last executing test programs: 26m3.89059501s ago: executing program 4 (id=226): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x4000, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000380)) socket$inet6_tcp(0xa, 0x1, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x80) mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x100, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 26m2.632293466s ago: executing program 4 (id=227): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c00018006000600800a0000100002800c001580050001"], 0x34}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f00000001c0)=0xc8) io_uring_setup(0xf08, &(0x7f0000000700)={0x0, 0x826e, 0x100, 0x4, 0xf0}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfffffd9d) sendfile(r1, r2, 0x0, 0x8000002b) 26m0.686417055s ago: executing program 4 (id=230): capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee", 0x4d}], 0x1) 25m59.103913679s ago: executing program 4 (id=236): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) 25m57.029949375s ago: executing program 4 (id=239): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x90e7d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000001340)=0x1800) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x567, 0x0, 0x0, 0x0, 0x0) read$dsp(0xffffffffffffffff, &(0x7f00000002c0)=""/4096, 0x1000) 25m54.944900623s ago: executing program 4 (id=244): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_io_uring_setup(0x1952, &(0x7f0000000140)={0x0, 0x800aee4, 0x0, 0x3, 0xd2}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) lstat(&(0x7f0000002cc0)='./file1\x00', &(0x7f0000002d00)) socket$inet6(0xa, 0x80803, 0x83) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)={0x2c, 0x2e, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r5}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x109, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}]}, @nested={0x5, 0x1, 0x0, 0x1, [@generic="99"]}]}, 0x2c}], 0x1}, 0x0) 25m39.591488332s ago: executing program 32 (id=244): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_io_uring_setup(0x1952, &(0x7f0000000140)={0x0, 0x800aee4, 0x0, 0x3, 0xd2}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) lstat(&(0x7f0000002cc0)='./file1\x00', &(0x7f0000002d00)) socket$inet6(0xa, 0x80803, 0x83) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)={0x2c, 0x2e, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r5}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x109, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}]}, @nested={0x5, 0x1, 0x0, 0x1, [@generic="99"]}]}, 0x2c}], 0x1}, 0x0) 21m52.182579416s ago: executing program 1 (id=615): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) 21m51.701900017s ago: executing program 1 (id=616): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000340)={0x2a, 0xffffffff00000002, 0x7fff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000850}, 0x40) bind$qrtr(r1, &(0x7f0000000500)={0x2a, 0x1, 0x1}, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r3 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp}, 0x94) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_enter(r3, 0x3516, 0xc2de, 0x8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b000085"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r7}, 0x10) syz_open_procfs(0x0, 0x0) 21m50.363820064s ago: executing program 2 (id=619): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getegid() sendmmsg$unix(r1, &(0x7f0000007b00)=[{{&(0x7f0000000240)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000680)="5642ae92629a35e4eafaf95f999e551847bc6ca3ffd7dcf9bfca239f80fa662fb35ee3a227bfffab1da1b06d33826fe2995d282ae82b65da4c433397748582876cf7f6ae34e0116d5baf55bba9a00a492120b6ec0e6c21f984952f12fe24ce89f6510092a23100919a149e4f655219ae2b813cd2b302a4124d475304daf8b4caa06c1370", 0x84}, {&(0x7f0000000780)="fe4a899e0c66e89014b41cc95055162b5e49ddd91ce918b82b58ab2044aee75391f8be1d3eaf41f9f8ef02c8cfaf53d5bdd45b5feb31750afaafeaf55cb9f43d531fbd979225591257c281e9298839347b3331566d4a30dd9e995ff4e4b71a18be9a5a666519c9b904b0705509d2507133d280cdc5fb39cd88a7e2bd7a5196cf932f712b0c2a484b027cd7929b440708d95e15f8b779468f007021b9cc03fe7b4d328af718375dea9548ccd1c2c70a30e1927baa221347afc575c7e1903fe229628ba8133f724629ab22dc633694f5eaf71a56d235b4a331ec5f56be09a41128328eabf8638209", 0xe7}, {&(0x7f0000000880)="30079f764af0620f3fe1d0cb114546b6bc194576097ad01015518c34907e29a70ead8d3c537128dca20631d68f85eee754c253d0a2fa0696dfccf29bf37dcf115d9fbed91a766fc76db48e55ad3bc987a531a696aee5a36c5dcbe9cc8274d2225c366807dd0faaaea9a29dff1085f23a3b94932e793ed76ff1bc42085122c771d6ba692f9db9111e71a617486237fb7896124bd7b2c2a3a4bc779efb8bcf86c212cbdf7744b7030a8cab6c233f60956bf0aa1d51a6b98f9cd85ba541638b12da9caa2628b1df70c54b90cb7f7adfd5d357ffff418009e9634c3030484c110f18667126518059bf329440aba2e3cb7fedd06ec5d0", 0xf4}, {&(0x7f0000000980)="f213b66bd309bb78a9cbfabde0810be8fcb24a795de939d72bd8d32e5e76f60e04c0ad15533bf3dea4dfe70270dce3c71444adc511b718ea209dbce26d4dc1cdd7325db0d1e0d9a60f9d40d0bff29b7f9cc5f1cb176a7c742012f042f0daab108365bd1ae16e5c664ac377e5a93bc032eabf61a5e1804c143e35cdc25deedb5a334cb509859024390e048beaaa59d887b5480ea55ac07c7b73921b6850832eb2d03bb05658425b27fd4066c29fad7096ff04a7a91406857e71b76e84d3b498d7c1a11fd1c635962317551a33578522ecc0f245a6d6", 0xd5}, {&(0x7f0000000000)="71cf806241416f7aca2cb0a995397e90452961d150b2b4db6a31122c6a15d5b9f1d5e1c2bd", 0x25}], 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="30000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYBLOB="20000000000000000100000001000000", @ANYRES32=r2, @ANYRES32, @ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="1c00f3ffffffffff000000008e000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESDEC=r5], 0x70, 0x11}}, {{&(0x7f0000000b80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000c00)="cdb658f2d2c007c5fcc2b0133bd17989edcb9cb6bde476541c6f7b02d04e9849836314befbd707513b1859fefda68ba13d58ae2edce7a22609838b430a2be13b04df2b", 0x43}, {&(0x7f0000000c80)="d4a0e3147dc4810ed20b457746a91784c0857e497a75d3657f30282dea2bc15069fee2c8c52338aba05b0e55bc7cd54e6eb9318106d79dc933b51bf3d929dff74d5eb494c8d1fcb3ad9b47ad85a268aa79d11bf5ba9c", 0x56}, {&(0x7f0000000d00)="e796295456ee38e5b9ed85f4bfc1bcf69c26d4444171344a968b67fef16e7855b1836c17ce0d74fb47a15b2a5baea0a5493a9e279a4588bba2427ad1a668b5b081b8d9b902c246d157ab4937e7805a4c", 0x50}], 0x3, 0x0, 0x0, 0x80}}, {{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000d80)="242d0c24ec8cffc935dca83a7f841ccd89b08fa78f92a7d62d5ad5086f190ddeef2457c0f5057c95efec2ef38009a826f4c3364dcc3a5cbae1eb9197c9fc13b37a081097dd655b3aa2a7ddf8bfaa2081a114639ea4dce7e136ed80df9f0d4b271f117b40ab9e729756f291ff8055ce8876cdc637f49a6e256e8c5802c5717cdcdc73147a6f91e37d2b4dde34624abdf5ea0de280907f98d327e29a572215fceeb62dea235d21", 0xa6}, {&(0x7f0000000e40)="65787f2b357329d7fc96968975c0fc58ed037ddeedb577f35930bf93fc4548ad262e56e0b4b0ffe9d3e55f8bcde14f90cb2cf940a8126d1744fa2c71c74e035daea726f51a4e9a522e1e98a042f5e9d89321e9b2aa8fa0240e34198ccd48fbb36dd8106e872f8b5202f35f2a6ecdd4feffbe214b6afad95fa8cd151015df0bcb5b9e347dbd8160932eba1b494302f1b26b3e", 0x92}, {&(0x7f0000000f00)="609db5f2deff9eaec55b1943f016703644389ca9abe99f3b4d787932c430999c1dff269b573155fcceb9a23eb37da14f2087f9999b690b4854307ccd46ae6ffc579fd60e17499a09586afd76de941a1f6f7983681452d31dc0bf65ce74e8b8ed8ec820cc49e760bcfd002afb837e6ba0d97efd8939309aa3cbc64952ebf6c8a6ab478f572cbfc474a0824dc1ebe646a310ee2393b43f1450791b971ce060d7e78c4ec81d89005365f7c047de2ae08e08790e21c5df41daf669b6aed780c21cafb7c2d5a316b4c1f498e421bd4c0f6fa76a51", 0xd2}, {&(0x7f0000001000)="5aedd00fb930fe0364786c789d04a7b376cb423ddb48fa465f7c76c6a87904f208b337af259386fee1af4f63e91544af72f50245c43784c2e920dcb9e0f7023b128c65b2d488f89b1f00d5dd6966a8cd98759e058354226d44b4b669a6b0b643e6c4fdd3fc1477472296ae2e0fab5059916e88dd441daac1c6b817224b620c5be484f6c339568e0da8902ed3ea819300f1b82e58626742c63492d86e2fdc846beec4479d34edabdb228c", 0xaa}, {&(0x7f00000010c0)="90780000000000000000516c4c972e2115558e215932990f0fa6c4b157c280ec61370e23d1f7cda469755143aa94dc765cab9d1980eb391ea3e2364df68af6303c0be83d6389bafc1b2656abf88fd98ebf6b39a02982f1f0d2253b2bfc241e5daa8ed93e573318bce05e54e419296b6271e9063f44ad92cea775f487078ee4dded733063cf013b0cd33aadf4fbfdeab61833dc4fb4ebeb1d57586e7594af7dddef2b1bc7dfd4616641600909a730602f6b5907f807437203821343b8aeae8fc84f7dcb53fca3089e57b2abc4df180fc13e666ca2d4717990af5c81669918b4d83e400cfa934952dd7d42a57eded5666f932d7d9f2d05a7d2", 0xf8}, {&(0x7f00000011c0)="60d0b0d895cb34b6c0eb92014072a0287c72ac3ec1922ce1d42d243db7efff8ac068a336052f2d9e292bb19d9685ed3adfd0c73c0455758ae24191b73272dd5e0930385dfd43a592fdd57deb631a2760a2eecf09f4b9753c82e12e4f044e071d1e52a3d768e5ec2bfe14ca043eb2bd0b82cf0c", 0x73}, {&(0x7f0000001240)="5fceed8ed14eafd9c1be2bcba5783480faea59a53b6dd9add156828f819d05a2cdb50b5938b8eae353fdcaa4b3c0bf592ee89e444ccf0ddba468dd1cfe01dbf79a860997ef8e916445c4827520ce64d71fd0d33b441ebbfec973bf2e745709cc41867f8bacc89b2556935a1443012506eed862a51a35b0157246a14252f9acdb79529860461edad61866a653bc3ecd1861c5f23d3289fcf4017027163a57894b0f1b7abdbe8e15b8b9c2bf2ba0bcea12ebbd505d0b685b62b0c642d78bef99118b112220eeebf3259295cb0da3b1be97556742119af41e753912f0e29f683981ae94574573b1d90ff549ed5ab6c89a6c83", 0xf1}], 0x7, &(0x7f0000001ac0)=[@rights={{0x20, 0x1, 0x1, [r2, r3, r4, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {r0, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, r2, r3]}}], 0xe0, 0x20004080}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}, {{&(0x7f0000003f40)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, &(0x7f0000007540)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}], 0x90, 0x20000015}}], 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@float={0x2, 0x0, 0x0, 0x10, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0xb}}]}, {0x0, [0x61, 0x61]}}, 0x0, 0x40}, 0x28) 21m49.096512007s ago: executing program 2 (id=621): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xcc657405ba8b63ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0445624, &(0x7f00000000c0)={0x140980001, 0x1, "bf5dff0f251ed700f61765c214525a2572ce1ced49e8981e103268fadc1433ae", 0x200000000, 0x5, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, [0x0, 0x0, 0x6]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000a40)='./file0\x00') syz_open_dev$tty20(0xc, 0x4, 0x1) 21m48.69740378s ago: executing program 1 (id=622): openat$dsp(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000062c0)=@base={0x9, 0x8001, 0x9, 0x8}, 0x48) bpf$BPF_GET_MAP_INFO(0x15, &(0x7f0000000080)={r4, 0xfffffe38}, 0x10) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x5, 0x13, 0x1, 0x0, 0x5f, 0x3, 0x0, 0xa6, 0x2, 0x5, 0x6}, {0xfffffff9, 0x4004, 0x0, 0x0, 0x0, 0xf6, 0x1, 0x8, 0x5, 0xff, 0x4, 0x0, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x5, 0x7, 0xfe, 0x5, 0x2, 0x0, 0x4}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000240)={{0x3, @rose}, [@null, @null, @bcast, @bcast, @netrom, @default, @default, @bcast]}, &(0x7f0000000140)=0x48, 0x800) ioctl$SIOCAX25GETINFOOLD(r5, 0x89e9, &(0x7f00000001c0)) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000002400)={[{0x3, 0xce, 0xfa, 0x5, 0x3, 0x96, 0x9, 0x6, 0x75, 0x0, 0x2, 0x6, 0xffffffff}, {0x15, 0x1, 0x6, 0x2, 0x1, 0x6, 0x2, 0x6, 0xb, 0x5, 0x4, 0x9, 0x1}, {0x2, 0x1000, 0x8, 0x52, 0x1, 0x2a, 0x7f, 0x8, 0xb, 0x40, 0xf4, 0x4, 0x200}], 0xfffffffe}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 21m47.621585774s ago: executing program 2 (id=623): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x3e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000140)="41000200010001", 0x7) syz_emit_vhci(&(0x7f0000002c00)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x8, 0x2}, {0x6}}}}, 0xf) sendto$inet6(r3, 0x0, 0x0, 0x2000, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r5, 0x1) connect$bt_rfcomm(r5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 21m46.116345149s ago: executing program 2 (id=624): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffffffffffff9c, 0x0, 0x8081, 0x0) 21m37.71659343s ago: executing program 2 (id=625): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) 21m37.666000316s ago: executing program 1 (id=627): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r3, 0x0) 21m36.752398688s ago: executing program 2 (id=629): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close(0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0) io_uring_enter(r2, 0x47f6, 0x1f00, 0x2, 0x0, 0x0) 21m36.604641339s ago: executing program 1 (id=630): ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000080)={0x2, 0x0, [0x8000, 0x1, 0x4, 0x7, 0x9, 0x9, 0x4, 0x2]}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180, 0x8005}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x1000, 0x5f7}}]}]}]}, 0x48}}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000480), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') accept(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) read$usbmon(r2, &(0x7f0000000000)=""/61, 0x3d) 21m35.688804729s ago: executing program 1 (id=633): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1817c1, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f076bbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$alg(0x26, 0x5, 0x0) r4 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x1, {0x6, 0x1000, 0x6, 0x86c}}) 21m16.506248047s ago: executing program 33 (id=633): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1817c1, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f076bbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$alg(0x26, 0x5, 0x0) r4 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x1, {0x6, 0x1000, 0x6, 0x86c}}) 21m16.392149679s ago: executing program 34 (id=629): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close(0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0) io_uring_enter(r2, 0x47f6, 0x1f00, 0x2, 0x0, 0x0) 12m25.601283598s ago: executing program 3 (id=1253): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x101, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x4000, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="01000000030000"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0xfffffffffffffd8a, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000300), 0xce4, r4}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, r4, 0x0, 0x100000000000000}, 0x38) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000080)='udf\x00', 0x2008087, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 12m23.496348354s ago: executing program 3 (id=1255): syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, &(0x7f00000040c0)=""/4096, 0x6c, 0x1000, 0x0, 0x991b}, 0x28) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280)='g', 0x1, 0x4008891, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) shutdown(0xffffffffffffffff, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCRTMSG(r3, 0x890d, &(0x7f0000000040)={0x0, {0x2, 0x4e21, @loopback}, {0x2, 0x4e21, @local}, {0x2, 0x4e21, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)='batadv_slave_0\x00', 0x30000000000, 0x3, 0x8}) recvmmsg(0xffffffffffffffff, &(0x7f0000000840), 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r4 = socket$caif_stream(0x25, 0x1, 0x5) fcntl$setownex(r4, 0xf, &(0x7f0000000180)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000100), r5) sendmsg$NLBL_CALIPSO_C_ADD(r5, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd7000ffdbdf25010000000800010000000000080002000200000008"], 0x3c}, 0x1, 0x0, 0x0, 0xc840}, 0x20020000) close_range(r0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) 12m22.164664885s ago: executing program 3 (id=1257): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, &(0x7f0000000000)) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) 12m16.497819589s ago: executing program 3 (id=1261): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r1 = socket$kcm(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0xc000) sendmsg$kcm(r1, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0xe07e872420dfefca) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)}], 0x1}, 0x2400c000) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0xfffffffa, 0x0, "5a77bd31875bd42a21f5b99be588e4e66bed86d85b25a5665a3247e500f61681905db88235f8a5447dd2b2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d684fe8b9398a646717af75fc008daefba68e6222180002bc55704cdb72b4b9956bc00000000000000a8ffff7d34171113d80672661538363d10f70da60fd53ded22c87eb2be010e4a62fb630e0024b437b989000000ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e3a9ca1864f0460c25311963884e6b39905a9719a9001457df7be7e1aefe36350000f60000000000000000000000000000000000617f5f1800"}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x3, 0x0, 0x0, 0x0, 0xb4b, 0x6, 0x8, 0x0, 0x40400003}, 0x0) 12m15.424622877s ago: executing program 3 (id=1262): r0 = landlock_create_ruleset(&(0x7f0000000140)={0x895, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000"], 0x18}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c00000000000000000000000000000000000000000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) sendto$inet6(r5, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) 12m13.981644827s ago: executing program 3 (id=1264): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x20001, 0x81, 0x0, 'queue1\x00', 0xffffffff}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @time={0xd, 0xfffffff8}, {}, {}, @raw32}], 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000020000/0x18000)=nil, 0x0, 0x0, 0x69, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r2}, 0x38) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x2c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x401, &(0x7f0000000080)=ANY=[]) r6 = syz_open_dev$video(&(0x7f0000000180), 0xc407, 0x800) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000040)={0x0, 0x5, 0x1, {0xa, @pix_mp={0xaeda, 0x4006, 0x33565348, 0x9, 0x3, [{0x74, 0x2d}, {0x8, 0xe}, {0x4}, {0x6, 0x8}, {0xff1, 0x8}, {0xff, 0x203}, {0x0, 0x6}, {0x6, 0xffffe59a}], 0x5, 0x4, 0x0, 0x2, 0x7}}, 0x10000}) keyctl$instantiate(0xc, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="6e65772064656661756c3e93b6af841f11eb8afc756ade1e829852d41e04149970e2c82e43382a39537420747275737465643a73797a2030d08d09f730303030303030303030303337"], 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r7, 0x404c534a, &(0x7f0000000380)={0x0, 0x1, 0xbe}) r8 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x0, 0x20e}, &(0x7f0000ff0000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f0000000040)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000600)={0x5, 0x0, &(0x7f0000000540)=[{&(0x7f00000000c0)=""/27, 0x1b}], &(0x7f00000005c0), 0x1}, 0x20) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x204200, 0x0) 11m58.847920083s ago: executing program 35 (id=1264): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x20001, 0x81, 0x0, 'queue1\x00', 0xffffffff}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @time={0xd, 0xfffffff8}, {}, {}, @raw32}], 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000020000/0x18000)=nil, 0x0, 0x0, 0x69, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r2}, 0x38) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x2c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x401, &(0x7f0000000080)=ANY=[]) r6 = syz_open_dev$video(&(0x7f0000000180), 0xc407, 0x800) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000040)={0x0, 0x5, 0x1, {0xa, @pix_mp={0xaeda, 0x4006, 0x33565348, 0x9, 0x3, [{0x74, 0x2d}, {0x8, 0xe}, {0x4}, {0x6, 0x8}, {0xff1, 0x8}, {0xff, 0x203}, {0x0, 0x6}, {0x6, 0xffffe59a}], 0x5, 0x4, 0x0, 0x2, 0x7}}, 0x10000}) keyctl$instantiate(0xc, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="6e65772064656661756c3e93b6af841f11eb8afc756ade1e829852d41e04149970e2c82e43382a39537420747275737465643a73797a2030d08d09f730303030303030303030303337"], 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r7, 0x404c534a, &(0x7f0000000380)={0x0, 0x1, 0xbe}) r8 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x0, 0x20e}, &(0x7f0000ff0000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f0000000040)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000600)={0x5, 0x0, &(0x7f0000000540)=[{&(0x7f00000000c0)=""/27, 0x1b}], &(0x7f00000005c0), 0x1}, 0x20) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x204200, 0x0) 9m30.65260241s ago: executing program 6 (id=1420): sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), 0xffffffffffffffff) socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x10, 0x4) socket(0x1e, 0x4, 0x0) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x2}, 0x20) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x31, @remote, 0x5035, 0x2}, 0x20) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x3, @remote, 0x2, 0x4}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400008bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 9m23.295113647s ago: executing program 6 (id=1435): r0 = socket$inet_sctp(0x2, 0x400000000001, 0x84) sendto$inet(r0, &(0x7f0000000080)="e3", 0x1, 0x20040004, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x87}) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000200)=@fd={0x7, 0x1, 0x4, 0x8, 0x6, {}, {0x1, 0x2, 0x9, 0x6, 0x9, 0xfd, 'yT=7'}, 0x0, 0x4, {}, 0x4}) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) syz_usb_disconnect(r2) readv(r3, &(0x7f00000006c0)=[{&(0x7f0000000140)=""/3, 0x3}], 0x1) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f046}) accept4(r0, 0x0, 0x0, 0x0) syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) 9m19.93788585s ago: executing program 6 (id=1441): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x2, @empty}, {0xa, 0x4e20, 0x101, @mcast2, 0x7}, 0xffffffffffffffff, 0x6}}, 0x48) writev(r0, &(0x7f0000000040), 0x0) 9m19.357888806s ago: executing program 6 (id=1444): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r3, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4, "b0d5b301d1f8337291bd9c59c55dc059097d659cfe0320cadd0901cd3b14689e1c77bcf683e35c68f0455930ab19ce80052e1b4d478fc7c371bd292e05a810", 0x3a}, 0x80, 0x0}}], 0x1, 0x48094) 9m11.493780713s ago: executing program 6 (id=1458): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c00018006000600800a0000100002800c001580050001"], 0x34}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8000002b) 9m10.537416323s ago: executing program 6 (id=1460): bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x100, 0x4, 0x20}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r0}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) sendmsg$DEVLINK_CMD_TRAP_SET(r5, 0x0, 0x8000) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000019600)=[@ip_tos_int={{0x14, 0x11a, 0x1, 0x2}}], 0x28}, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 9m10.229718412s ago: executing program 8 (id=1461): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_create(0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, &(0x7f0000000000)) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) 9m8.518304023s ago: executing program 8 (id=1463): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sndseq(0xffffffffffffff9c, 0x0, 0x446102) dup(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0xa, 0x7, 0x2, 0x4}, 0x50) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r4, &(0x7f0000000100)='reno\x00', 0x5) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup, r5, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) write$tcp_congestion(r4, &(0x7f0000000300)='reno\x00', 0x5) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup, r5, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) 9m7.134691216s ago: executing program 8 (id=1464): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1ff, 0x1, 0x8004}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x3}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x16cc89b4, 0x200, 0x80, 0x10, 0x80000000, 0x4, 0x2, 0xffff6576, 0xd6a6, 0x9, 0x6, 0x9, 0x8, 0x1d, 0x3, 0x81, 0x7, 0x8, 0x8, 0x3f, 0x5, 0xfffffff7, 0x7fffffff, 0x1, 0x10001, 0xfffffff6, 0x5, 0x0, 0x80000001, 0x2, 0x1, 0x7, 0xb, 0x7, 0x0, 0x9bc100, 0x7, 0x999, 0x6, 0x4, 0xfe, 0x3, 0x8c1, 0xffff, 0x1, 0x9fc, 0x7fffffff, 0x2, 0x8, 0x4, 0x10000, 0x200, 0xe, 0x1, 0x0, 0x40, 0x7, 0xa5d8, 0x4, 0x6, 0x7000000, 0x3, 0x9, 0x4, 0x9, 0x0, 0x6, 0x9, 0x4, 0x80, 0x8, 0x10001, 0x6, 0x8, 0x200, 0x0, 0x7, 0x9, 0xffffffff, 0x100, 0x5, 0xff6, 0x35, 0x53, 0x7fffffff, 0x80000000, 0x200, 0x480000, 0x4, 0xfff, 0x6fd, 0x4, 0x3d4a3d97, 0xd4, 0x56, 0x7, 0x392a, 0x2, 0x2, 0x7, 0xe6, 0x7, 0x6, 0x8, 0xffff1362, 0x7, 0xe47a, 0x6, 0x6, 0x5, 0x9000000, 0x3, 0xc7, 0x708, 0x3, 0x0, 0x10, 0x9, 0x2, 0xd0, 0x1000, 0xf4, 0x432, 0x1ff, 0x401, 0x5, 0x97b2, 0x0, 0x1, 0x7, 0x80000000, 0x1, 0xdc, 0x10001, 0x9, 0x6, 0x1cd7, 0x6, 0xfffffffd, 0x1, 0x1, 0x9, 0xc, 0x1, 0x10, 0x747, 0x2, 0xffffff25, 0x7, 0x2, 0x97, 0x3, 0x7de8, 0x2, 0x6, 0x5, 0x3, 0x10000, 0x0, 0xf, 0x101, 0x2, 0x200, 0x4, 0x1, 0x3, 0x4, 0x4, 0x1c000000, 0x9, 0x200, 0x3, 0xc, 0xb, 0x9, 0x8000, 0x101, 0x8, 0x0, 0x2, 0x7, 0x6ac, 0x5, 0x1, 0x8, 0x101, 0x1, 0x65, 0xfffffff6, 0x0, 0x9, 0x401, 0x0, 0x3, 0x3744, 0x28, 0x2, 0x3, 0xfff, 0x0, 0x563d, 0x7, 0x8, 0x6, 0xb6, 0x8, 0x6, 0x4d, 0x7fff, 0xff, 0x2, 0x4, 0x3, 0x7, 0x3, 0x8, 0x2, 0xff, 0x0, 0x1, 0x2, 0x3, 0x4, 0x5, 0x4, 0x0, 0x8, 0xd, 0xe, 0x2, 0x4, 0x6, 0x4, 0x1, 0x401, 0x2, 0x5, 0xfff, 0x96b4, 0x2, 0x92ed36b9, 0x8000, 0x40, 0x4, 0x9, 0x9, 0x0, 0x0, 0xf4, 0x5, 0x0, 0x7, 0x7, 0x2, 0x9f14, 0x2]}, @TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x0, 0x5, 0x401, 0x0, 0x9, 0x18, 0x1, 0x80, 0x7000000, 0x5, 0x8, 0x9, 0x8, 0xd8c, 0x10f8000, 0x1, 0x4, 0x6, 0xf, 0x7ff, 0x1, 0x88d, 0x8, 0xfffffff9, 0x7, 0x6, 0x7f, 0x4, 0xc824, 0x4, 0xe3, 0x6, 0x0, 0xe, 0x7, 0xe, 0x101, 0xf, 0x0, 0x7, 0x8, 0x6, 0x4, 0x3, 0x7ff, 0xe55, 0x5, 0x4b19, 0x8, 0x8, 0xc5c, 0x9, 0x3, 0x5, 0x8001, 0xfffffff8, 0x9, 0x5, 0x9, 0x2, 0x8, 0xfffffffa, 0xfffffff7, 0x1, 0x6a41, 0xffffffff, 0xf, 0x4, 0x3ff, 0x7f, 0x3, 0x81, 0x10, 0x3, 0x400, 0x9, 0x7ff, 0x5, 0x40, 0x2, 0x2e, 0x0, 0x1, 0x5, 0xcf9, 0x2, 0x0, 0x4, 0x4, 0x4, 0x4, 0x3, 0x7ff, 0x5, 0xfffffffc, 0x3, 0x2, 0x6, 0xa5, 0xfffff000, 0x2, 0x6, 0x1, 0x8, 0x80000000, 0x800, 0x9, 0x6, 0x2, 0x0, 0x80, 0x3, 0xfffffffd, 0xfff, 0x7f, 0x7, 0x2, 0x7, 0x1, 0x89c, 0x9fae562, 0x6, 0x5, 0xff, 0x7, 0x401, 0x1, 0x6, 0x9, 0x7, 0x3ff, 0x800, 0x2, 0x803, 0x6, 0xc71, 0x81, 0x80000000, 0x3ff, 0x8, 0x7, 0x2, 0x7, 0x200, 0x2, 0x7, 0x8000, 0xe265, 0x7fffffff, 0x0, 0x0, 0x2e, 0xc, 0x7, 0x0, 0xc88f, 0x2, 0xffffffff, 0x6, 0x5, 0x8000, 0xe, 0xfffffff9, 0x6, 0x8, 0x990, 0x800, 0x5, 0x7, 0x1, 0xfffffffa, 0xb, 0x9, 0x2, 0x7ff, 0x8000, 0x5, 0x1, 0x10000, 0xd41b, 0x128b5072, 0xf, 0x4eac, 0xf918, 0x7f, 0x3, 0x8, 0x2, 0x0, 0x0, 0xff, 0xb, 0x4, 0x96a3, 0x1, 0x8001, 0x7, 0x4, 0x1, 0x9, 0x6, 0x1, 0x3, 0x5, 0x631, 0x8001, 0x3, 0x10001, 0x44c, 0x5827, 0xa99, 0x3, 0x400, 0x0, 0x3, 0x7, 0x10000000, 0x3, 0x3, 0x0, 0x1d99, 0x3, 0x4, 0x7, 0xb78b, 0x1, 0x3, 0x10000000, 0x7, 0x8, 0x4, 0x9, 0x7, 0x4, 0x5, 0x7, 0x0, 0xfffffff9, 0xffff, 0x81, 0x9, 0x6, 0x3, 0x19f2, 0x3, 0xe, 0x4259, 0x6, 0x3, 0x81, 0x58783dd6, 0xed2, 0x5, 0x5, 0x9]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) ioctl$sock_bt_hci(r3, 0x400448c9, 0x0) 9m5.696508006s ago: executing program 8 (id=1466): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, 0x0, &(0x7f00000005c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r5 = timerfd_create(0x9, 0x0) timerfd_gettime(r5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r6 = syz_open_procfs(0x0, &(0x7f0000000280)='net/vlan/config\x00') preadv(r6, &(0x7f0000000040)=[{&(0x7f0000003000)=""/4106, 0x100a}], 0x1, 0x7c, 0x0) 9m4.706843303s ago: executing program 8 (id=1467): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x2, @empty}, {0xa, 0x4e20, 0x101, @mcast2, 0x7}, 0xffffffffffffffff, 0x6}}, 0x48) writev(r0, &(0x7f0000000040)=[{0x0}], 0x1) 9m4.485636299s ago: executing program 8 (id=1468): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r3, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4, "b0d5b301d1f8337291bd9c59c55dc059097d659cfe0320cadd0901cd3b14689e1c77bcf683e35c68f0455930ab19ce80052e1b4d478fc7c371bd292e05a810", 0x3a}, 0x80, 0x0}}], 0x1, 0x48094) 8m54.171530402s ago: executing program 36 (id=1460): bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x100, 0x4, 0x20}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r0}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) sendmsg$DEVLINK_CMD_TRAP_SET(r5, 0x0, 0x8000) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000019600)=[@ip_tos_int={{0x14, 0x11a, 0x1, 0x2}}], 0x28}, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 8m48.940197731s ago: executing program 37 (id=1468): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r3, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4, "b0d5b301d1f8337291bd9c59c55dc059097d659cfe0320cadd0901cd3b14689e1c77bcf683e35c68f0455930ab19ce80052e1b4d478fc7c371bd292e05a810", 0x3a}, 0x80, 0x0}}], 0x1, 0x48094) 4m43.193294109s ago: executing program 5 (id=1803): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0x3}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x16cc89b4, 0x200, 0x80, 0x10, 0x80000000, 0x4, 0x2, 0xffff6576, 0xd6a6, 0x9, 0x6, 0x9, 0x8, 0x1d, 0x3, 0x81, 0x7, 0x8, 0x8, 0x3f, 0x5, 0xfffffff7, 0x7fffffff, 0x1, 0x10001, 0xfffffff6, 0x5, 0x0, 0x80000001, 0x2, 0x1, 0x7, 0xb, 0x7, 0x0, 0x9bc100, 0x7, 0x999, 0x6, 0x4, 0xfe, 0x3, 0x8c1, 0xffff, 0x1, 0x9fc, 0x7fffffff, 0x2, 0x8, 0x4, 0x10000, 0x200, 0xe, 0x1, 0x0, 0x40, 0x7, 0xa5d8, 0x4, 0x6, 0x7000000, 0x3, 0x9, 0x4, 0x9, 0x0, 0x6, 0x9, 0x4, 0x80, 0x8, 0x10001, 0x6, 0x8, 0x200, 0x0, 0x7, 0x9, 0xffffffff, 0x100, 0x5, 0xff6, 0x35, 0x53, 0x7fffffff, 0x80000000, 0x200, 0x480000, 0x4, 0xfff, 0x6fd, 0x4, 0x3d4a3d97, 0xd4, 0x56, 0x7, 0x392a, 0x2, 0x2, 0x7, 0xe6, 0x7, 0x6, 0x8, 0xffff1362, 0x7, 0xe47a, 0x6, 0x6, 0x5, 0x9000000, 0x3, 0xc7, 0x708, 0x3, 0x0, 0x10, 0x9, 0x2, 0xd0, 0x1000, 0xf4, 0x432, 0x1ff, 0x401, 0x5, 0x97b2, 0x0, 0x1, 0x7, 0x80000000, 0x1, 0xdc, 0x10001, 0x9, 0x6, 0x1cd7, 0x6, 0xfffffffd, 0x1, 0x1, 0x9, 0xc, 0x1, 0x10, 0x747, 0x2, 0xffffff25, 0x7, 0x2, 0x97, 0x3, 0x7de8, 0x2, 0x6, 0x5, 0x3, 0x10000, 0x0, 0xf, 0x101, 0x2, 0x200, 0x4, 0x1, 0x3, 0x4, 0x4, 0x1c000000, 0x9, 0x200, 0x3, 0xc, 0xb, 0x9, 0x8000, 0x101, 0x8, 0x0, 0x2, 0x7, 0x6ac, 0x5, 0x1, 0x8, 0x101, 0x1, 0x65, 0xfffffff6, 0x0, 0x9, 0x401, 0x0, 0x3, 0x3744, 0x28, 0x2, 0x3, 0xfff, 0x0, 0x563d, 0x7, 0x8, 0x6, 0xb6, 0x8, 0x6, 0x4d, 0x7fff, 0xff, 0x2, 0x4, 0x3, 0x7, 0x3, 0x8, 0x2, 0xff, 0x0, 0x1, 0x2, 0x3, 0x4, 0x5, 0x4, 0x0, 0x8, 0xd, 0xe, 0x2, 0x4, 0x6, 0x4, 0x1, 0x401, 0x2, 0x5, 0xfff, 0x96b4, 0x2, 0x92ed36b9, 0x8000, 0x40, 0x4, 0x9, 0x9, 0x0, 0x0, 0xf4, 0x5, 0x0, 0x7, 0x7, 0x2, 0x9f14, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) 4m42.283332876s ago: executing program 5 (id=1805): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000011ac0)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004080}, 0x40000) 4m42.105639952s ago: executing program 5 (id=1806): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5193bb672965593497c186a80e00", '\x00\x00=*', "1202000000040030"}, 0x38) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, 0x0, 0x0) 4m42.02268502s ago: executing program 5 (id=1807): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x28c4c2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c2000000aaaa93aaaabb86dd60a7a09600023a00fe8000000000001a000000008d8ece0000b7af0010000001879e0a84647e3e0815ff07066767"], 0x0) getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1, 0x0, 0x5}, 0x18) epoll_create(0x3) 4m41.799117389s ago: executing program 5 (id=1808): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x18}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x8, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r6, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0, 0x36, 0x0, 0x0, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x6c, 0x8, 0x0, 0x0}}, 0x10) 4m40.449751012s ago: executing program 5 (id=1809): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r0 = socket$kcm(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x3, 0x0, 0x0, 0x0, 0xb4b, 0x6, 0x8, 0x0, 0x40400003}, 0x0) 4m25.374740132s ago: executing program 38 (id=1809): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r0 = socket$kcm(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x3, 0x0, 0x0, 0x0, 0xb4b, 0x6, 0x8, 0x0, 0x40400003}, 0x0) 1m35.83893447s ago: executing program 0 (id=2008): sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, 0x0, 0x40840) syz_usb_connect(0x2, 0x524, &(0x7f0000000000)={{0x12, 0x1, 0x7c897e6f5ee0921e, 0xae, 0xaf, 0x84, 0x10, 0x85a, 0x8025, 0xed38, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x512, 0x2, 0x7f, 0x4b, 0x10, 0x4, [{{0x9, 0x4, 0xdb, 0x2, 0x5, 0x53, 0x90, 0xf, 0x4, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "518309"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x7ff, 0xd9a, 0x2}, [@country_functional={0x6, 0x24, 0x7, 0x81, 0x1a}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0xc, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x3, 0x10}, @country_functional={0x6, 0x24, 0x7, 0xc4, 0x4}, @mdlm={0x15, 0x24, 0x12, 0x3}]}], [{{0x9, 0x5, 0x8, 0x10, 0x3ff, 0x45, 0x4, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0xb39}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x2, 0x8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xa, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0x3fc0}]}}, {{0x9, 0x5, 0x0, 0x2, 0x200, 0x6, 0x6, 0x0, [@generic={0x17, 0x4, "7cd778ee937875c07d9f33c2657f828cce33d6220e"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0x3, 0x5f, 0x2, [@generic={0xee, 0x9, "bf1e7898ae05f1dd088a71a7eae67bc3013e18863765b013f733f58eeea584d0cccc2670f178266d0961f2e7b6225974d6a94eb1be0d76e13939779dee08860b7a964c0f2fad465a45a6220c47f945b3f230220c1eeda8edfae6ad508aa5d020d140a1939fb6a0999b272dab1da3e1f55aa399d9d2b1922ac6f6c99e13725dd8a5b97aa415477bb6f9fc410133c5eaa14818f57bad348dd61baeac730fc2bfc9958e475e29adbe082940e49dfd127b343e8cc3183f83fa0dc8ccd17a6fab3e0b33d140a6ff11fe45351cdcf6a31d593df9aff3fbf92b16903072ee4e1c8f7656b8a439b0d776813d43c1aa48"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0x6, 0x7, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0x3c}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0xb}]}}]}}, {{0x9, 0x4, 0x71, 0x5, 0xc, 0xff, 0x60, 0x46, 0x3, [@generic={0xae, 0x5, "89206918fe3d26344348d4065878a64be88e618a5c95b069b132a1e135f1fb9cb64df5adc4d973f3764d8d0ff71cea798328c35386757b929e10728c4d51bcbc5204d91c94f9d4a6c729865895384f69955fa6cb95d7003e6129cab70d1e1e374b3565d9e81c14cde248a803cbbb717d38729b5b80462971746114667e3d24763ceb9f8699d2819172c1626d9aac0e08913a9f5241af8f9e967fcde6754cf86c9b0de30053db117c44904541"}, @uac_control={{0xa, 0x24, 0x1, 0x1, 0x5}}], [{{0x9, 0x5, 0x80, 0x1, 0x10, 0x6, 0x8, 0xfd, [@generic={0xa5, 0x6, "ea6c058ab2f9f7aa274aec6677b415620705d33bd3182c51d7b78bfb7b1b0323141a4781f3c313a5a70b8cee6fefa3178dd101d4bc9cdd14ce9bb98182bcc8b529bd31a6f3ac62ccd22f721a4b9a08f851032c94c78dc30674190ad174a81e17fb8669a3ee12b174c49be4b33af321508dc085c90bf2e2298fa76c8ed469bcb48af63a8f796050eae5ac436e569b1236fae7b5d0bce921af12e2077aeb75a8d61709e4"}]}}, {{0x9, 0x5, 0x4, 0x3, 0x3ff, 0x40, 0xf, 0x3, [@generic={0x9, 0xd, "604f05889c5ebc"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0x5}]}}, {{0x9, 0x5, 0xa, 0x1, 0x20, 0x1c, 0x8, 0x1, [@generic={0x22, 0x31, "af037ff867ab9fd1aa186ab20182430899393a6e4980216910d7e187f0b490ba"}, @generic={0xb7, 0x23, "02c54f892fb02000bfe13ef1155db83fc62ef33e9391dfb5f7a911898ba37ed5771d629cf4e6f147c1a18ab2096a69f7ca242eb955e126984957b26dc47f0f2bec82f11ff9e9a55c7cc9ad14b57b3ab33affae1c59f8cc7809b7f887980a253a85648bc7e85d85827240bc506cdb680ef5c52b6bf8f8207e11396f7bf79b572fce3030ee338d6dafd85189e6557a5384d27483e1f5287bf9537df05a759fa806cc3830a103789527dc835bfed459bcb29fdb27ee05"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0x4, 0x2, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xf, 0x3}]}}, {{0x9, 0x5, 0xf, 0x10, 0x40, 0x1, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xe8, 0x2}]}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0x1, 0x1, 0x6}}, {{0x9, 0x5, 0x7, 0x3, 0x3ff, 0x8, 0x6, 0x6, [@generic={0x20, 0x6, "fcb32cd2b2fe8cd9a4d2bad12ea1893b43ba10ca7bc0698ac750ac3313a0"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x8f, 0x9e, 0xfd, [@generic={0x66, 0xe, "4a12a97d640bcfb29a65e2a83075e75fd1bd91e3ded91af156c8dd5457d71bb7c7e98bb2ab93690c4a6f5e0e0d1407646e1b90165c41d1aa28e3216631129188f8b5eea01cb5f700bdbc00f39a1cdbf27032eb9aa447891168b86b0c1b3b92d000f18ba0"}, @generic={0x7, 0x5, "c252d6ab18"}]}}, {{0x9, 0x5, 0xa, 0xc, 0x200, 0x9, 0x0, 0x3}}, {{0x9, 0x5, 0x6829ebb7c27dfc6c, 0x8, 0x10, 0x1, 0x5, 0x9, [@generic={0x2, 0x1}]}}, {{0x9, 0x5, 0x7, 0x2, 0x8, 0xf7, 0x2, 0x0, [@generic={0x2, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x8001}]}}, {{0x9, 0x5, 0xf, 0x8, 0x10, 0x3, 0xfe, 0x50}}]}}]}}]}}, &(0x7f0000000b40)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x200, 0xc, 0xb7, 0x5, 0xff, 0x8}, 0x10, &(0x7f0000000840)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x40, 0xc, 0x8000, 0x7f}]}, 0x4, [{0xed, &(0x7f0000000880)=@string={0xed, 0x3, "24b5136222c5056d9c41d7b0ca42a04edbc050b401d3c6230f853235e22c219ed3b7865f1dca5ff66cf204f069fc3178810a60e8be339da3c3d952c4459409910d30fc923324e08ca5c0bf44b17190e75b06c39c2179dc9506e61de8cef8f1877edd14b06bf058bdad854aca295a39ff8d94f2b9f0b1f3dd0d0c9de5ed01fbbfee0f2645885d388b26af648412b6ae5f9b695f31f30544d7cf66990b83dd6823f9fd8f3a4cf2e5b8f3e24b3d82745024e98abc6eee369400f94b3d645dc3f5ca3fa3da4c6f77c56a51c7f9482f0b3b83b19462435aa8df83b47fa9bccb06d0d456c9a07c7286270601e2bb"}}, {0x8c, &(0x7f0000000980)=@string={0x8c, 0x3, "72a30fb7bf0e173499285d09852ea0f9a25ceaf2211bd5b0f6689c7f6b3c5104f60c656b08caf7a1bb84cc770881bb8b20b113f91df0e831c407c431eec2c2be80aca85a8bec672a754d11a555cfafd5fb15c5c8181454020e43d3f10fdfc88a770d0eb2031ad734fa13dccc5e9de628cbb7ab0d8c43c32412524bdc3a15b6bbcb81587d8a909f33b6d9"}}, {0x8c, &(0x7f0000000a40)=@string={0x8c, 0x3, "cc76b04fd47dda06bf2552bb15265a0e6ee3b0743964a2ef746b03f83a3140a7ec60156f9fd6eef547165ca017673588caa51ccfd5c052bf30bb8b7e0cadc18e8b26f31b85e5e833754ca517d7e86fe901624b0597e90472bfd8b136041cd039b051fe4f7d2374b5799eaf1206be9c60c3174463c4a93d9f13cbc728f678716adc2392b47c416ebe9b87"}}, {0x20, &(0x7f0000000b00)=@string={0x20, 0x3, "079faaa1bc3163061cc9e5d59956265646918a9627a217bf8144e5e31e29"}}]}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_init_net_socket$llc(0x1a, 0x3, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000380)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0x2) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r4, 0x0, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) 1m32.509406621s ago: executing program 0 (id=2012): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) writev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x4, 0xc4}, 0x0) fsopen(&(0x7f0000000280)='nfs\x00', 0x1) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r2 = eventfd2(0x3, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000980)={0x2020}, 0x2020) close(r2) close(0x5) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000380), 0x0}, 0x20) rseq(&(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xf, 0x2, 0xfffffffffffffeff, 0x9}, 0x2}, 0x20, 0x0, 0x0) listen(0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xc, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41100}, 0x94) pselect6(0x40, &(0x7f0000000240)={0x2, 0x0, 0x4, 0x3, 0x2, 0x0, 0x100, 0x5}, &(0x7f0000000040)={0x1d, 0xfffffffffffffffe, 0x40, 0x7eff, 0x0, 0xfffffffffffffffe, 0x71e7, 0x8}, 0x0, 0x0, 0x0) 1m30.965370138s ago: executing program 0 (id=2015): syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, &(0x7f00000040c0)=""/4096, 0x6c, 0x1000, 0x0, 0x991b}, 0x28) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000280)='g', 0x1, 0x4008891, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) shutdown(r3, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000040)={0x0, {0x2, 0x4e21, @loopback}, {0x2, 0x4e21, @local}, {0x2, 0x4e21, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)='batadv_slave_0\x00', 0x30000000000, 0x3, 0x8}) recvmmsg(r3, &(0x7f0000000840), 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r5 = socket$caif_stream(0x25, 0x1, 0x5) fcntl$setownex(r5, 0xf, &(0x7f0000000180)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000100), r6) sendmsg$NLBL_CALIPSO_C_ADD(r6, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002cbd7000ffdbdf25010000000800010000000000080002000200000008"], 0x3c}, 0x1, 0x0, 0x0, 0xc840}, 0x20020000) close_range(r0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) 1m23.097223603s ago: executing program 0 (id=2018): socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, &(0x7f0000001fee)='R\x10suse\x00\x00\x00\x00\x00\x00\x00dn\x00\x00\x00', 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r2, &(0x7f0000002940), 0x40000000000017d, 0x811) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) openat$audio1(0xffffffffffffff9c, 0x0, 0x129442, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24040884) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m16.641569948s ago: executing program 0 (id=2025): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) writev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x4, 0xc4}, 0x0) fsopen(&(0x7f0000000280)='nfs\x00', 0x1) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) eventfd2(0x3, 0x0) 1m16.090640491s ago: executing program 0 (id=2027): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) connect$inet6(r3, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 1m0.108306344s ago: executing program 39 (id=2027): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) connect$inet6(r3, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 4.785753848s ago: executing program 7 (id=2082): landlock_restrict_self(0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000"], 0x18}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c00000000000000000000000000000000000000000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) sendto$inet6(r4, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) 3.110520822s ago: executing program 7 (id=2083): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) writev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x4, 0xc4}, 0x0) fsopen(&(0x7f0000000280)='nfs\x00', 0x1) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) eventfd2(0x3, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000980)={0x2020}, 0x2020) close(0x5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000380), 0x0}, 0x20) rseq(&(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xf, 0x2, 0xfffffffffffffeff, 0x9}, 0x2}, 0x20, 0x0, 0x0) listen(0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xc, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41100}, 0x94) pselect6(0x40, &(0x7f0000000240)={0x2, 0x0, 0x4, 0x3, 0x2, 0x0, 0x100, 0x5}, &(0x7f0000000040)={0x1d, 0xfffffffffffffffe, 0x40, 0x7eff, 0x0, 0xfffffffffffffffe, 0x71e7, 0x8}, 0x0, 0x0, 0x0) 2.309721268s ago: executing program 7 (id=2084): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000007c0)={r0, &(0x7f0000000740), &(0x7f00000006c0)=""/46}, 0x20) 2.290362102s ago: executing program 7 (id=2085): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) process_mrelease(0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x800) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x181101, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a3000000000140007800800084000000000080012402000000005"], 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x0) 1.262058074s ago: executing program 7 (id=2086): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'dummy0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, &(0x7f0000000000)) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) 0s ago: executing program 7 (id=2087): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000351000/0x2000)=nil) preadv(0xffffffffffffffff, 0x0, 0x0, 0x4000, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004"], 0x48) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x182800, 0x0) ioctl$RTC_AIE_ON(r5, 0x7001) ioctl$RTC_UIE_ON(r5, 0x7003) ioctl$RTC_AIE_OFF(r5, 0x7002) mincore(&(0x7f0000352000/0x1000)=nil, 0x1000, &(0x7f0000000340)=""/207) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_buf(r3, 0x1, 0x6, 0x0, &(0x7f0000000300)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x70bd2b, 0x25dfdbfd, {0x2, 0x10, 0x0, 0x6, 0x4, 0x0, 0x0, 0x8, 0x10012}, [@FRA_DST={0x8, 0x1, @broadcast}, @FRA_GENERIC_POLICY=@FRA_TABLE={0x8, 0xf, 0xa}]}, 0x2c}}, 0x0) kernel console output (not intermixed with test programs): packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1318.197448][T12910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1318.628148][T13090] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1591'. [ 1320.206151][ T1237] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x4 [ 1320.206175][ T1237] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x2 [ 1320.206212][ T1237] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x3 [ 1320.241347][ T1237] hid-generic 0000:3000000:0000.0010: hidraw0: HID v0.00 Device [sy] on syz0 [ 1320.630407][T13111] fido_id[13111]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1321.646392][T12910] hsr_slave_0: entered promiscuous mode [ 1321.647739][T12910] hsr_slave_1: entered promiscuous mode [ 1321.669627][T12910] debugfs: 'hsr0' already exists in 'hsr' [ 1321.669655][T12910] Cannot create hsr debugfs directory [ 1321.761704][T12948] bridge0: port 1(bridge_slave_0) entered blocking state [ 1321.761855][T12948] bridge0: port 1(bridge_slave_0) entered disabled state [ 1321.762117][T12948] bridge_slave_0: entered allmulticast mode [ 1321.808556][T12948] bridge_slave_0: entered promiscuous mode [ 1321.843491][T12948] bridge0: port 2(bridge_slave_1) entered blocking state [ 1321.843662][T12948] bridge0: port 2(bridge_slave_1) entered disabled state [ 1321.844015][T12948] bridge_slave_1: entered allmulticast mode [ 1321.847964][T12948] bridge_slave_1: entered promiscuous mode [ 1322.932685][T12948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1324.398586][ T7600] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1324.548578][ T7600] usb 6-1: device descriptor read/64, error -71 [ 1324.548809][ T57] hsr_slave_0: left promiscuous mode [ 1324.578642][ T57] hsr_slave_1: left promiscuous mode [ 1324.579237][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1324.579255][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1324.630042][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1324.630064][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1324.808556][ T7600] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1324.814972][ T57] veth1_macvtap: left promiscuous mode [ 1324.819206][ T57] veth0_macvtap: left promiscuous mode [ 1324.819492][ T57] veth1_vlan: left promiscuous mode [ 1324.819709][ T57] veth0_vlan: left promiscuous mode [ 1324.948541][ T7600] usb 6-1: device descriptor read/64, error -71 [ 1325.202307][ T7600] usb usb6-port1: attempt power cycle [ 1325.519996][ T9] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x4 [ 1325.520032][ T9] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x2 [ 1325.520093][ T9] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x3 [ 1325.559801][ T9] hid-generic 0000:3000000:0000.0011: hidraw0: HID v0.00 Device [sy] on syz0 [ 1325.690623][T13138] fido_id[13138]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1325.778669][ T7600] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1325.800128][ T7600] usb 6-1: device descriptor read/8, error -71 [ 1326.098524][ T7600] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1326.145363][ T7600] usb 6-1: device descriptor read/8, error -71 [ 1326.252913][ T7600] usb usb6-port1: unable to enumerate USB device [ 1329.659208][ T57] team0 (unregistering): Port device team_slave_1 removed [ 1329.909415][ T57] team0 (unregistering): Port device team_slave_0 removed [ 1332.567519][T12948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1333.990900][T12948] team0: Port device team_slave_0 added [ 1334.053684][T12948] team0: Port device team_slave_1 added [ 1334.234559][T13173] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1334.760024][T12948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1334.760041][T12948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1334.760066][T12948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1334.762555][T12948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1334.762577][T12948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1334.762599][T12948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1335.722020][T12948] hsr_slave_0: entered promiscuous mode [ 1335.723499][T12948] hsr_slave_1: entered promiscuous mode [ 1335.724453][T12948] debugfs: 'hsr0' already exists in 'hsr' [ 1335.724475][T12948] Cannot create hsr debugfs directory [ 1337.961536][T13197] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR [ 1338.787564][ T1237] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1339.065290][ T1237] usb 8-1: device descriptor read/64, error -71 [ 1340.385899][ T1237] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1342.064184][T12910] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1342.349783][T12910] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1343.766439][ C0] vkms_vblank_simulate: vblank timer overrun [ 1343.800204][T12910] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1344.617347][T12910] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1344.696040][ C0] vkms_vblank_simulate: vblank timer overrun [ 1345.150756][ C0] vkms_vblank_simulate: vblank timer overrun [ 1347.247877][T13251] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 1347.348916][ C0] vkms_vblank_simulate: vblank timer overrun [ 1347.566626][ C0] vkms_vblank_simulate: vblank timer overrun [ 1347.688741][ C0] vkms_vblank_simulate: vblank timer overrun [ 1347.768519][ C0] vkms_vblank_simulate: vblank timer overrun [ 1347.788532][ C0] vkms_vblank_simulate: vblank timer overrun [ 1347.858334][ C0] vkms_vblank_simulate: vblank timer overrun [ 1347.904002][ C0] vkms_vblank_simulate: vblank timer overrun [ 1347.982822][ C0] vkms_vblank_simulate: vblank timer overrun [ 1349.779454][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1349.789024][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1349.791228][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1349.792471][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1349.793317][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1351.828754][ T59] Bluetooth: hci5: command tx timeout [ 1353.663564][T11828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1353.700148][T11828] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1353.702259][T11828] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1353.703796][T11828] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1353.704549][T11828] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1353.748603][ T5931] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 1353.772161][ T13] bridge_slave_1: left allmulticast mode [ 1353.772198][ T13] bridge_slave_1: left promiscuous mode [ 1353.772485][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1353.840177][ T13] bridge_slave_0: left allmulticast mode [ 1353.840208][ T13] bridge_slave_0: left promiscuous mode [ 1353.840486][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1353.902634][ T5931] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1353.902664][ T5931] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 1353.902688][ T5931] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1353.902713][ T5931] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1353.902732][ T5931] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1353.905349][ T5931] usb 8-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1353.905377][ T5931] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1353.905396][ T5931] usb 8-1: Product: syz [ 1353.905409][ T5931] usb 8-1: Manufacturer: syz [ 1353.905417][ T5931] usb 8-1: SerialNumber: syz [ 1353.913772][ T59] Bluetooth: hci5: command tx timeout [ 1354.004480][ T5931] usb 8-1: config 0 descriptor?? [ 1354.024580][ T5931] input: KB Gear Tablet as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input11 [ 1354.237258][T13281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1354.237818][T13281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1354.359564][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1354.489524][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1354.574591][ T13] bond0 (unregistering): Released all slaves [ 1354.806317][ C0] vkms_vblank_simulate: vblank timer overrun [ 1355.121456][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1355.579346][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1355.652754][ C0] vkms_vblank_simulate: vblank timer overrun [ 1355.733960][ C0] vkms_vblank_simulate: vblank timer overrun [ 1355.748543][ T59] Bluetooth: hci4: command tx timeout [ 1355.814433][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1355.988588][ T59] Bluetooth: hci5: command tx timeout [ 1357.386326][ C0] vkms_vblank_simulate: vblank timer overrun [ 1357.848498][ T59] Bluetooth: hci4: command tx timeout [ 1358.072594][ T59] Bluetooth: hci5: command tx timeout [ 1358.429308][T10103] usb 8-1: USB disconnect, device number 6 [ 1359.908574][ T59] Bluetooth: hci4: command tx timeout [ 1361.605777][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.605855][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.687783][T13326] Malformed UNC in devname [ 1361.687783][T13326] [ 1361.688050][T13326] CIFS: VFS: Malformed UNC in devname [ 1362.151290][ T59] Bluetooth: hci4: command tx timeout [ 1362.477421][T13285] chnl_net:caif_netlink_parms(): no params data found [ 1362.575536][T13262] chnl_net:caif_netlink_parms(): no params data found [ 1362.738508][T13334] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1364.070435][T13348] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1646'. [ 1373.841394][T13359] trusted_key: encrypted_key: insufficient parameters specified [ 1375.008193][T13373] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 1375.981552][T13285] bridge0: port 1(bridge_slave_0) entered blocking state [ 1375.981735][T13285] bridge0: port 1(bridge_slave_0) entered disabled state [ 1375.981963][T13285] bridge_slave_0: entered allmulticast mode [ 1375.984539][T13285] bridge_slave_0: entered promiscuous mode [ 1376.189541][T13285] bridge0: port 2(bridge_slave_1) entered blocking state [ 1376.189671][T13285] bridge0: port 2(bridge_slave_1) entered disabled state [ 1376.189874][T13285] bridge_slave_1: entered allmulticast mode [ 1376.193685][T13285] bridge_slave_1: entered promiscuous mode [ 1376.329173][T13262] bridge0: port 1(bridge_slave_0) entered blocking state [ 1376.329316][T13262] bridge0: port 1(bridge_slave_0) entered disabled state [ 1376.329563][T13262] bridge_slave_0: entered allmulticast mode [ 1376.335613][T13262] bridge_slave_0: entered promiscuous mode [ 1376.485851][T13262] bridge0: port 2(bridge_slave_1) entered blocking state [ 1376.486005][T13262] bridge0: port 2(bridge_slave_1) entered disabled state [ 1376.486240][T13262] bridge_slave_1: entered allmulticast mode [ 1376.513181][T13262] bridge_slave_1: entered promiscuous mode [ 1381.206432][T13285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1381.303320][T13391] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1656'. [ 1381.411453][T13285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1382.523001][T13399] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1382.526251][T13399] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1383.386918][T13262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1383.545999][T13262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1384.008991][T13285] team0: Port device team_slave_0 added [ 1384.160867][T13285] team0: Port device team_slave_1 added [ 1384.163862][T13262] team0: Port device team_slave_0 added [ 1384.202881][T13262] team0: Port device team_slave_1 added [ 1384.793571][ T13] bridge_slave_1: left allmulticast mode [ 1384.793593][ T13] bridge_slave_1: left promiscuous mode [ 1384.793747][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1384.911090][ T13] bridge_slave_0: left allmulticast mode [ 1384.911112][ T13] bridge_slave_0: left promiscuous mode [ 1384.911293][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1385.299054][T10103] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1385.671397][T10103] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1385.671425][T10103] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1385.671444][T10103] usb 8-1: Product: syz [ 1385.671457][T10103] usb 8-1: Manufacturer: syz [ 1385.671471][T10103] usb 8-1: SerialNumber: syz [ 1385.914306][T10103] usb 8-1: config 0 descriptor?? [ 1386.067222][T13414] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1663'. [ 1386.725620][T10103] usb 8-1: USB disconnect, device number 7 [ 1386.810707][T13388] udevd[13388]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1387.019296][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1387.110293][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1387.176018][ T13] bond0 (unregistering): Released all slaves [ 1387.480286][T13285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1387.480302][T13285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1387.480327][T13285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1387.510802][T13262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1387.510817][T13262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1387.510841][T13262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1389.323810][ T13] hsr_slave_0: left promiscuous mode [ 1389.373119][ T13] hsr_slave_1: left promiscuous mode [ 1389.374054][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1390.230116][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1392.344764][T13455] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1673'. [ 1393.479159][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1393.730302][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1394.659886][T10104] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1394.959088][T10104] usb 1-1: Using ep0 maxpacket: 16 [ 1394.982572][T10104] usb 1-1: config 0 has no interfaces? [ 1395.168173][T10104] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1395.168204][T10104] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1395.168223][T10104] usb 1-1: Product: syz [ 1395.168237][T10104] usb 1-1: Manufacturer: syz [ 1395.168251][T10104] usb 1-1: SerialNumber: syz [ 1395.230889][T10104] usb 1-1: config 0 descriptor?? [ 1395.441722][T13466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1395.442248][T13466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1396.361171][T13285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1396.361188][T13285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1396.361214][T13285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1396.362583][T13262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1396.362595][T13262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1396.362619][T13262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1397.195540][ T5931] usb 1-1: USB disconnect, device number 41 [ 1397.860424][T13485] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1399.588002][T13262] hsr_slave_0: entered promiscuous mode [ 1399.589885][T13262] hsr_slave_1: entered promiscuous mode [ 1399.590709][T13262] debugfs: 'hsr0' already exists in 'hsr' [ 1399.590731][T13262] Cannot create hsr debugfs directory [ 1399.646318][T13285] hsr_slave_0: entered promiscuous mode [ 1399.653518][T13285] hsr_slave_1: entered promiscuous mode [ 1399.654483][T13285] debugfs: 'hsr0' already exists in 'hsr' [ 1399.654505][T13285] Cannot create hsr debugfs directory [ 1401.554275][T13512] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1401.554514][T13512] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1401.788093][ T9] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1401.987482][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 1402.344537][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1402.348504][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1402.348533][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1402.348552][ T9] usb 1-1: Product: syz [ 1402.348567][ T9] usb 1-1: Manufacturer: syz [ 1402.348582][ T9] usb 1-1: SerialNumber: syz [ 1402.370687][ T9] usb 1-1: config 0 descriptor?? [ 1402.575687][T13508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1402.576266][T13508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1402.756650][T13526] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1697'. [ 1402.758611][ T1229] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 1402.944487][ T1229] usb 8-1: not running at top speed; connect to a high speed hub [ 1402.945776][ T1229] usb 8-1: config 127 has an invalid interface number: 219 but max is 1 [ 1402.945802][ T1229] usb 8-1: config 127 has an invalid interface number: 124 but max is 1 [ 1402.945821][ T1229] usb 8-1: config 127 has an invalid interface number: 113 but max is 1 [ 1402.945840][ T1229] usb 8-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 1402.945857][ T1229] usb 8-1: config 127 has 3 interfaces, different from the descriptor's value: 2 [ 1402.945867][ T1229] usb 8-1: config 127 has no interface number 0 [ 1402.945876][ T1229] usb 8-1: config 127 has no interface number 1 [ 1402.945883][ T1229] usb 8-1: config 127 has no interface number 2 [ 1402.945949][ T1229] usb 8-1: config 127 interface 219 altsetting 2 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1402.945962][ T1229] usb 8-1: config 127 interface 219 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1402.945973][ T1229] usb 8-1: config 127 interface 219 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1402.945983][ T1229] usb 8-1: config 127 interface 219 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 1402.945997][ T1229] usb 8-1: too many endpoints for config 127 interface 124 altsetting 215: 120, using maximum allowed: 30 [ 1402.946043][ T1229] usb 8-1: config 127 interface 124 altsetting 215 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 1402.946057][ T1229] usb 8-1: config 127 interface 124 altsetting 215 has 2 endpoint descriptors, different from the interface descriptor's value: 120 [ 1402.946086][ T1229] usb 8-1: config 127 interface 113 altsetting 5 endpoint 0x89 has invalid maxpacket 6249, setting to 64 [ 1402.946101][ T1229] usb 8-1: config 127 interface 113 altsetting 5 endpoint 0x8A has invalid maxpacket 63481, setting to 64 [ 1402.946121][ T1229] usb 8-1: config 127 interface 113 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 1402.946134][ T1229] usb 8-1: config 127 interface 219 has no altsetting 0 [ 1402.946143][ T1229] usb 8-1: config 127 interface 124 has no altsetting 0 [ 1402.946152][ T1229] usb 8-1: config 127 interface 113 has no altsetting 0 [ 1402.994631][ T1229] usb 8-1: Dual-Role OTG device on HNP port [ 1402.996148][ T1229] usb 8-1: New USB device found, idVendor=085a, idProduct=8025, bcdDevice=ed.38 [ 1402.996173][ T1229] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1402.996192][ T1229] usb 8-1: Product: 盌侰緔ۚ▿뭒☕๚環搹歴ㄺꝀ惬漕횟ᙇꁜ朗蠵ꗊ켜샕뽒묰纋괌軁⚋᯳㏨䱵ឥ戁Ջ爄㚱ᰄ㧐冰俾⍽땴鹹ኯ븆悜ៃ捄꧄鼽쬓⣇磶橱⏜뒒䅼빮螛 [ 1402.996216][ T1229] usb 8-1: Manufacturer: ꍲ뜏຿㐗⢙ढ़⺅裂岢ᬡ냕棶羜㱫ё೶步쨈ꇷ蒻矌脈讻넠邏㇨߄㇄싮뻂검媨⩧䵵ꔑ콕햯ᗻ죅ᐘɔ䌎諈൷눎ᨃ㓗ᏺ쳜鵞⣦럋ණ䎌Ⓝ划ᔺ뮶臋絘邊㎟ [ 1402.996240][ T1229] usb 8-1: SerialNumber: 鼇ꆪㆼ٣줜헥嚙嘦酆隊ꈧ뼗䒁⤞ [ 1403.020393][T13518] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1403.895270][T13528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1403.900303][T13528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1404.693584][ T5931] usb 1-1: USB disconnect, device number 42 [ 1406.029461][ T1229] keyspan_pda 8-1:127.219: Keyspan PDA - (prerenumeration) converter detected [ 1406.038548][ T1229] usb 8-1: ezusb_set_reset-1 failed: -71 [ 1406.040112][ T1229] usb 8-1: Direct firmware load for keyspan_pda/xircom_pgs.fw failed with error -2 [ 1406.040135][ T1229] usb 8-1: Falling back to sysfs fallback for: keyspan_pda/xircom_pgs.fw [ 1406.711055][ T13] bridge_slave_1: left allmulticast mode [ 1406.711088][ T13] bridge_slave_1: left promiscuous mode [ 1406.711338][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1406.813408][ T13] bridge_slave_0: left allmulticast mode [ 1406.813441][ T13] bridge_slave_0: left promiscuous mode [ 1406.813715][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1406.979417][T13558] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1706'. [ 1408.373808][T11828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1408.404094][T11828] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1408.410967][T11828] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1408.413589][T11828] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1408.414346][T11828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1409.008027][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1409.089201][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1409.150947][ T13] bond0 (unregistering): Released all slaves [ 1409.253728][ T9] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 1409.451918][ T9] usb 6-1: not running at top speed; connect to a high speed hub [ 1409.453534][ T9] usb 6-1: config 127 has an invalid interface number: 219 but max is 1 [ 1409.453597][ T9] usb 6-1: config 127 has an invalid interface number: 124 but max is 1 [ 1409.453617][ T9] usb 6-1: config 127 has an invalid interface number: 113 but max is 1 [ 1409.453637][ T9] usb 6-1: config 127 has 3 interfaces, different from the descriptor's value: 2 [ 1409.453659][ T9] usb 6-1: config 127 has no interface number 0 [ 1409.453674][ T9] usb 6-1: config 127 has no interface number 1 [ 1409.453690][ T9] usb 6-1: config 127 has no interface number 2 [ 1409.453761][ T9] usb 6-1: config 127 interface 219 altsetting 2 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1409.453788][ T9] usb 6-1: config 127 interface 219 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1409.453810][ T9] usb 6-1: config 127 interface 219 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1409.453832][ T9] usb 6-1: config 127 interface 219 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 1409.453858][ T9] usb 6-1: too many endpoints for config 127 interface 124 altsetting 215: 120, using maximum allowed: 30 [ 1409.453897][ T9] usb 6-1: config 127 interface 124 altsetting 215 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 1409.453923][ T9] usb 6-1: config 127 interface 124 altsetting 215 has 2 endpoint descriptors, different from the interface descriptor's value: 120 [ 1409.453965][ T9] usb 6-1: config 127 interface 113 altsetting 5 endpoint 0x89 has invalid maxpacket 6249, setting to 64 [ 1409.453992][ T9] usb 6-1: config 127 interface 113 altsetting 5 endpoint 0x8A has invalid maxpacket 63481, setting to 64 [ 1409.454019][ T9] usb 6-1: config 127 interface 113 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 13 [ 1409.454046][ T9] usb 6-1: config 127 interface 219 has no altsetting 0 [ 1409.454064][ T9] usb 6-1: config 127 interface 124 has no altsetting 0 [ 1409.454083][ T9] usb 6-1: config 127 interface 113 has no altsetting 0 [ 1409.457048][ T9] usb 6-1: Dual-Role OTG device on HNP port [ 1409.457354][ T9] usb 6-1: New USB device found, idVendor=085a, idProduct=8025, bcdDevice=ed.38 [ 1409.457380][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1409.457397][ T9] usb 6-1: Product: 盌侰緔ۚ▿뭒☕๚環搹歴ㄺꝀ惬漕횟ᙇꁜ朗蠵ꗊ켜샕뽒묰纋괌軁⚋᯳㏨䱵ឥ戁Ջ爄㚱ᰄ㧐冰俾⍽땴鹹ኯ븆悜ៃ捄꧄鼽쬓⣇磶橱⏜뒒䅼빮螛 [ 1409.457419][ T9] usb 6-1: Manufacturer: ꍲ뜏຿㐗⢙ढ़⺅裂岢ᬡ냕棶羜㱫ё೶步쨈ꇷ蒻矌脈讻넠邏㇨߄㇄싮뻂검媨⩧䵵ꔑ콕햯ᗻ죅ᐘɔ䌎諈൷눎ᨃ㓗ᏺ쳜鵞⣦럋ණ䎌Ⓝ划ᔺ뮶臋絘邊㎟ [ 1409.457441][ T9] usb 6-1: SerialNumber: 鼇ꆪㆼ٣줜헥嚙嘦酆隊ꈧ뼗䒁⤞ [ 1409.479455][T13574] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1409.692404][ T13] hsr_slave_0: left promiscuous mode [ 1409.928584][ T13] hsr_slave_1: left promiscuous mode [ 1409.932483][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1410.046361][T13582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1410.051011][T13582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1410.224543][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1410.696543][T13563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1410.701262][T13563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1410.886629][T11828] Bluetooth: hci3: command tx timeout [ 1412.157649][ T9] keyspan_pda 6-1:127.219: Keyspan PDA - (prerenumeration) converter detected [ 1412.158229][ T9] usb 6-1: ezusb_set_reset-1 failed: -71 [ 1412.891230][T13586] delete_channel: no stack [ 1412.949135][T11828] Bluetooth: hci3: command tx timeout [ 1413.233187][ T7600] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x4 [ 1413.233228][ T7600] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x2 [ 1413.233292][ T7600] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x3 [ 1413.329424][ T7600] hid-generic 0000:3000000:0000.0012: hidraw0: HID v0.00 Device [sy] on syz0 [ 1414.591122][T13601] fido_id[13601]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1415.038831][T11828] Bluetooth: hci3: command tx timeout [ 1415.217278][ T59] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1415.237339][ T59] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1415.465857][ T59] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1415.609467][ T59] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1415.642524][ T59] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1416.329346][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1416.571049][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1417.128869][ T59] Bluetooth: hci3: command tx timeout [ 1417.756326][ T59] Bluetooth: hci6: command tx timeout [ 1419.839046][ T59] Bluetooth: hci6: command tx timeout [ 1420.171169][T13646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1420.175760][T13646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1421.473602][T13635] delete_channel: no stack [ 1421.652164][T13564] chnl_net:caif_netlink_parms(): no params data found [ 1421.908468][T11828] Bluetooth: hci6: command tx timeout [ 1423.288750][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.289392][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.988479][T11828] Bluetooth: hci6: command tx timeout [ 1427.109415][T13663] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1430.499049][ T6273] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1430.668782][ T6273] usb 1-1: Using ep0 maxpacket: 16 [ 1430.685444][ T6273] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1430.685511][ T6273] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1430.977339][ T6273] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1430.977416][ T6273] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1430.977483][ T6273] usb 1-1: Product: syz [ 1430.977544][ T6273] usb 1-1: Manufacturer: syz [ 1430.977581][ T6273] usb 1-1: SerialNumber: syz [ 1431.248549][ T6273] usb 1-1: config 0 descriptor?? [ 1431.346289][T13616] chnl_net:caif_netlink_parms(): no params data found [ 1431.556375][T13672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1431.556693][T13672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1432.662568][ T5931] usb 1-1: USB disconnect, device number 43 [ 1435.833107][ T7600] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x4 [ 1435.833143][ T7600] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x2 [ 1435.833207][ T7600] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x3 [ 1435.950292][ T7600] hid-generic 0000:3000000:0000.0013: hidraw0: HID v0.00 Device [sy] on syz0 [ 1436.150095][ T13] bridge_slave_1: left allmulticast mode [ 1436.150128][ T13] bridge_slave_1: left promiscuous mode [ 1436.150384][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1436.283748][ T13] bridge_slave_0: left allmulticast mode [ 1436.283769][ T13] bridge_slave_0: left promiscuous mode [ 1436.283998][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1436.377273][ T13] bridge_slave_1: left allmulticast mode [ 1436.377312][ T13] bridge_slave_1: left promiscuous mode [ 1436.377568][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1436.429452][ T13] bridge_slave_0: left allmulticast mode [ 1436.429475][ T13] bridge_slave_0: left promiscuous mode [ 1436.431113][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1437.312483][T13706] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1439.336307][T13700] fido_id[13700]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1440.300856][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1440.629325][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1441.492553][ T13] bond0 (unregistering): Released all slaves [ 1443.232094][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1443.359079][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1443.421116][ T13] bond0 (unregistering): Released all slaves [ 1443.459298][T13564] bridge0: port 1(bridge_slave_0) entered blocking state [ 1443.459434][T13564] bridge0: port 1(bridge_slave_0) entered disabled state [ 1443.459678][T13564] bridge_slave_0: entered allmulticast mode [ 1443.462478][T13564] bridge_slave_0: entered promiscuous mode [ 1443.478106][T13564] bridge0: port 2(bridge_slave_1) entered blocking state [ 1443.511549][T13564] bridge0: port 2(bridge_slave_1) entered disabled state [ 1443.511800][T13564] bridge_slave_1: entered allmulticast mode [ 1443.514082][T13564] bridge_slave_1: entered promiscuous mode [ 1445.090049][T13564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1445.628121][T13564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1445.631787][T13616] bridge0: port 1(bridge_slave_0) entered blocking state [ 1445.631943][T13616] bridge0: port 1(bridge_slave_0) entered disabled state [ 1445.632282][T13616] bridge_slave_0: entered allmulticast mode [ 1445.650207][T13616] bridge_slave_0: entered promiscuous mode [ 1445.650600][ T8548] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x4 [ 1445.650631][ T8548] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x2 [ 1445.650708][ T8548] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x3 [ 1445.886552][ T8548] hid-generic 0000:3000000:0000.0014: hidraw0: HID v0.00 Device [sy] on syz0 [ 1446.698237][T13754] fido_id[13754]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1446.780927][T13616] bridge0: port 2(bridge_slave_1) entered blocking state [ 1446.781060][T13616] bridge0: port 2(bridge_slave_1) entered disabled state [ 1446.781266][T13616] bridge_slave_1: entered allmulticast mode [ 1446.784016][T13616] bridge_slave_1: entered promiscuous mode [ 1448.112351][ C0] vkms_vblank_simulate: vblank timer overrun [ 1448.464277][ C0] vkms_vblank_simulate: vblank timer overrun [ 1448.772330][ C0] vkms_vblank_simulate: vblank timer overrun [ 1449.096852][ C0] vkms_vblank_simulate: vblank timer overrun [ 1449.414676][ C0] vkms_vblank_simulate: vblank timer overrun [ 1449.608361][ C0] vkms_vblank_simulate: vblank timer overrun [ 1449.790315][ C0] vkms_vblank_simulate: vblank timer overrun [ 1450.477243][ C0] vkms_vblank_simulate: vblank timer overrun [ 1450.579487][ T13] hsr_slave_0: left promiscuous mode [ 1450.618769][ T13] hsr_slave_1: left promiscuous mode [ 1450.619466][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1450.698459][ C0] vkms_vblank_simulate: vblank timer overrun [ 1450.786609][ C0] vkms_vblank_simulate: vblank timer overrun [ 1450.818717][ C0] vkms_vblank_simulate: vblank timer overrun [ 1450.967784][ C0] vkms_vblank_simulate: vblank timer overrun [ 1451.015485][ C0] vkms_vblank_simulate: vblank timer overrun [ 1451.020870][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1451.710916][ T13] hsr_slave_0: left promiscuous mode [ 1451.799002][ T13] hsr_slave_1: left promiscuous mode [ 1451.804971][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1451.812773][T13791] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1768'. [ 1452.011502][ C0] vkms_vblank_simulate: vblank timer overrun [ 1452.503152][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1453.127915][T13808] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1456.219221][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1456.673640][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1456.963235][T13820] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1775'. [ 1458.732918][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1458.891746][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1459.641127][T13564] team0: Port device team_slave_0 added [ 1459.757443][T13564] team0: Port device team_slave_1 added [ 1459.768069][T13616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1460.202442][T13616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1461.536460][T13564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1461.536472][T13564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1461.536486][T13564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1461.826789][T13564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1461.826805][T13564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1461.826830][T13564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1462.670164][T13616] team0: Port device team_slave_0 added [ 1462.690733][T13616] team0: Port device team_slave_1 added [ 1463.961649][T13866] Bluetooth: MGMT ver 1.23 [ 1464.190490][T13861] syzkaller1: entered promiscuous mode [ 1464.190520][T13861] syzkaller1: entered allmulticast mode [ 1464.229953][T13564] hsr_slave_0: entered promiscuous mode [ 1464.280460][T13564] hsr_slave_1: entered promiscuous mode [ 1464.291807][T13564] debugfs: 'hsr0' already exists in 'hsr' [ 1464.291834][T13564] Cannot create hsr debugfs directory [ 1466.680306][T13616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1466.680318][T13616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1466.680332][T13616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1466.741610][T13616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1466.741624][T13616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1466.741647][T13616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1467.712003][T13616] hsr_slave_0: entered promiscuous mode [ 1467.713326][T13616] hsr_slave_1: entered promiscuous mode [ 1467.714249][T13616] debugfs: 'hsr0' already exists in 'hsr' [ 1467.714272][T13616] Cannot create hsr debugfs directory [ 1469.687682][ T1229] usb 8-1: ezusb_ihex_firmware_download - request "keyspan_pda/xircom_pgs.fw" failed [ 1469.687707][ T1229] usb 8-1: failed to load firmware "keyspan_pda/xircom_pgs.fw" [ 1469.687822][ T1229] keyspan_pda 8-1:127.219: probe with driver keyspan_pda failed with error -2 [ 1469.688587][ T9] usb 6-1: ezusb_ihex_firmware_download - request "keyspan_pda/xircom_pgs.fw" failed [ 1469.688610][ T9] usb 6-1: failed to load firmware "keyspan_pda/xircom_pgs.fw" [ 1469.688725][ T9] keyspan_pda 6-1:127.219: probe with driver keyspan_pda failed with error -2 [ 1469.810618][ T1229] keyspan_pda 8-1:127.124: Keyspan PDA - (prerenumeration) converter detected [ 1469.814004][ T1229] usb 8-1: ezusb_set_reset-1 failed: -71 [ 1469.815605][ T1229] usb 8-1: Direct firmware load for keyspan_pda/xircom_pgs.fw failed with error -2 [ 1469.815627][ T1229] usb 8-1: Falling back to sysfs fallback for: keyspan_pda/xircom_pgs.fw [ 1469.855226][ T9] keyspan_pda 6-1:127.124: Keyspan PDA - (prerenumeration) converter detected [ 1469.858048][ T9] usb 6-1: ezusb_set_reset-1 failed: -71 [ 1471.018792][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1471.057044][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1471.070146][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1471.196714][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1471.226600][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1471.813426][T13903] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1797'. [ 1473.378106][ T13] bridge_slave_1: left allmulticast mode [ 1473.378135][ T13] bridge_slave_1: left promiscuous mode [ 1473.378492][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1473.450194][ T13] bridge_slave_0: left allmulticast mode [ 1473.450214][ T13] bridge_slave_0: left promiscuous mode [ 1473.450387][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1474.875216][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1474.891460][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1474.900391][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1474.914608][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1474.916161][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1475.028559][ T59] Bluetooth: hci3: command tx timeout [ 1475.126183][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1475.210099][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1475.263033][ T13] bond0 (unregistering): Released all slaves [ 1475.709266][ T13] hsr_slave_0: left promiscuous mode [ 1475.748579][ T13] hsr_slave_1: left promiscuous mode [ 1475.751509][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1475.781068][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1477.425964][ T59] Bluetooth: hci4: command tx timeout [ 1477.426498][ T59] Bluetooth: hci3: command tx timeout [ 1478.209885][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1478.471116][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1479.438469][T11828] Bluetooth: hci3: command tx timeout [ 1479.438503][T11828] Bluetooth: hci4: command tx timeout [ 1480.688071][ T5206] udevd[5206]: worker [13519] /devices/platform/dummy_hcd.7/usb8/8-1 is taking a long time [ 1480.688126][ T5206] udevd[5206]: worker [13386] /devices/platform/dummy_hcd.5/usb6/6-1 is taking a long time [ 1481.508488][ T59] Bluetooth: hci4: command tx timeout [ 1481.508521][ T59] Bluetooth: hci3: command tx timeout [ 1482.847888][T13900] chnl_net:caif_netlink_parms(): no params data found [ 1483.123635][ T13] bridge_slave_1: left allmulticast mode [ 1483.123668][ T13] bridge_slave_1: left promiscuous mode [ 1483.123886][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1483.189455][ T13] bridge_slave_0: left allmulticast mode [ 1483.189476][ T13] bridge_slave_0: left promiscuous mode [ 1483.189668][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1483.588584][T11828] Bluetooth: hci4: command tx timeout [ 1484.051741][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1484.271119][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1484.356513][ T13] bond0 (unregistering): Released all slaves [ 1484.429074][T13923] chnl_net:caif_netlink_parms(): no params data found [ 1484.474247][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.474316][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.010843][ T13] hsr_slave_0: left promiscuous mode [ 1485.028610][ T13] hsr_slave_1: left promiscuous mode [ 1485.033813][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1485.095467][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1486.404771][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1486.929414][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1487.938664][T13900] bridge0: port 1(bridge_slave_0) entered blocking state [ 1487.938807][T13900] bridge0: port 1(bridge_slave_0) entered disabled state [ 1487.939033][T13900] bridge_slave_0: entered allmulticast mode [ 1487.941798][T13900] bridge_slave_0: entered promiscuous mode [ 1488.088077][T13900] bridge0: port 2(bridge_slave_1) entered blocking state [ 1488.088228][T13900] bridge0: port 2(bridge_slave_1) entered disabled state [ 1488.104798][T13900] bridge_slave_1: entered allmulticast mode [ 1488.107559][T13900] bridge_slave_1: entered promiscuous mode [ 1488.432050][T14013] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1826'. [ 1488.981688][T13923] bridge0: port 1(bridge_slave_0) entered blocking state [ 1488.981856][T13923] bridge0: port 1(bridge_slave_0) entered disabled state [ 1488.982041][T13923] bridge_slave_0: entered allmulticast mode [ 1488.984740][T13923] bridge_slave_0: entered promiscuous mode [ 1489.132377][T13923] bridge0: port 2(bridge_slave_1) entered blocking state [ 1489.132516][T13923] bridge0: port 2(bridge_slave_1) entered disabled state [ 1489.132725][T13923] bridge_slave_1: entered allmulticast mode [ 1489.138984][T13923] bridge_slave_1: entered promiscuous mode [ 1489.144116][T13900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1489.308472][ T1237] usb 1-1: new low-speed USB device number 44 using dummy_hcd [ 1489.330205][T13900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1489.511309][ T1237] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1489.511394][ T1237] usb 1-1: config 0 has no interface number 0 [ 1489.511917][ T1237] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1489.512007][ T1237] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1489.512282][ T1237] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1489.512366][ T1237] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1489.665034][ T1237] usb 1-1: config 0 descriptor?? [ 1489.953607][T14016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1489.953913][T14016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1490.004459][ T1237] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1490.094483][ T1237] usb 1-1: USB disconnect, device number 44 [ 1490.272007][T13923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1491.633283][T13923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1491.753435][T13900] team0: Port device team_slave_0 added [ 1491.987933][T13900] team0: Port device team_slave_1 added [ 1492.912265][T13923] team0: Port device team_slave_0 added [ 1493.122489][T13923] team0: Port device team_slave_1 added [ 1493.124750][T13900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1493.124759][T13900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1493.124773][T13900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1493.128054][T13900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1493.128064][T13900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1493.128078][T13900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1494.261631][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1494.267084][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1494.268702][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1494.308617][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1494.315683][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1495.128145][T13923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1495.128161][T13923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1495.128185][T13923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1496.392614][T11828] Bluetooth: hci5: command tx timeout [ 1496.539860][T13923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1496.539876][T13923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1496.539902][T13923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1497.744729][T13900] hsr_slave_0: entered promiscuous mode [ 1497.745853][T13900] hsr_slave_1: entered promiscuous mode [ 1497.746380][T13900] debugfs: 'hsr0' already exists in 'hsr' [ 1497.746395][T13900] Cannot create hsr debugfs directory [ 1499.785054][T11828] Bluetooth: hci5: command tx timeout [ 1500.060651][T13923] hsr_slave_0: entered promiscuous mode [ 1500.074824][T13923] hsr_slave_1: entered promiscuous mode [ 1500.075392][T13923] debugfs: 'hsr0' already exists in 'hsr' [ 1500.075413][T13923] Cannot create hsr debugfs directory [ 1501.828716][T11828] Bluetooth: hci5: command tx timeout [ 1503.918589][T11828] Bluetooth: hci5: command tx timeout [ 1507.594731][T14077] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1508.487359][T13900] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1508.533528][T13900] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1508.625811][T13900] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1508.721020][T13900] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1508.781146][T14040] chnl_net:caif_netlink_parms(): no params data found [ 1509.623899][T13923] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1510.281751][T13923] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1510.605920][T13923] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1510.677700][T14040] bridge0: port 1(bridge_slave_0) entered blocking state [ 1510.677836][T14040] bridge0: port 1(bridge_slave_0) entered disabled state [ 1510.678081][T14040] bridge_slave_0: entered allmulticast mode [ 1510.712060][T14040] bridge_slave_0: entered promiscuous mode [ 1510.738092][T13923] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1512.058743][T14108] delete_channel: no stack [ 1512.301353][T14040] bridge0: port 2(bridge_slave_1) entered blocking state [ 1512.301484][T14040] bridge0: port 2(bridge_slave_1) entered disabled state [ 1512.301726][T14040] bridge_slave_1: entered allmulticast mode [ 1512.304528][T14040] bridge_slave_1: entered promiscuous mode [ 1512.843955][T14040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1512.867316][T14040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1513.350634][T14040] team0: Port device team_slave_0 added [ 1513.452877][T14040] team0: Port device team_slave_1 added [ 1513.739605][T14040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1513.739622][T14040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1513.739648][T14040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1513.839395][T14040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1513.839406][T14040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1513.839420][T14040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1514.311732][T14040] hsr_slave_0: entered promiscuous mode [ 1514.313056][T14040] hsr_slave_1: entered promiscuous mode [ 1514.313949][T14040] debugfs: 'hsr0' already exists in 'hsr' [ 1514.313972][T14040] Cannot create hsr debugfs directory [ 1516.299495][T13900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1517.817407][T13900] 8021q: adding VLAN 0 to HW filter on device team0 [ 1517.833086][T13923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1517.976413][T12697] bridge0: port 1(bridge_slave_0) entered blocking state [ 1517.979934][T12697] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1518.413233][T13923] 8021q: adding VLAN 0 to HW filter on device team0 [ 1519.541239][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1519.543729][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1519.772847][ T1441] bridge0: port 1(bridge_slave_0) entered blocking state [ 1519.773116][ T1441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1520.018686][T12697] bridge0: port 2(bridge_slave_1) entered blocking state [ 1520.018978][T12697] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1520.658877][T14159] delete_channel: no stack [ 1520.711613][T14170] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1863'. [ 1524.470679][ T8548] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x4 [ 1524.470725][ T8548] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x2 [ 1524.470802][ T8548] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x3 [ 1524.475257][ T8548] hid-generic 0000:3000000:0000.0015: hidraw0: HID v0.00 Device [sy] on syz0 [ 1524.616175][T14175] fido_id[14175]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1529.242932][T14040] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1529.383224][T14040] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1529.473578][T14040] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1529.570308][T14040] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1530.243388][T13923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1530.629386][ T9] usb 6-1: ezusb_ihex_firmware_download - request "keyspan_pda/xircom_pgs.fw" failed [ 1530.629414][ T9] usb 6-1: failed to load firmware "keyspan_pda/xircom_pgs.fw" [ 1530.629525][ T9] keyspan_pda 6-1:127.124: probe with driver keyspan_pda failed with error -2 [ 1530.936816][ T1229] usb 8-1: ezusb_ihex_firmware_download - request "keyspan_pda/xircom_pgs.fw" failed [ 1530.936843][ T1229] usb 8-1: failed to load firmware "keyspan_pda/xircom_pgs.fw" [ 1530.936971][ T1229] keyspan_pda 8-1:127.124: probe with driver keyspan_pda failed with error -2 [ 1531.054785][ T9] keyspan_pda 6-1:127.113: Keyspan PDA - (prerenumeration) converter detected [ 1531.055926][ T1229] keyspan_pda 8-1:127.113: Keyspan PDA - (prerenumeration) converter detected [ 1531.056158][ T9] usb 6-1: ezusb_set_reset-1 failed: -71 [ 1531.056330][ T1229] usb 8-1: ezusb_set_reset-1 failed: -71 [ 1531.057154][ T9] usb 6-1: Direct firmware load for keyspan_pda/xircom_pgs.fw failed with error -2 [ 1531.057165][ T9] usb 6-1: Falling back to sysfs fallback for: keyspan_pda/xircom_pgs.fw [ 1531.135095][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1531.239723][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1531.249839][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1531.268801][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1531.269668][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1532.633156][T14234] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 1532.633982][T14235] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1533.430823][ T59] Bluetooth: hci3: command tx timeout [ 1533.654586][T14242] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR [ 1534.253044][T14040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1535.665710][ T59] Bluetooth: hci3: command tx timeout [ 1536.337378][T11828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1536.352152][T11828] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1536.354276][T11828] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1536.355448][T11828] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1536.356214][T11828] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1537.184040][T14040] 8021q: adding VLAN 0 to HW filter on device team0 [ 1537.442407][T12697] bridge0: port 1(bridge_slave_0) entered blocking state [ 1537.442593][T12697] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1537.688944][ T1237] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1537.750091][ T59] Bluetooth: hci3: command tx timeout [ 1537.806084][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 1537.806291][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1538.599846][ T1237] usb 1-1: no configurations [ 1538.599915][ T1237] usb 1-1: can't read configurations, error -22 [ 1538.689809][ T59] Bluetooth: hci4: command tx timeout [ 1538.785344][T14225] chnl_net:caif_netlink_parms(): no params data found [ 1538.798689][ T1237] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1538.949706][ T1237] usb 1-1: no configurations [ 1538.949728][ T1237] usb 1-1: can't read configurations, error -22 [ 1538.950108][ T1237] usb usb1-port1: attempt power cycle [ 1539.077910][ T1441] bridge_slave_1: left allmulticast mode [ 1539.077945][ T1441] bridge_slave_1: left promiscuous mode [ 1539.078222][ T1441] bridge0: port 2(bridge_slave_1) entered disabled state [ 1539.159691][ T1441] bridge_slave_0: left allmulticast mode [ 1539.159714][ T1441] bridge_slave_0: left promiscuous mode [ 1539.159899][ T1441] bridge0: port 1(bridge_slave_0) entered disabled state [ 1539.288465][ T1237] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1539.313038][ T1237] usb 1-1: no configurations [ 1539.313058][ T1237] usb 1-1: can't read configurations, error -22 [ 1539.438845][ T1237] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1539.479592][ T1237] usb 1-1: no configurations [ 1539.479613][ T1237] usb 1-1: can't read configurations, error -22 [ 1539.480132][ T1237] usb usb1-port1: unable to enumerate USB device [ 1539.828617][ T59] Bluetooth: hci3: command tx timeout [ 1540.737736][ T59] Bluetooth: hci4: command tx timeout [ 1542.301423][ T1441] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1542.402119][ T1441] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1542.426834][ T1441] bond0 (unregistering): Released all slaves [ 1542.788500][ T59] Bluetooth: hci4: command tx timeout [ 1544.296417][ T1441] hsr_slave_0: left promiscuous mode [ 1544.324813][T14317] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1890'. [ 1544.354899][ T1441] hsr_slave_1: left promiscuous mode [ 1544.355964][ T1441] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1545.356760][T11828] Bluetooth: hci4: command tx timeout [ 1545.378527][ T1441] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1545.932084][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.932507][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.970485][ T6696] kworker/u8:15 (6696) used greatest stack depth: 12936 bytes left [ 1546.815427][T14325] delete_channel: no stack [ 1548.650348][ T1441] team0 (unregistering): Port device team_slave_1 removed [ 1549.323711][ T1441] team0 (unregistering): Port device team_slave_0 removed [ 1554.860359][T11828] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1554.914120][T11828] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1554.920079][T11828] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1554.933348][T10103] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1554.937913][T11828] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1554.940762][T11828] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1555.146745][T10103] usb 1-1: no configurations [ 1555.146885][T10103] usb 1-1: can't read configurations, error -22 [ 1555.324350][T10103] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1555.529044][T10103] usb 1-1: no configurations [ 1555.529121][T10103] usb 1-1: can't read configurations, error -22 [ 1555.536409][T10103] usb usb1-port1: attempt power cycle [ 1555.868449][T10103] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1555.910183][T10103] usb 1-1: no configurations [ 1555.910204][T10103] usb 1-1: can't read configurations, error -22 [ 1556.038657][T10103] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1556.073120][T10103] usb 1-1: no configurations [ 1556.073140][T10103] usb 1-1: can't read configurations, error -22 [ 1556.073584][T10103] usb usb1-port1: unable to enumerate USB device [ 1556.599186][T14225] bridge0: port 1(bridge_slave_0) entered blocking state [ 1556.599315][T14225] bridge0: port 1(bridge_slave_0) entered disabled state [ 1556.599488][T14225] bridge_slave_0: entered allmulticast mode [ 1556.601265][T14225] bridge_slave_0: entered promiscuous mode [ 1556.611257][T14225] bridge0: port 2(bridge_slave_1) entered blocking state [ 1556.611392][T14225] bridge0: port 2(bridge_slave_1) entered disabled state [ 1556.611579][T14225] bridge_slave_1: entered allmulticast mode [ 1556.614178][T14225] bridge_slave_1: entered promiscuous mode [ 1556.979638][T14225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1556.996138][T14225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1557.029867][T11828] Bluetooth: hci6: command tx timeout [ 1557.848657][T14225] team0: Port device team_slave_0 added [ 1558.041590][T14225] team0: Port device team_slave_1 added [ 1558.430171][T14265] chnl_net:caif_netlink_parms(): no params data found [ 1558.435486][T14225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1558.435497][T14225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1558.435512][T14225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1558.590369][T14225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1558.590386][T14225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1558.590409][T14225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1559.192379][T11828] Bluetooth: hci6: command tx timeout [ 1559.827471][T14390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1559.828034][T14390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1561.757912][T11828] Bluetooth: hci6: command tx timeout [ 1561.940599][T14225] hsr_slave_0: entered promiscuous mode [ 1561.942021][T14225] hsr_slave_1: entered promiscuous mode [ 1561.942956][T14225] debugfs: 'hsr0' already exists in 'hsr' [ 1561.942977][T14225] Cannot create hsr debugfs directory [ 1563.222799][T14265] bridge0: port 1(bridge_slave_0) entered blocking state [ 1563.223015][T14265] bridge0: port 1(bridge_slave_0) entered disabled state [ 1563.223218][T14265] bridge_slave_0: entered allmulticast mode [ 1563.240525][T14265] bridge_slave_0: entered promiscuous mode [ 1563.295699][T14265] bridge0: port 2(bridge_slave_1) entered blocking state [ 1563.295862][T14265] bridge0: port 2(bridge_slave_1) entered disabled state [ 1563.296058][T14265] bridge_slave_1: entered allmulticast mode [ 1563.308519][T14265] bridge_slave_1: entered promiscuous mode [ 1563.597404][T14421] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1563.829105][T11828] Bluetooth: hci6: command tx timeout [ 1571.018815][ C0] vkms_vblank_simulate: vblank timer overrun [ 1571.343201][T14422] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 1571.605114][ C0] vkms_vblank_simulate: vblank timer overrun [ 1571.699844][T14422] usb 1-1: not running at top speed; connect to a high speed hub [ 1571.702816][T14422] usb 1-1: config 127 has an invalid interface number: 219 but max is 1 [ 1571.702844][T14422] usb 1-1: config 127 has an invalid interface number: 124 but max is 1 [ 1571.702865][T14422] usb 1-1: config 127 has an invalid interface number: 113 but max is 1 [ 1571.702886][T14422] usb 1-1: config 127 has an invalid descriptor of length 189, skipping remainder of the config [ 1571.702906][T14422] usb 1-1: config 127 has 3 interfaces, different from the descriptor's value: 2 [ 1571.702928][T14422] usb 1-1: config 127 has no interface number 0 [ 1571.702944][T14422] usb 1-1: config 127 has no interface number 1 [ 1571.702961][T14422] usb 1-1: config 127 has no interface number 2 [ 1571.703039][T14422] usb 1-1: config 127 interface 219 altsetting 2 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1571.703066][T14422] usb 1-1: config 127 interface 219 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1571.703088][T14422] usb 1-1: config 127 interface 219 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1571.703110][T14422] usb 1-1: config 127 interface 219 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 1571.703137][T14422] usb 1-1: too many endpoints for config 127 interface 124 altsetting 215: 120, using maximum allowed: 30 [ 1571.703178][T14422] usb 1-1: config 127 interface 124 altsetting 215 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 1571.703205][T14422] usb 1-1: config 127 interface 124 altsetting 215 has 2 endpoint descriptors, different from the interface descriptor's value: 120 [ 1571.703247][T14422] usb 1-1: config 127 interface 113 altsetting 5 endpoint 0x89 has invalid maxpacket 6249, setting to 64 [ 1571.703274][T14422] usb 1-1: config 127 interface 113 altsetting 5 endpoint 0x8A has invalid maxpacket 63481, setting to 64 [ 1571.703305][T14422] usb 1-1: config 127 interface 113 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 1571.703331][T14422] usb 1-1: config 127 interface 219 has no altsetting 0 [ 1571.703349][T14422] usb 1-1: config 127 interface 124 has no altsetting 0 [ 1571.703368][T14422] usb 1-1: config 127 interface 113 has no altsetting 0 [ 1571.895956][T14422] usb 1-1: Dual-Role OTG device on HNP port [ 1571.903173][T14422] usb 1-1: New USB device found, idVendor=085a, idProduct=8025, bcdDevice=ed.38 [ 1571.903202][T14422] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1571.903222][T14422] usb 1-1: Product: 盌侰緔ۚ▿뭒☕๚環搹歴ㄺꝀ惬漕횟ᙇꁜ朗蠵ꗊ켜샕뽒묰纋괌軁⚋᯳㏨䱵ឥ戁Ջ爄㚱ᰄ㧐冰俾⍽땴鹹ኯ븆悜ៃ捄꧄鼽쬓⣇磶橱⏜뒒䅼빮螛 [ 1571.903248][T14422] usb 1-1: Manufacturer: ꍲ뜏຿㐗⢙ढ़⺅裂岢ᬡ냕棶羜㱫ё೶步쨈ꇷ蒻矌脈讻넠邏㇨߄㇄싮뻂검媨⩧䵵ꔑ콕햯ᗻ죅ᐘɔ䌎諈൷눎ᨃ㓗ᏺ쳜鵞⣦럋ණ䎌Ⓝ划ᔺ뮶臋絘邊㎟ [ 1571.903278][T14422] usb 1-1: SerialNumber: 鼇ꆪㆼ٣줜헥嚙嘦酆隊ꈧ뼗䒁⤞ [ 1571.957209][T14432] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1572.369597][ C0] vkms_vblank_simulate: vblank timer overrun [ 1572.503205][ C0] vkms_vblank_simulate: vblank timer overrun [ 1572.577642][T14439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1572.582549][T14439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1572.722139][ C0] vkms_vblank_simulate: vblank timer overrun [ 1573.811415][T14265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1574.354642][T14265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1574.469456][ C0] vkms_vblank_simulate: vblank timer overrun [ 1574.661506][T14422] keyspan_pda 1-1:127.219: Keyspan PDA - (prerenumeration) converter detected [ 1574.666114][T14422] usb 1-1: ezusb_set_reset-1 failed: -71 [ 1576.314479][T14265] team0: Port device team_slave_0 added [ 1577.121809][T14265] team0: Port device team_slave_1 added [ 1577.188060][T14369] chnl_net:caif_netlink_parms(): no params data found [ 1577.780988][T14265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1577.781006][T14265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1577.781031][T14265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1579.091238][T14265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1579.091257][T14265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1579.091284][T14265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1581.810384][T14265] hsr_slave_0: entered promiscuous mode [ 1581.834160][T14265] hsr_slave_1: entered promiscuous mode [ 1581.839241][T14265] debugfs: 'hsr0' already exists in 'hsr' [ 1581.839274][T14265] Cannot create hsr debugfs directory [ 1581.839644][T14369] bridge0: port 1(bridge_slave_0) entered blocking state [ 1581.839775][T14369] bridge0: port 1(bridge_slave_0) entered disabled state [ 1581.839979][T14369] bridge_slave_0: entered allmulticast mode [ 1581.843436][T14369] bridge_slave_0: entered promiscuous mode [ 1581.928506][T14369] bridge0: port 2(bridge_slave_1) entered blocking state [ 1581.928653][T14369] bridge0: port 2(bridge_slave_1) entered disabled state [ 1581.928874][T14369] bridge_slave_1: entered allmulticast mode [ 1581.984990][T14369] bridge_slave_1: entered promiscuous mode [ 1583.484322][T14369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1583.787117][T14369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1584.061321][ C0] vkms_vblank_simulate: vblank timer overrun [ 1584.553438][T14369] team0: Port device team_slave_0 added [ 1584.721880][T14504] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1585.101383][ C0] vkms_vblank_simulate: vblank timer overrun [ 1585.125129][ C0] vkms_vblank_simulate: vblank timer overrun [ 1585.619386][ C0] vkms_vblank_simulate: vblank timer overrun [ 1586.171357][ C0] vkms_vblank_simulate: vblank timer overrun [ 1586.857244][ C0] vkms_vblank_simulate: vblank timer overrun [ 1587.282543][T14369] team0: Port device team_slave_1 added [ 1588.586054][T14520] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1938'. [ 1588.707776][ T5206] udevd[5206]: worker [13519] /devices/platform/dummy_hcd.7/usb8/8-1 timeout; kill it [ 1588.707910][ T5206] udevd[5206]: seq 33042 '/devices/platform/dummy_hcd.7/usb8/8-1' killed [ 1588.747663][ T5206] udevd[5206]: worker [13519] terminated by signal 9 (Killed) [ 1588.747717][ T5206] udevd[5206]: worker [13519] failed while handling '/devices/platform/dummy_hcd.7/usb8/8-1' [ 1589.081109][T14369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1589.081126][T14369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1589.081152][T14369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1589.145000][T14369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1589.145017][T14369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1589.145043][T14369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1589.255399][T14225] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1589.431017][T14225] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1589.647454][T14225] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1589.725947][T14369] hsr_slave_0: entered promiscuous mode [ 1589.747998][T14369] hsr_slave_1: entered promiscuous mode [ 1589.755372][T14369] debugfs: 'hsr0' already exists in 'hsr' [ 1589.755400][T14369] Cannot create hsr debugfs directory [ 1589.846594][T14225] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1590.563477][ T1441] bridge_slave_1: left allmulticast mode [ 1590.563508][ T1441] bridge_slave_1: left promiscuous mode [ 1590.563782][ T1441] bridge0: port 2(bridge_slave_1) entered disabled state [ 1590.640159][ T1441] bridge_slave_0: left allmulticast mode [ 1590.640192][ T1441] bridge_slave_0: left promiscuous mode [ 1590.640482][ T1441] bridge0: port 1(bridge_slave_0) entered disabled state [ 1590.744004][ T1441] bridge_slave_1: left allmulticast mode [ 1590.744036][ T1441] bridge_slave_1: left promiscuous mode [ 1590.744335][ T1441] bridge0: port 2(bridge_slave_1) entered disabled state [ 1591.022330][ T1441] bridge_slave_0: left allmulticast mode [ 1591.022400][ T1441] bridge_slave_0: left promiscuous mode [ 1591.022955][ T1441] bridge0: port 1(bridge_slave_0) entered disabled state [ 1592.070435][ T9] usb 6-1: ezusb_ihex_firmware_download - request "keyspan_pda/xircom_pgs.fw" failed [ 1592.078460][ T9] usb 6-1: failed to load firmware "keyspan_pda/xircom_pgs.fw" [ 1592.078858][ T9] keyspan_pda 6-1:127.113: probe with driver keyspan_pda failed with error -2 [ 1592.138608][ T1229] usb 8-1: ezusb_ihex_firmware_download - request "keyspan_pda/xircom_pgs.fw" failed [ 1592.138634][ T1229] usb 8-1: failed to load firmware "keyspan_pda/xircom_pgs.fw" [ 1592.138817][ T1229] keyspan_pda 8-1:127.113: probe with driver keyspan_pda failed with error -2 [ 1592.158429][T14422] usb 1-1: ezusb_ihex_firmware_download - request "keyspan_pda/xircom_pgs.fw" failed [ 1592.158454][T14422] usb 1-1: failed to load firmware "keyspan_pda/xircom_pgs.fw" [ 1592.158576][T14422] keyspan_pda 1-1:127.219: probe with driver keyspan_pda failed with error -2 [ 1592.171160][ T9] usb 6-1: USB disconnect, device number 9 [ 1592.192852][T14422] keyspan_pda 1-1:127.124: Keyspan PDA - (prerenumeration) converter detected [ 1592.193373][T14422] usb 1-1: ezusb_set_reset-1 failed: -71 [ 1592.194844][T14422] usb 1-1: Direct firmware load for keyspan_pda/xircom_pgs.fw failed with error -2 [ 1592.194865][T14422] usb 1-1: Falling back to sysfs fallback for: keyspan_pda/xircom_pgs.fw [ 1592.276801][ T1229] usb 8-1: USB disconnect, device number 8 [ 1592.668582][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1593.684781][T14548] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1593.709776][T14548] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1593.754398][T14548] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1593.758776][T14548] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1595.908413][T11828] Bluetooth: hci3: command tx timeout [ 1597.988402][T11828] Bluetooth: hci3: command tx timeout [ 1600.068844][T11828] Bluetooth: hci3: command tx timeout [ 1600.343764][T14548] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1600.364751][T14548] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1600.367458][T14548] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1600.384916][T14548] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1600.385868][T14548] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1601.411760][ T1441] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1601.450716][ T1441] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1601.479010][ T1441] bond0 (unregistering): Released all slaves [ 1602.467663][T14548] Bluetooth: hci3: command tx timeout [ 1602.537786][T14548] Bluetooth: hci0: command tx timeout [ 1604.109187][ T1441] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1604.170309][ T1441] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1604.193583][ T1441] bond0 (unregistering): Released all slaves [ 1604.589889][T14548] Bluetooth: hci0: command tx timeout [ 1604.927613][T14587] Bluetooth: MGMT ver 1.23 [ 1605.510963][T13941] syz_tun (unregistering): left allmulticast mode [ 1605.678699][ T1229] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 1605.841300][ T1229] usb 8-1: not running at top speed; connect to a high speed hub [ 1605.842709][ T1229] usb 8-1: config 127 has an invalid interface number: 219 but max is 1 [ 1605.842735][ T1229] usb 8-1: config 127 has an invalid interface number: 124 but max is 1 [ 1605.842756][ T1229] usb 8-1: config 127 has an invalid interface number: 113 but max is 1 [ 1605.842776][ T1229] usb 8-1: config 127 has an invalid descriptor of length 189, skipping remainder of the config [ 1605.842796][ T1229] usb 8-1: config 127 has 3 interfaces, different from the descriptor's value: 2 [ 1605.842817][ T1229] usb 8-1: config 127 has no interface number 0 [ 1605.842834][ T1229] usb 8-1: config 127 has no interface number 1 [ 1605.842851][ T1229] usb 8-1: config 127 has no interface number 2 [ 1605.842926][ T1229] usb 8-1: config 127 interface 219 altsetting 2 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1605.842953][ T1229] usb 8-1: config 127 interface 219 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1605.842974][ T1229] usb 8-1: config 127 interface 219 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1605.842995][ T1229] usb 8-1: config 127 interface 219 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 1605.843022][ T1229] usb 8-1: too many endpoints for config 127 interface 124 altsetting 215: 120, using maximum allowed: 30 [ 1605.843062][ T1229] usb 8-1: config 127 interface 124 altsetting 215 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 1605.843089][ T1229] usb 8-1: config 127 interface 124 altsetting 215 has 2 endpoint descriptors, different from the interface descriptor's value: 120 [ 1605.843131][ T1229] usb 8-1: config 127 interface 113 altsetting 5 endpoint 0x89 has invalid maxpacket 6249, setting to 64 [ 1605.843158][ T1229] usb 8-1: config 127 interface 113 altsetting 5 endpoint 0x8A has invalid maxpacket 63481, setting to 64 [ 1605.843184][ T1229] usb 8-1: config 127 interface 113 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 1605.843212][ T1229] usb 8-1: config 127 interface 219 has no altsetting 0 [ 1605.843231][ T1229] usb 8-1: config 127 interface 124 has no altsetting 0 [ 1605.843249][ T1229] usb 8-1: config 127 interface 113 has no altsetting 0 [ 1605.859030][ T1229] usb 8-1: Dual-Role OTG device on HNP port [ 1605.859369][ T1229] usb 8-1: New USB device found, idVendor=085a, idProduct=8025, bcdDevice=ed.38 [ 1605.859394][ T1229] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1605.859413][ T1229] usb 8-1: Product: 盌侰緔ۚ▿뭒☕๚環搹歴ㄺꝀ惬漕횟ᙇꁜ朗蠵ꗊ켜샕뽒묰纋괌軁⚋᯳㏨䱵ឥ戁Ջ爄㚱ᰄ㧐冰俾⍽땴鹹ኯ븆悜ៃ捄꧄鼽쬓⣇磶橱⏜뒒䅼빮螛 [ 1605.859438][ T1229] usb 8-1: Manufacturer: ꍲ뜏຿㐗⢙ढ़⺅裂岢ᬡ냕棶羜㱫ё೶步쨈ꇷ蒻矌脈讻넠邏㇨߄㇄싮뻂검媨⩧䵵ꔑ콕햯ᗻ죅ᐘɔ䌎諈൷눎ᨃ㓗ᏺ쳜鵞⣦럋ණ䎌Ⓝ划ᔺ뮶臋絘邊㎟ [ 1605.859463][ T1229] usb 8-1: SerialNumber: 鼇ꆪㆼ٣줜헥嚙嘦酆隊ꈧ뼗䒁⤞ [ 1605.866371][T14591] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1606.440624][T14596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1606.445623][T14596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1607.310914][T14548] Bluetooth: hci0: command tx timeout [ 1607.387623][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.387743][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.768901][ T1441] hsr_slave_0: left promiscuous mode [ 1607.808729][ T1441] hsr_slave_1: left promiscuous mode [ 1607.810610][ T1441] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1607.966722][ T1441] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1608.188579][ T1441] hsr_slave_0: left promiscuous mode [ 1608.228989][ T1441] hsr_slave_1: left promiscuous mode [ 1608.230043][ T1441] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1608.257087][ T1441] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1608.485890][ T1229] keyspan_pda 8-1:127.219: Keyspan PDA - (prerenumeration) converter detected [ 1608.505404][ T1229] usb 8-1: ezusb_set_reset-1 failed: -71 [ 1609.040472][T14593] delete_channel: no stack [ 1609.358657][T14548] Bluetooth: hci0: command tx timeout [ 1611.879334][ T1441] team0 (unregistering): Port device team_slave_1 removed [ 1612.189420][ T1441] team0 (unregistering): Port device team_slave_0 removed [ 1613.596205][T11828] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1613.600333][T11828] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1613.601913][T11828] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1613.603015][T11828] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1613.607008][T11828] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1615.698773][T11828] Bluetooth: hci5: command tx timeout [ 1616.109375][ T1441] team0 (unregistering): Port device team_slave_1 removed [ 1616.409753][ T1441] team0 (unregistering): Port device team_slave_0 removed [ 1617.748526][T11828] Bluetooth: hci5: command tx timeout [ 1619.838533][T11828] Bluetooth: hci5: command tx timeout [ 1621.908497][T11828] Bluetooth: hci5: command tx timeout [ 1622.058905][T14624] delete_channel: no stack [ 1624.959250][T14567] chnl_net:caif_netlink_parms(): no params data found [ 1625.878450][T14545] chnl_net:caif_netlink_parms(): no params data found [ 1625.979024][T14614] chnl_net:caif_netlink_parms(): no params data found [ 1627.358010][T14661] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nullb0": -EINTR [ 1628.531671][T14567] bridge0: port 1(bridge_slave_0) entered blocking state [ 1628.531889][T14567] bridge0: port 1(bridge_slave_0) entered disabled state [ 1628.532164][T14567] bridge_slave_0: entered allmulticast mode [ 1628.535117][T14567] bridge_slave_0: entered promiscuous mode [ 1628.736926][T14567] bridge0: port 2(bridge_slave_1) entered blocking state [ 1628.737004][T14567] bridge0: port 2(bridge_slave_1) entered disabled state [ 1628.737139][T14567] bridge_slave_1: entered allmulticast mode [ 1628.761566][T14567] bridge_slave_1: entered promiscuous mode [ 1630.411771][T14686] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nullb0": -EINTR [ 1630.575249][T14689] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1630.761763][T14567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1631.617179][T14567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1631.617984][T14545] bridge0: port 1(bridge_slave_0) entered blocking state [ 1631.620496][T14545] bridge0: port 1(bridge_slave_0) entered disabled state [ 1631.620731][T14545] bridge_slave_0: entered allmulticast mode [ 1631.624168][T14545] bridge_slave_0: entered promiscuous mode [ 1631.652166][T14614] bridge0: port 1(bridge_slave_0) entered blocking state [ 1631.652303][T14614] bridge0: port 1(bridge_slave_0) entered disabled state [ 1631.652567][T14614] bridge_slave_0: entered allmulticast mode [ 1631.663034][T14614] bridge_slave_0: entered promiscuous mode [ 1631.869303][T14698] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1969'. [ 1633.226362][T14545] bridge0: port 2(bridge_slave_1) entered blocking state [ 1633.226461][T14545] bridge0: port 2(bridge_slave_1) entered disabled state [ 1633.226609][T14545] bridge_slave_1: entered allmulticast mode [ 1633.228113][T14545] bridge_slave_1: entered promiscuous mode [ 1633.236945][T14614] bridge0: port 2(bridge_slave_1) entered blocking state [ 1633.237077][T14614] bridge0: port 2(bridge_slave_1) entered disabled state [ 1633.237310][T14614] bridge_slave_1: entered allmulticast mode [ 1633.240098][T14614] bridge_slave_1: entered promiscuous mode [ 1633.998318][T14706] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 1633.999809][ T5206] udevd[5206]: worker [13590] /devices/platform/dummy_hcd.0/usb1/1-1 is taking a long time [ 1638.030924][T14567] team0: Port device team_slave_0 added [ 1639.107600][T14567] team0: Port device team_slave_1 added [ 1639.129778][T14545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1639.156134][T14614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1639.451297][T14545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1639.463033][T14614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1640.713925][T14752] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1980'. [ 1641.089815][ T57] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1641.167122][T14567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1641.167139][T14567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1641.167162][T14567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1641.510631][T14567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1641.510650][T14567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1641.510677][T14567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1641.586285][T14545] team0: Port device team_slave_0 added [ 1641.603200][T14614] team0: Port device team_slave_0 added [ 1641.863136][ T57] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1641.927646][T14545] team0: Port device team_slave_1 added [ 1641.930022][T14614] team0: Port device team_slave_1 added [ 1644.577434][ T57] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1645.192142][T14567] hsr_slave_0: entered promiscuous mode [ 1645.193533][T14567] hsr_slave_1: entered promiscuous mode [ 1645.198745][T14567] debugfs: 'hsr0' already exists in 'hsr' [ 1645.198773][T14567] Cannot create hsr debugfs directory [ 1645.222073][T14614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1645.222089][T14614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1645.222115][T14614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1645.223730][T14545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1645.223743][T14545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1645.223767][T14545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1645.287702][T14614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1645.287719][T14614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1645.287744][T14614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1645.293031][T14545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1645.293048][T14545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1645.293072][T14545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1645.791120][ T57] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1648.670255][T14614] hsr_slave_0: entered promiscuous mode [ 1648.703160][T14614] hsr_slave_1: entered promiscuous mode [ 1648.704506][T14614] debugfs: 'hsr0' already exists in 'hsr' [ 1648.704529][T14614] Cannot create hsr debugfs directory [ 1648.750238][T14545] hsr_slave_0: entered promiscuous mode [ 1648.751630][T14545] hsr_slave_1: entered promiscuous mode [ 1648.752573][T14545] debugfs: 'hsr0' already exists in 'hsr' [ 1648.752597][T14545] Cannot create hsr debugfs directory [ 1648.815552][ T5925] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x4 [ 1648.815574][ T5925] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x2 [ 1648.815611][ T5925] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x3 [ 1648.830058][ T5925] hid-generic 0000:3000000:0000.0016: hidraw0: HID v0.00 Device [sy] on syz0 [ 1649.134548][T14799] fido_id[14799]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1652.783463][T14548] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1652.832164][T14548] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1652.833930][T14548] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1652.836022][T14548] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1652.836852][T14548] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1653.578303][T14422] usb 1-1: ezusb_ihex_firmware_download - request "keyspan_pda/xircom_pgs.fw" failed [ 1653.578330][T14422] usb 1-1: failed to load firmware "keyspan_pda/xircom_pgs.fw" [ 1653.578451][T14422] keyspan_pda 1-1:127.124: probe with driver keyspan_pda failed with error -2 [ 1653.610906][ T1229] usb 8-1: ezusb_ihex_firmware_download - request "keyspan_pda/xircom_pgs.fw" failed [ 1653.610932][ T1229] usb 8-1: failed to load firmware "keyspan_pda/xircom_pgs.fw" [ 1653.611054][ T1229] keyspan_pda 8-1:127.219: probe with driver keyspan_pda failed with error -2 [ 1653.619420][T14422] keyspan_pda 1-1:127.113: Keyspan PDA - (prerenumeration) converter detected [ 1653.620235][T14422] usb 1-1: ezusb_set_reset-1 failed: -71 [ 1653.621938][T14422] usb 1-1: Direct firmware load for keyspan_pda/xircom_pgs.fw failed with error -2 [ 1653.621960][T14422] usb 1-1: Falling back to sysfs fallback for: keyspan_pda/xircom_pgs.fw [ 1653.633163][ T1229] keyspan_pda 8-1:127.124: Keyspan PDA - (prerenumeration) converter detected [ 1653.635895][ T1229] usb 8-1: ezusb_set_reset-1 failed: -71 [ 1653.938564][T14567] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1654.050161][T14567] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1654.350958][T14567] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1654.447775][T14567] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1654.949609][T14548] Bluetooth: hci3: command tx timeout [ 1656.765395][ T57] bridge_slave_1: left allmulticast mode [ 1656.765429][ T57] bridge_slave_1: left promiscuous mode [ 1656.765719][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 1656.819447][ T57] bridge_slave_0: left allmulticast mode [ 1656.819469][ T57] bridge_slave_0: left promiscuous mode [ 1656.819657][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 1656.912912][ T57] bridge_slave_1: left allmulticast mode [ 1656.912945][ T57] bridge_slave_1: left promiscuous mode [ 1656.913205][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 1657.031613][T14548] Bluetooth: hci3: command tx timeout [ 1657.258837][ T57] bridge_slave_0: left allmulticast mode [ 1657.268397][ T57] bridge_slave_0: left promiscuous mode [ 1657.299442][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 1657.467079][ T57] bridge_slave_1: left allmulticast mode [ 1657.467116][ T57] bridge_slave_1: left promiscuous mode [ 1657.467380][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 1657.530043][ T57] bridge_slave_0: left allmulticast mode [ 1657.530143][ T57] bridge_slave_0: left promiscuous mode [ 1657.530408][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 1657.632723][ T57] bridge_slave_1: left allmulticast mode [ 1657.632757][ T57] bridge_slave_1: left promiscuous mode [ 1657.633012][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 1657.730033][ T57] bridge_slave_0: left allmulticast mode [ 1657.730067][ T57] bridge_slave_0: left promiscuous mode [ 1657.730329][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 1658.380626][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1658.463394][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1658.531160][ T57] bond0 (unregistering): Released all slaves [ 1658.819417][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1658.939062][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1659.006093][ T57] bond0 (unregistering): Released all slaves [ 1659.108768][T14548] Bluetooth: hci3: command tx timeout [ 1660.970090][T11828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1660.993074][T11828] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1660.997530][T11828] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1661.001673][T11828] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1661.012760][T11828] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1661.208807][T14548] Bluetooth: hci3: command tx timeout [ 1661.459374][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1661.519292][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1661.553616][ T57] bond0 (unregistering): Released all slaves [ 1661.839225][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1661.924595][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1661.993978][ T57] bond0 (unregistering): Released all slaves [ 1663.111485][T14548] Bluetooth: hci4: command tx timeout [ 1663.227571][T14816] chnl_net:caif_netlink_parms(): no params data found [ 1663.867717][ C1] vkms_vblank_simulate: vblank timer overrun [ 1664.107493][ C1] vkms_vblank_simulate: vblank timer overrun [ 1664.303411][ C1] vkms_vblank_simulate: vblank timer overrun [ 1664.752949][ C1] vkms_vblank_simulate: vblank timer overrun [ 1665.188413][T14548] Bluetooth: hci4: command tx timeout [ 1665.806667][T14878] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2011'. [ 1666.924171][ C1] vkms_vblank_simulate: vblank timer overrun [ 1667.053368][T14891] netlink: 'syz.7.2014': attribute type 1 has an invalid length. [ 1667.108963][ C1] vkms_vblank_simulate: vblank timer overrun [ 1667.321236][T14548] Bluetooth: hci4: command tx timeout [ 1667.730117][ C1] vkms_vblank_simulate: vblank timer overrun [ 1667.808610][ C1] vkms_vblank_simulate: vblank timer overrun [ 1668.164785][ C1] vkms_vblank_simulate: vblank timer overrun [ 1668.271862][T14898] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2016'. [ 1668.286849][T14898] sg_write: data in/out 220/14 bytes for SCSI command 0x0-- guessing data in; [ 1668.286849][T14898] program syz.7.2016 not setting count and/or reply_len properly [ 1669.000796][ C1] vkms_vblank_simulate: vblank timer overrun [ 1669.046138][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.046207][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.374737][T14548] Bluetooth: hci4: command tx timeout [ 1669.480991][T14897] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2015'. [ 1669.822255][T14903] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1672.848449][ T5206] udevd[5206]: worker [13386] /devices/platform/dummy_hcd.7/usb8/8-1 is taking a long time [ 1674.739838][T14816] bridge0: port 1(bridge_slave_0) entered blocking state [ 1674.739975][T14816] bridge0: port 1(bridge_slave_0) entered disabled state [ 1674.740101][T14816] bridge_slave_0: entered allmulticast mode [ 1674.741801][T14816] bridge_slave_0: entered promiscuous mode [ 1674.759864][T14816] bridge0: port 2(bridge_slave_1) entered blocking state [ 1674.760016][T14816] bridge0: port 2(bridge_slave_1) entered disabled state [ 1674.760278][T14816] bridge_slave_1: entered allmulticast mode [ 1674.770064][T14816] bridge_slave_1: entered promiscuous mode [ 1679.950654][T14816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1680.191836][T11828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1680.219796][T11828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1680.248527][T11828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1680.253081][T11828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1680.253865][T11828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1680.583696][T14816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1681.117340][T14925] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2023'. [ 1681.117376][T14925] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2023'. [ 1681.198628][ T57] hsr_slave_0: left promiscuous mode [ 1681.257670][ T57] hsr_slave_1: left promiscuous mode [ 1681.258929][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1681.299495][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1681.307021][T14927] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1681.900399][ T57] hsr_slave_0: left promiscuous mode [ 1681.956533][ T57] hsr_slave_1: left promiscuous mode [ 1681.964837][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1681.965796][T14936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2027'. [ 1681.999328][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1682.168632][ T57] hsr_slave_0: left promiscuous mode [ 1682.188829][ T57] hsr_slave_1: left promiscuous mode [ 1682.189509][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1682.189529][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1682.240888][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1682.240922][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1682.392979][ T57] hsr_slave_0: left promiscuous mode [ 1682.418579][ T57] hsr_slave_1: left promiscuous mode [ 1682.419948][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1682.468493][T11828] Bluetooth: hci0: command tx timeout [ 1682.472045][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1682.647090][ T57] veth1_macvtap: left promiscuous mode [ 1682.647217][ T57] veth0_macvtap: left promiscuous mode [ 1682.647513][ T57] veth1_vlan: left promiscuous mode [ 1682.647721][ T57] veth0_vlan: left promiscuous mode [ 1684.469348][ T57] team0 (unregistering): Port device team_slave_1 removed [ 1684.566381][T11828] Bluetooth: hci0: command tx timeout [ 1684.619454][ T57] team0 (unregistering): Port device team_slave_0 removed [ 1685.999447][ T57] team0 (unregistering): Port device team_slave_1 removed [ 1686.138955][ T57] team0 (unregistering): Port device team_slave_0 removed [ 1686.630571][T11828] Bluetooth: hci0: command tx timeout [ 1688.728480][T11828] Bluetooth: hci0: command tx timeout [ 1690.605789][ T57] team0 (unregistering): Port device team_slave_1 removed [ 1691.679470][ T57] team0 (unregistering): Port device team_slave_0 removed [ 1692.222596][T14968] Invalid ELF header len 8 [ 1694.504875][T14979] Invalid ELF header len 8 [ 1698.209376][ T57] team0 (unregistering): Port device team_slave_1 removed [ 1698.349351][ T57] team0 (unregistering): Port device team_slave_0 removed [ 1698.716694][T14548] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1698.789649][T14548] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1698.790869][T14548] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1698.824566][T14548] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1698.825398][T14548] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1699.160035][T14855] chnl_net:caif_netlink_parms(): no params data found [ 1699.265593][T14936] bridge_slave_1: left allmulticast mode [ 1699.265628][T14936] bridge_slave_1: left promiscuous mode [ 1699.266249][T14936] bridge0: port 2(bridge_slave_1) entered disabled state [ 1699.320937][T14936] bridge_slave_0: left allmulticast mode [ 1699.320971][T14936] bridge_slave_0: left promiscuous mode [ 1699.321254][T14936] bridge0: port 1(bridge_slave_0) entered disabled state [ 1700.009100][T14816] team0: Port device team_slave_0 added [ 1700.051049][T14816] team0: Port device team_slave_1 added [ 1700.355415][ T9] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x4 [ 1700.355448][ T9] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x2 [ 1700.355502][ T9] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x3 [ 1700.405567][ T9] hid-generic 0000:3000000:0000.0017: hidraw0: HID v0.00 Device [sy] on syz0 [ 1700.725827][T14936] syz_tun (unregistering): left allmulticast mode [ 1700.878502][T14548] Bluetooth: hci5: command tx timeout [ 1701.296690][T14816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1701.296707][T14816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1701.296733][T14816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1701.314979][T14816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1701.314995][T14816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1701.315020][T14816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1702.582050][T14855] bridge0: port 1(bridge_slave_0) entered blocking state [ 1702.599337][T14855] bridge0: port 1(bridge_slave_0) entered disabled state [ 1702.614993][T14855] bridge_slave_0: entered allmulticast mode [ 1702.742874][T14855] bridge_slave_0: entered promiscuous mode [ 1702.916477][T14855] bridge0: port 2(bridge_slave_1) entered blocking state [ 1702.916620][T14855] bridge0: port 2(bridge_slave_1) entered disabled state [ 1702.916832][T14855] bridge_slave_1: entered allmulticast mode [ 1702.942371][T14855] bridge_slave_1: entered promiscuous mode [ 1702.948466][T14548] Bluetooth: hci5: command tx timeout [ 1702.974968][T14816] hsr_slave_0: entered promiscuous mode [ 1702.976372][T14816] hsr_slave_1: entered promiscuous mode [ 1702.977300][T14816] debugfs: 'hsr0' already exists in 'hsr' [ 1702.977325][T14816] Cannot create hsr debugfs directory [ 1704.013998][T14855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1704.062730][T15013] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1704.477756][T14855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1704.562577][T15023] netlink: 'syz.7.2048': attribute type 1 has an invalid length. [ 1705.258455][T14548] Bluetooth: hci5: command tx timeout [ 1705.267301][ C0] vkms_vblank_simulate: vblank timer overrun [ 1705.343604][ C0] vkms_vblank_simulate: vblank timer overrun [ 1706.203362][T14855] team0: Port device team_slave_0 added [ 1706.251074][ C0] vkms_vblank_simulate: vblank timer overrun [ 1706.284511][ T5925] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x4 [ 1706.284548][ T5925] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x2 [ 1706.284626][ T5925] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x3 [ 1706.317081][T14855] team0: Port device team_slave_1 added [ 1706.378376][ T5925] hid-generic 0000:3000000:0000.0018: hidraw0: HID v0.00 Device [sy] on syz0 [ 1706.568148][T15033] fido_id[15033]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1707.217591][T14855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1707.217608][T14855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1707.217633][T14855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1707.268727][T14548] Bluetooth: hci5: command tx timeout [ 1707.420722][T14855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1707.420738][T14855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1707.420764][T14855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1707.868627][ C0] vkms_vblank_simulate: vblank timer overrun [ 1708.078503][ C0] vkms_vblank_simulate: vblank timer overrun [ 1708.524085][ C0] vkms_vblank_simulate: vblank timer overrun [ 1708.688599][ C0] vkms_vblank_simulate: vblank timer overrun [ 1708.757082][ C0] vkms_vblank_simulate: vblank timer overrun [ 1708.811794][ C0] vkms_vblank_simulate: vblank timer overrun [ 1708.877965][ C0] vkms_vblank_simulate: vblank timer overrun [ 1708.905691][T15047] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2055'. [ 1708.939300][T15047] netlink: 'syz.7.2055': attribute type 1 has an invalid length. [ 1708.939315][T15047] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2055'. [ 1709.112476][T14917] chnl_net:caif_netlink_parms(): no params data found [ 1709.139892][T14855] hsr_slave_0: entered promiscuous mode [ 1709.141539][T14855] hsr_slave_1: entered promiscuous mode [ 1709.142500][T14855] debugfs: 'hsr0' already exists in 'hsr' [ 1709.142525][T14855] Cannot create hsr debugfs directory [ 1709.228109][T14990] chnl_net:caif_netlink_parms(): no params data found [ 1710.252432][ C0] vkms_vblank_simulate: vblank timer overrun [ 1710.284827][T10104] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x4 [ 1710.284863][T10104] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x2 [ 1710.284926][T10104] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x3 [ 1710.289900][T10104] hid-generic 0000:3000000:0000.0019: hidraw0: HID v0.00 Device [sy] on syz0 [ 1710.400977][T15061] fido_id[15061]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1711.121173][T14917] bridge0: port 1(bridge_slave_0) entered blocking state [ 1711.121420][T14917] bridge0: port 1(bridge_slave_0) entered disabled state [ 1711.121668][T14917] bridge_slave_0: entered allmulticast mode [ 1711.124918][T14917] bridge_slave_0: entered promiscuous mode [ 1711.325171][T14917] bridge0: port 2(bridge_slave_1) entered blocking state [ 1711.325338][T14917] bridge0: port 2(bridge_slave_1) entered disabled state [ 1711.325594][T14917] bridge_slave_1: entered allmulticast mode [ 1711.338795][T14917] bridge_slave_1: entered promiscuous mode [ 1711.483040][ C0] vkms_vblank_simulate: vblank timer overrun [ 1711.650530][T14990] bridge0: port 1(bridge_slave_0) entered blocking state [ 1711.650674][T14990] bridge0: port 1(bridge_slave_0) entered disabled state [ 1711.650940][T14990] bridge_slave_0: entered allmulticast mode [ 1711.690334][T14990] bridge_slave_0: entered promiscuous mode [ 1711.708432][T15072] delete_channel: no stack [ 1711.798635][ C0] vkms_vblank_simulate: vblank timer overrun [ 1711.998785][T14990] bridge0: port 2(bridge_slave_1) entered blocking state [ 1711.999167][T14990] bridge0: port 2(bridge_slave_1) entered disabled state [ 1711.999447][T14990] bridge_slave_1: entered allmulticast mode [ 1712.002418][T14990] bridge_slave_1: entered promiscuous mode [ 1712.040193][T14917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1712.272384][T14917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1712.691108][T14990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1712.896319][T14990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1712.900703][T14917] team0: Port device team_slave_0 added [ 1713.096211][T14917] team0: Port device team_slave_1 added [ 1713.302215][T14990] team0: Port device team_slave_0 added [ 1713.396446][T14990] team0: Port device team_slave_1 added [ 1713.417345][T14917] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1713.417361][T14917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1713.417386][T14917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1713.521952][T14917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1713.521969][T14917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1713.522004][T14917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1713.849239][T15082] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1714.883798][ T1229] usb 8-1: ezusb_ihex_firmware_download - request "keyspan_pda/xircom_pgs.fw" failed [ 1714.883856][ T1229] usb 8-1: failed to load firmware "keyspan_pda/xircom_pgs.fw" [ 1714.884247][ T1229] keyspan_pda 8-1:127.124: probe with driver keyspan_pda failed with error -2 [ 1714.989019][T14422] usb 1-1: ezusb_ihex_firmware_download - request "keyspan_pda/xircom_pgs.fw" failed [ 1714.989077][T14422] usb 1-1: failed to load firmware "keyspan_pda/xircom_pgs.fw" [ 1714.989717][T14422] keyspan_pda 1-1:127.113: probe with driver keyspan_pda failed with error -2 [ 1715.130886][ T1229] keyspan_pda 8-1:127.113: Keyspan PDA - (prerenumeration) converter detected [ 1715.187486][ T1229] usb 8-1: ezusb_set_reset-1 failed: -71 [ 1715.214848][ T1229] usb 8-1: Direct firmware load for keyspan_pda/xircom_pgs.fw failed with error -2 [ 1715.214908][ T1229] usb 8-1: Falling back to sysfs fallback for: keyspan_pda/xircom_pgs.fw [ 1716.322919][T11828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1716.380519][T11828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1716.425604][T11828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1716.456579][T11828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1716.475448][T11828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1716.682823][T14422] usb 1-1: USB disconnect, device number 53 [ 1717.622077][T15088] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1718.525353][T14422] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x4 [ 1718.525410][T14422] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x2 [ 1718.525477][T14422] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x3 [ 1718.553449][T14422] hid-generic 0000:3000000:0000.001A: hidraw0: HID v0.00 Device [sy] on syz0 [ 1718.644139][T15094] fido_id[15094]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1718.708636][T11828] Bluetooth: hci1: command tx timeout [ 1718.739866][ C1] vkms_vblank_simulate: vblank timer overrun [ 1718.839806][T14990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1718.839824][T14990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1718.839850][T14990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1719.216177][T14990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1719.216197][T14990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1719.216225][T14990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1719.662589][ C1] vkms_vblank_simulate: vblank timer overrun [ 1719.822194][T14917] hsr_slave_0: entered promiscuous mode [ 1719.825136][T14917] hsr_slave_1: entered promiscuous mode [ 1719.825734][T14917] debugfs: 'hsr0' already exists in 'hsr' [ 1719.825757][T14917] Cannot create hsr debugfs directory [ 1720.052825][ C1] vkms_vblank_simulate: vblank timer overrun [ 1720.097061][ T57] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1720.456440][ C1] vkms_vblank_simulate: vblank timer overrun [ 1720.798709][T11828] Bluetooth: hci1: command tx timeout [ 1721.004216][ C1] vkms_vblank_simulate: vblank timer overrun [ 1721.024092][ T57] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1721.122788][T14990] hsr_slave_0: entered promiscuous mode [ 1721.123770][T14990] hsr_slave_1: entered promiscuous mode [ 1721.145871][T14990] debugfs: 'hsr0' already exists in 'hsr' [ 1721.145890][T14990] Cannot create hsr debugfs directory [ 1721.276609][ C1] vkms_vblank_simulate: vblank timer overrun [ 1721.576398][ C1] vkms_vblank_simulate: vblank timer overrun [ 1721.606085][ T57] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1722.057959][ C1] vkms_vblank_simulate: vblank timer overrun [ 1722.199602][T14548] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1722.213320][T14548] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1722.224586][T14548] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1722.230686][T14548] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1722.231606][T14548] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1722.368971][ T57] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1722.878454][T14548] Bluetooth: hci1: command tx timeout [ 1722.992444][ C1] vkms_vblank_simulate: vblank timer overrun [ 1723.158658][ C1] vkms_vblank_simulate: vblank timer overrun [ 1724.321758][T14548] Bluetooth: hci3: command tx timeout [ 1724.948917][T14548] Bluetooth: hci1: command tx timeout [ 1725.824553][T15083] chnl_net:caif_netlink_parms(): no params data found [ 1726.198792][ T57] bridge_slave_1: left allmulticast mode [ 1726.198827][ T57] bridge_slave_1: left promiscuous mode [ 1726.199110][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 1726.310481][ T57] bridge_slave_0: left allmulticast mode [ 1726.310518][ T57] bridge_slave_0: left promiscuous mode [ 1726.310824][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 1726.425609][T14548] Bluetooth: hci3: command tx timeout [ 1726.902329][ T57] bridge_slave_1: left allmulticast mode [ 1726.902469][ T57] bridge_slave_1: left promiscuous mode [ 1726.905414][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 1727.399922][ T57] bridge_slave_0: left allmulticast mode [ 1727.399955][ T57] bridge_slave_0: left promiscuous mode [ 1727.400259][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 1727.464460][ T57] bridge_slave_1: left allmulticast mode [ 1727.464492][ T57] bridge_slave_1: left promiscuous mode [ 1727.464756][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 1727.529350][ T57] bridge_slave_0: left allmulticast mode [ 1727.529372][ T57] bridge_slave_0: left promiscuous mode [ 1727.529534][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 1728.476287][T14548] Bluetooth: hci3: command tx timeout [ 1729.419425][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1729.489290][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1729.533362][ T57] bond0 (unregistering): Released all slaves [ 1729.551533][ T57] bond1 (unregistering): Released all slaves [ 1729.859304][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1729.955581][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1730.028373][ T57] bond0 (unregistering): Released all slaves [ 1730.233293][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.233398][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.369199][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1730.439522][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1730.512527][ T57] bond0 (unregistering): Released all slaves [ 1730.588785][T14548] Bluetooth: hci3: command tx timeout [ 1730.729523][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1730.829985][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1730.901002][ T57] bond0 (unregistering): Released all slaves [ 1732.188549][ T57] tipc: Left network mode [ 1733.400500][T15083] bridge0: port 1(bridge_slave_0) entered blocking state [ 1733.400710][T15083] bridge0: port 1(bridge_slave_0) entered disabled state [ 1733.400965][T15083] bridge_slave_0: entered allmulticast mode [ 1733.441351][T15083] bridge_slave_0: entered promiscuous mode [ 1733.781121][T15083] bridge0: port 2(bridge_slave_1) entered blocking state [ 1733.781279][T15083] bridge0: port 2(bridge_slave_1) entered disabled state [ 1733.781546][T15083] bridge_slave_1: entered allmulticast mode [ 1733.840494][T15083] bridge_slave_1: entered promiscuous mode [ 1733.845013][T15107] chnl_net:caif_netlink_parms(): no params data found [ 1735.410469][T15083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1735.572819][T15083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1736.041876][T15083] team0: Port device team_slave_0 added [ 1736.458334][T15083] team0: Port device team_slave_1 added [ 1736.731198][T11828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1736.746211][T11828] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1736.756911][T11828] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1736.782093][T11828] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1736.785344][T11828] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1736.803278][ T57] hsr_slave_0: left promiscuous mode [ 1736.858803][ T57] hsr_slave_1: left promiscuous mode [ 1736.859409][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1736.859428][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1736.909134][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1736.909156][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1737.059476][ T57] hsr_slave_0: left promiscuous mode [ 1737.078707][ T57] hsr_slave_1: left promiscuous mode [ 1737.079558][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1737.129294][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1737.259812][ T57] hsr_slave_0: left promiscuous mode [ 1737.278646][ T57] hsr_slave_1: left promiscuous mode [ 1737.279246][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1737.330268][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1737.468545][ T57] hsr_slave_0: left promiscuous mode [ 1737.528405][ T57] hsr_slave_1: left promiscuous mode [ 1737.529102][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1737.570218][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1738.137038][T15159] netlink: 'syz.7.2078': attribute type 1 has an invalid length. [ 1738.137230][T15159] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2078'. [ 1738.206354][ T57] veth1_macvtap: left promiscuous mode [ 1738.206480][ T57] veth0_macvtap: left promiscuous mode [ 1738.206772][ T57] veth1_vlan: left promiscuous mode [ 1738.206985][ T57] veth0_vlan: left promiscuous mode [ 1738.868640][T11828] Bluetooth: hci4: command tx timeout [ 1740.949698][T11828] Bluetooth: hci4: command tx timeout [ 1741.209234][ T57] team0 (unregistering): Port device team_slave_1 removed [ 1741.469310][ T57] team0 (unregistering): Port device team_slave_0 removed [ 1743.029687][T11828] Bluetooth: hci4: command tx timeout [ 1744.989360][ T57] team0 (unregistering): Port device team_slave_1 removed [ 1745.118475][T11828] Bluetooth: hci4: command tx timeout [ 1745.170100][ T57] team0 (unregistering): Port device team_slave_0 removed [ 1746.649207][ T57] team0 (unregistering): Port device team_slave_1 removed [ 1746.789462][ T57] team0 (unregistering): Port device team_slave_0 removed [ 1748.109215][ T57] team0 (unregistering): Port device team_slave_1 removed [ 1748.269306][ T57] team0 (unregistering): Port device team_slave_0 removed [ 1748.997802][T15107] bridge0: port 1(bridge_slave_0) entered blocking state [ 1748.997898][T15107] bridge0: port 1(bridge_slave_0) entered disabled state [ 1748.998083][T15107] bridge_slave_0: entered allmulticast mode [ 1749.000966][T15107] bridge_slave_0: entered promiscuous mode [ 1749.142607][T15107] bridge0: port 2(bridge_slave_1) entered blocking state [ 1749.142744][T15107] bridge0: port 2(bridge_slave_1) entered disabled state [ 1749.142971][T15107] bridge_slave_1: entered allmulticast mode [ 1749.150169][T15107] bridge_slave_1: entered promiscuous mode [ 1749.254513][T15083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1749.254531][T15083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1749.254556][T15083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1749.529054][T15083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1749.529073][T15083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1749.529100][T15083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1749.981355][T15107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1750.041308][T15107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1750.579701][T15165] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2079'. [ 1753.024082][T15083] hsr_slave_0: entered promiscuous mode [ 1753.025440][T15083] hsr_slave_1: entered promiscuous mode [ 1753.029990][T15107] team0: Port device team_slave_0 added [ 1753.084463][T15107] team0: Port device team_slave_1 added [ 1753.758456][T15107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1753.758473][T15107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1753.758680][T15107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1753.837048][T15107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1753.837064][T15107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1753.837091][T15107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1754.070056][T14990] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1754.160806][T14990] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1754.360670][T14990] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1754.501388][T14990] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1754.722202][T15107] hsr_slave_0: entered promiscuous mode [ 1754.729237][T15107] hsr_slave_1: entered promiscuous mode [ 1754.730185][T15107] debugfs: 'hsr0' already exists in 'hsr' [ 1754.730210][T15107] Cannot create hsr debugfs directory [ 1755.994602][T15200] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2085'. [ 1756.442248][T15155] chnl_net:caif_netlink_parms(): no params data found [ 1759.196310][ T38] INFO: task [ 1759.196310][ T38] INFO: task syz.5.1809:13941 blocked for more than 143 seconds. [ 1759.196336][ T38] Not tainted syzkaller #0 [ 1759.196347][ T38] Blocked by coredump. [ 1759.196354][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1759.196363][ T38] task:syz.5.1809 state:D stack:25448 pid:13941 tgid:13940 ppid:11823 task_flags:0x40044c flags:0x00004002 [ 1759.196416][ T38] Call Trace: [ 1759.196424][ T38] [ 1759.196438][ T38] __schedule+0x16f3/0x4c20 [ 1759.196495][ T38] ? __pfx___schedule+0x10/0x10 [ 1759.196544][ T38] rt_mutex_schedule+0x77/0xf0 [ 1759.196562][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 1759.196596][ T38] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 1759.196622][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 1759.196647][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 1759.196670][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1759.196718][ T38] ? usbdev_release+0x7f/0x740 [ 1759.196741][ T38] mutex_lock_nested+0x16a/0x1d0 [ 1759.196769][ T38] usbdev_release+0x7f/0x740 [ 1759.196798][ T38] ? __pfx_usbdev_release+0x10/0x10 [ 1759.196833][ T38] __fput+0x458/0xa80 [ 1759.196865][ T38] task_work_run+0x1d4/0x260 [ 1759.196888][ T38] ? __pfx_task_work_run+0x10/0x10 [ 1759.196908][ T38] ? do_exit+0x6b0/0x2300 [ 1759.196925][ T38] ? kmem_cache_free+0x195/0x510 [ 1759.196954][ T38] do_exit+0x6b5/0x2300 [ 1759.196972][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1759.197003][ T38] ? __lock_acquire+0xab9/0xd20 [ 1759.197029][ T38] ? __pfx_do_exit+0x10/0x10 [ 1759.197044][ T38] ? rt_mutex_slowunlock+0x493/0x8a0 [ 1759.197070][ T38] ? rt_spin_lock+0x1bb/0x2c0 [ 1759.197101][ T38] do_group_exit+0x21c/0x2d0 [ 1759.197125][ T38] get_signal+0x125e/0x1310 [ 1759.197170][ T38] arch_do_signal_or_restart+0x9a/0x750 [ 1759.197200][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1759.197238][ T38] ? exit_to_user_mode_loop+0x40/0x110 [ 1759.197265][ T38] exit_to_user_mode_loop+0x75/0x110 [ 1759.197289][ T38] do_syscall_64+0x2bd/0x3b0 [ 1759.197306][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 1759.197330][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1759.197349][ T38] ? clear_bhb_loop+0x60/0xb0 [ 1759.197373][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1759.197395][ T38] RIP: 0033:0x7f4f0ea4d510 [ 1759.197415][ T38] RSP: 002b:00007f4f0ccb5b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1759.197436][ T38] RAX: 0000000000000003 RBX: 0000000000101301 RCX: 00007f4f0ea4d510 [ 1759.197450][ T38] RDX: 0000000000101301 RSI: 00007f4f0ccb5c10 RDI: 00000000ffffff9c [ 1759.197464][ T38] RBP: 00007f4f0ccb5c10 R08: 0000000000000000 R09: 0000000000000000 [ 1759.197477][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 1759.197490][ T38] R13: 00007f4f0ec96038 R14: 00007f4f0ec95fa0 R15: 00007ffc69845658 [ 1759.197523][ T38] [ 1759.197555][ T38] [ 1759.197555][ T38] Showing all locks held in the system: [ 1759.197566][ T38] 1 lock held by khungtaskd/38: [ 1759.197577][ T38] #0: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1759.197624][ T38] 4 locks held by kworker/u8:3/57: [ 1759.197636][ T38] #0: ffff88801a6f4138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1759.197682][ T38] #1: ffffc9000123fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1759.197728][ T38] #2: ffffffff8ecc6840 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 1759.197776][ T38] #3: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1759.197825][ T38] 5 locks held by kworker/u8:5/70: [ 1759.197838][ T38] 5 locks held by kworker/u8:6/160: [ 1759.197854][ T38] 6 locks held by kworker/0:2/1229: [ 1759.197865][ T38] #0: ffff888141291138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1759.197911][ T38] #1: ffffc90005097bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1759.197956][ T38] #2: ffff888027b85188 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 1759.198001][ T38] #3: ffff88806ba90188 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 1759.198044][ T38] #4: ffff888027b14150 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 1759.198086][ T38] #5: ffffffff8d851160 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xf0/0x2b0 [ 1759.198134][ T38] 5 locks held by kworker/u8:8/1441: [ 1759.198156][ T38] 2 locks held by getty/5596: [ 1759.198167][ T38] #0: ffff88823bf280a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1759.198371][ T38] #1: ffffc90003e832e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 1759.198417][ T38] 3 locks held by kworker/0:8/8548: [ 1759.198429][ T38] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1759.198473][ T38] #1: ffffc900043ffbc0 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1759.198518][ T38] #2: ffff88805daad260 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x2ac/0x31b0 [ 1759.198560][ T38] 5 locks held by kworker/u8:16/12697: [ 1759.198572][ T38] 4 locks held by udevd/13386: [ 1759.198583][ T38] #0: ffff88805cf9f608 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb8/0xe10 [ 1759.198626][ T38] #1: ffff88803364cc78 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 1759.198676][ T38] #2: ffff88805d5ef698 (kn->active#19){.+.+}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 1759.198724][ T38] #3: ffff88806ba90188 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 1759.198769][ T38] 1 lock held by syz.5.1809/13941: [ 1759.198779][ T38] #0: ffff888027b85188 (&dev->mutex){....}-{4:4}, at: usbdev_release+0x7f/0x740 [ 1759.198833][ T38] 7 locks held by syz-executor/15083: [ 1759.198844][ T38] 4 locks held by syz-executor/15107: [ 1759.198855][ T38] #0: ffff888034d34488 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 1759.198901][ T38] #1: ffff888052071478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1759.198945][ T38] #2: ffff888026503d28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1759.198993][ T38] #3: ffffffff8e542e78 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 1759.199035][ T38] 3 locks held by syz-executor/15155: [ 1759.199046][ T38] #0: ffffffff8f1d7ae8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1759.199097][ T38] #1: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 1759.199141][ T38] #2: ffffffff8d852638 (wq_pool_mutex){+.+.}-{4:4}, at: __alloc_workqueue+0x9ef/0x1b70 [ 1759.199182][ T38] 2 locks held by syz-executor/15207: [ 1759.199193][ T38] 1 lock held by syz.7.2087/15212: [ 1759.199206][ T38] [ 1759.199211][ T38] ============================================= [ 1759.199211][ T38] [ 1759.199226][ T38] NMI backtrace for cpu 1 [ 1759.199246][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1759.199266][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1759.199277][ T38] Call Trace: [ 1759.199285][ T38] [ 1759.199293][ T38] dump_stack_lvl+0x189/0x250 [ 1759.199320][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1759.199343][ T38] ? __pfx__printk+0x10/0x10 [ 1759.199374][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 1759.199399][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1759.199423][ T38] ? __pfx__printk+0x10/0x10 [ 1759.199446][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1759.199469][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1759.199494][ T38] watchdog+0xf93/0xfe0 [ 1759.199519][ T38] ? watchdog+0x1de/0xfe0 [ 1759.199545][ T38] kthread+0x70e/0x8a0 [ 1759.199571][ T38] ? __pfx_watchdog+0x10/0x10 [ 1759.199591][ T38] ? __pfx_kthread+0x10/0x10 [ 1759.199619][ T38] ? __pfx_kthread+0x10/0x10 [ 1759.199643][ T38] ret_from_fork+0x436/0x7d0 [ 1759.199667][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1759.199693][ T38] ? __switch_to_asm+0x39/0x70 [ 1759.199708][ T38] ? __switch_to_asm+0x33/0x70 [ 1759.199723][ T38] ? __pfx_kthread+0x10/0x10 [ 1759.199748][ T38] ret_from_fork_asm+0x1a/0x30 [ 1759.199778][ T38] [ 1759.199785][ T38] Sending NMI from CPU 1 to CPUs 0: [ 1759.199808][ C0] NMI backtrace for cpu 0 [ 1759.199822][ C0] CPU: 0 UID: 0 PID: 17 Comm: pr/legacy Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1759.199840][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1759.199850][ C0] RIP: 0010:io_serial_out+0x7c/0xc0 [ 1759.199870][ C0] Code: 3f 7f fc 44 89 f9 d3 e5 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 3c 86 de fc 41 03 2e 89 d8 89 ea ee <5b> 41 5c 41 5e 41 5f 5d c3 cc cc cc cc cc 44 89 f9 80 e1 07 38 c1 [ 1759.199883][ C0] RSP: 0018:ffffc900001678f0 EFLAGS: 00000202 [ 1759.199898][ C0] RAX: 0000000000000038 RBX: 0000000000000038 RCX: 0000000000000000 [ 1759.199909][ C0] RDX: 00000000000003f8 RSI: 0000000000000000 RDI: 0000000000000000 [ 1759.199919][ C0] RBP: 00000000000003f8 R08: 0000000000000000 R09: 0000000000000000 [ 1759.199930][ C0] R10: dffffc0000000000 R11: ffffffff853f2e20 R12: dffffc0000000000 [ 1759.199942][ C0] R13: 0000000000000001 R14: ffffffff993ae620 R15: 0000000000000000 [ 1759.199954][ C0] FS: 0000000000000000(0000) GS:ffff8881268bc000(0000) knlGS:0000000000000000 [ 1759.199967][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1759.199979][ C0] CR2: 00002000002ae030 CR3: 000000006ff1a000 CR4: 00000000003526f0 [ 1759.199994][ C0] Call Trace: [ 1759.200000][ C0] [ 1759.200009][ C0] serial8250_console_write+0x128e/0x1b40 [ 1759.200033][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 1759.200050][ C0] ? console_flush_all+0x13a/0xcd0 [ 1759.200070][ C0] ? console_flush_all+0x476/0xcd0 [ 1759.200088][ C0] console_flush_all+0x695/0xcd0 [ 1759.200106][ C0] ? console_flush_all+0x13a/0xcd0 [ 1759.200124][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 1759.200141][ C0] ? __lock_acquire+0xab9/0xd20 [ 1759.200165][ C0] __console_flush_and_unlock+0xa4/0x240 [ 1759.200183][ C0] ? __pfx___console_flush_and_unlock+0x10/0x10 [ 1759.200204][ C0] legacy_kthread_func+0x13b/0x1a0 [ 1759.200222][ C0] ? __pfx_legacy_kthread_func+0x10/0x10 [ 1759.200240][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1759.200258][ C0] ? __kthread_parkme+0x7b/0x200 [ 1759.200276][ C0] ? __kthread_parkme+0x1a1/0x200 [ 1759.200297][ C0] kthread+0x70e/0x8a0 [ 1759.200318][ C0] ? __pfx_legacy_kthread_func+0x10/0x10 [ 1759.200335][ C0] ? __pfx_kthread+0x10/0x10 [ 1759.200356][ C0] ? __pfx_kthread+0x10/0x10 [ 1759.200375][ C0] ret_from_fork+0x436/0x7d0 [ 1759.200394][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1759.200415][ C0] ? __switch_to_asm+0x39/0x70 [ 1759.200429][ C0] ? __switch_to_asm+0x33/0x70 [ 1759.200442][ C0] ? __pfx_kthread+0x10/0x10 [ 1759.200461][ C0] ret_from_fork_asm+0x1a/0x30 [ 1759.200483][ C0] [ 1759.200813][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1759.200827][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1759.200847][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1759.200857][ T38] Call Trace: [ 1759.200865][ T38] [ 1759.200872][ T38] dump_stack_lvl+0x99/0x250 [ 1759.200896][ T38] ? __asan_memcpy+0x40/0x70 [ 1759.200916][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1759.200939][ T38] ? __pfx__printk+0x10/0x10 [ 1759.200969][ T38] vpanic+0x281/0x750 [ 1759.200995][ T38] ? __pfx_vpanic+0x10/0x10 [ 1759.201016][ T38] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 1759.201035][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 1759.201068][ T38] panic+0xb9/0xc0 [ 1759.201091][ T38] ? __pfx_panic+0x10/0x10 [ 1759.201116][ T38] ? irq_work_queue+0xc3/0x140 [ 1759.201141][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 1759.201164][ T38] watchdog+0xfd2/0xfe0 [ 1759.201190][ T38] ? watchdog+0x1de/0xfe0 [ 1759.201215][ T38] kthread+0x70e/0x8a0 [ 1759.201241][ T38] ? __pfx_watchdog+0x10/0x10 [ 1759.201262][ T38] ? __pfx_kthread+0x10/0x10 [ 1759.201290][ T38] ? __pfx_kthread+0x10/0x10 [ 1759.201315][ T38] ret_from_fork+0x436/0x7d0 [ 1759.201338][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1759.201365][ T38] ? __switch_to_asm+0x39/0x70 [ 1759.201381][ T38] ? __switch_to_asm+0x33/0x70 [ 1759.201397][ T38] ? __pfx_kthread+0x10/0x10 [ 1759.201421][ T38] ret_from_fork_asm+0x1a/0x30 [ 1759.201451][ T38] [ 1759.201769][ T38] Kernel Offset: disabled