5845] ? hci_conn_timeout+0x63/0x290 [ 1067.560450][ T5845] ? hci_conn_timeout+0xfa/0x290 [ 1067.565418][ T5845] process_scheduled_works+0xa68/0x1840 [ 1067.571000][ T5845] ? __pfx_process_scheduled_works+0x10/0x10 [ 1067.576998][ T5845] ? assign_work+0x364/0x3d0 [ 1067.581600][ T5845] worker_thread+0x870/0xd30 [ 1067.586210][ T5845] ? __kthread_parkme+0x169/0x1d0 [ 1067.591245][ T5845] ? __pfx_worker_thread+0x10/0x10 [ 1067.596363][ T5845] kthread+0x2f2/0x390 [ 1067.600444][ T5845] ? __pfx_worker_thread+0x10/0x10 [ 1067.605563][ T5845] ? __pfx_kthread+0x10/0x10 [ 1067.610173][ T5845] ret_from_fork+0x4d/0x80 [ 1067.614601][ T5845] ? __pfx_kthread+0x10/0x10 [ 1067.619203][ T5845] ret_from_fork_asm+0x1a/0x30 [ 1067.623987][ T5845] [ 1067.627254][ T5845] Kernel Offset: disabled [ 1067.631638][ T5845] Rebooting in 86400 seconds..