last executing test programs: 21m54.489763434s ago: executing program 2 (id=136): syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) socket$inet(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x2, @empty, 0xa098}, {0xa, 0x4e21, 0x8000009, @mcast1}, r2, 0x4040099d}}, 0x48) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 21m54.320670733s ago: executing program 2 (id=138): write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc00000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x1, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}, {}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x4000) 21m54.236668429s ago: executing program 2 (id=140): socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 21m53.364566154s ago: executing program 2 (id=142): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0xba86, 0xf, 0x7, 0x8040, r0, 0xfffffffe, '\x00', 0x0, r0, 0x3, 0x4, 0x4, 0xe, @value=r0}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = fsopen(&(0x7f0000000480)='adfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, 0x0, 0x0) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r3, 0x80044940, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='squashfs\x00', 0x208000, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r5, 0x3b88, &(0x7f00000002c0)={0xc, r6}) ioctl$IOMMU_DESTROY$ioas(r5, 0x3b80, &(0x7f0000000380)={0x8, r6}) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x4048010) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) 21m48.496988762s ago: executing program 2 (id=148): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) shmdt(0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000080)=@chain) ptrace$PTRACE_GETSIGMASK(0x420a, r1, 0x8, &(0x7f00000000c0)) r3 = socket(0x10, 0x3, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfc, "2af01c3d0040fbffffffffffffff00"}) r5 = syz_open_pts(r4, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000140)=0xa) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000400)={@map, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) getsockname$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000380)=0x1c) 21m43.328585356s ago: executing program 2 (id=157): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 21m27.30400042s ago: executing program 32 (id=157): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 20m38.488132789s ago: executing program 1 (id=277): sched_setscheduler(0x0, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x8010) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 20m37.734545731s ago: executing program 1 (id=280): write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x0, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) execve(0x0, 0x0, &(0x7f0000000600)={[&(0x7f0000000480)='syz1\x00', &(0x7f0000000540)='/d/\xb8&\xdc\x9cB\xb4', &(0x7f0000000580)='/dev/kvm\x00', &(0x7f00000005c0)='syz1\x00']}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 20m36.70062163s ago: executing program 1 (id=281): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f00000002c0)={0x0, 0x0, 0x1, 'M'}, 0x9) 20m35.611563991s ago: executing program 1 (id=283): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x6, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0xee4b, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x56, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80000001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x0, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) execve(0x0, 0x0, &(0x7f0000000600)={[&(0x7f0000000480)='syz1\x00', &(0x7f0000000640)='/dev/k\x00\x00\x00\x00\x00\x00\x00\x00L\xbf\xd2\xd9\x8c[Q\xe1\xcc', &(0x7f0000000500)='\x00', &(0x7f0000000580)='/dev/kvm\x00']}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 20m33.468482118s ago: executing program 1 (id=289): sched_setscheduler(0x0, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x8010) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 20m33.106758981s ago: executing program 1 (id=290): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="b91701811a1e42b5ba4375aa85a84e4f9c95a6c555a1f5c9a528732192fc2f922cad1ab69dcd8fe6992886e8a95d7a0869644c5e1fd07d9e2867458a5d5b13c9e077ce1b8df3c8827af7b4f1f325f69f92ee22e5a8f58df2959db69d163a50f24485ecba1927b9eb6c227224ad5720a2d097fe61894aec1d383ed10e1b29006a82", 0x81}], 0x1}, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a7000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 20m17.398074731s ago: executing program 33 (id=290): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="b91701811a1e42b5ba4375aa85a84e4f9c95a6c555a1f5c9a528732192fc2f922cad1ab69dcd8fe6992886e8a95d7a0869644c5e1fd07d9e2867458a5d5b13c9e077ce1b8df3c8827af7b4f1f325f69f92ee22e5a8f58df2959db69d163a50f24485ecba1927b9eb6c227224ad5720a2d097fe61894aec1d383ed10e1b29006a82", 0x81}], 0x1}, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a7000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 12m57.768574329s ago: executing program 0 (id=1067): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$alg(0x26, 0x5, 0x0) accept$alg(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000004c0)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "7c80690ea8c8123e", "f92dafad9e3b473a1eaac151fe41ea97", "ee367a98", "74aff2072572aca8"}, 0x28) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) 12m54.680380505s ago: executing program 0 (id=1073): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004"], 0x44}}, 0x0) 12m54.423908291s ago: executing program 0 (id=1074): add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0xfdff) 12m51.925205807s ago: executing program 0 (id=1077): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) r3 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0, 0x1000}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000080)={0x0, r2}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000500", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 12m51.600584557s ago: executing program 0 (id=1079): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86b", 0xf) r1 = accept4$alg(r0, 0x0, 0x0, 0x80000) io_setup(0x42, &(0x7f0000000100)=0x0) sendmsg$alg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="6bf8b5b4b98699c3d3314cdcbd30b296", 0x10}], 0x1, 0x0, 0x0, 0x881}, 0x404c804) io_submit(r2, 0x1, &(0x7f0000000580)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x4, r1, &(0x7f0000000380)="13d32a61f28931e7", 0x8}]) 12m51.06381354s ago: executing program 0 (id=1081): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x4000000000000, 0x200000000000000}}}, 0xb8}}, 0x2c000010) 12m34.621931427s ago: executing program 34 (id=1081): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x4000000000000, 0x200000000000000}}}, 0xb8}}, 0x2c000010) 11m38.682429975s ago: executing program 6 (id=1202): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000001c0)="b4979f35", 0x4, 0x41, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000003c0)) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1401, 0x0) writev(r4, 0x0, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000240)={0x2000, 0x1000000}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x40000000000002, 0x7, 0xeab, 0x180, 0x0, 0x0, 0xf2, 0x9, 0x8, 0x5, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4], 0x1, 0x3c4212}) 11m37.184887536s ago: executing program 6 (id=1206): r0 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0xfdff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', r0}) keyctl$link(0x8, r0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000140)='cifs.spnego\x00', &(0x7f00000001c0)=@secondary) 11m35.509563116s ago: executing program 6 (id=1208): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x4000000000000, 0x200000000000000}}}, 0xb8}}, 0x2c000010) 11m32.614094724s ago: executing program 6 (id=1209): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x6, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0xee4b, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x56, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80000001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x0, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) execve(0x0, &(0x7f0000000400)={[&(0x7f0000000140)='syz1\x00']}, &(0x7f0000000600)={[&(0x7f0000000440)='syz1\x00', &(0x7f0000000480)='syz1\x00', &(0x7f0000000640)='/dev/k\x00\x00\x00\x00\x00\x00\x00\x00L\xbf\xd2\xd9\x8c[Q\xe1\xcc', &(0x7f0000000540)='/d/\xb8&\xdc\x9cB\xb4', &(0x7f0000000580)='/dev/kvm\x00']}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 11m30.805268325s ago: executing program 6 (id=1213): r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x80db, 0xabf4, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0x9c, 0x8163, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000400)={r6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x40045, 0x6, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 11m29.337143122s ago: executing program 6 (id=1214): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x103182, 0x0) r2 = socket(0x1d, 0x2, 0x6) socket(0x1, 0x1, 0x0) ioctl$SIOCGETSGCNT(r2, 0x89a0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x220) setpgid(0x0, r3) open_tree(0xffffffffffffff9c, 0x0, 0x901) mount(0x0, 0x0, 0x0, 0x2000, 0x0) bind$can_j1939(r2, 0x0, 0x0) epoll_create(0x2) syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) 11m14.088972588s ago: executing program 35 (id=1214): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x103182, 0x0) r2 = socket(0x1d, 0x2, 0x6) socket(0x1, 0x1, 0x0) ioctl$SIOCGETSGCNT(r2, 0x89a0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x220) setpgid(0x0, r3) open_tree(0xffffffffffffff9c, 0x0, 0x901) mount(0x0, 0x0, 0x0, 0x2000, 0x0) bind$can_j1939(r2, 0x0, 0x0) epoll_create(0x2) syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) 3m11.874354079s ago: executing program 4 (id=1848): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000001c0)="b4979f35a5", 0x5, 0x41, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1401, 0x0) writev(r4, &(0x7f0000000080)=[{&(0x7f00000000c0)="5bffd08307d80c79b1cb7b5f0c5b4d719c69c8513f748fbe425a7bc388c9019bef114779f7a10dc03a883d6e16a0a704f74297f381ff1db75098a9b38bb67206a7ff22e6ca46dc760bdad8a79d5951988c55a368dd1132ba7f129c2e65441eaa27492c069488df0881f123ca01ae873f5b36eb0fddb8f07420f5484d81cabde167c87ffbab6a94b24b5537bb1a08d56469f516fd4b7c66e2ac50d5ff4e52c628d0a89e53d0e78582a5ab2a2c714f", 0xae}], 0x1) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000240)={0x2000, 0x1000000}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) splice(r2, 0x0, r3, &(0x7f0000000280)=0x2, 0x3, 0x9) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x40000000000002, 0x7, 0xeab, 0x180, 0x0, 0x0, 0xf2, 0x9, 0x8, 0x5, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4], 0x1, 0x3c4212}) 3m9.825366333s ago: executing program 4 (id=1851): mmap$IORING_OFF_SQ_RING(&(0x7f000071c000/0xe000)=nil, 0xe000, 0x0, 0x810, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$kvm(0xffffffffffffff9c, 0x0, 0x309201, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) r2 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r2, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) linkat(r2, &(0x7f0000000040)='./file1\x00', r2, &(0x7f0000000180)='./bus\x00', 0x0) link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') open(&(0x7f0000000440)='./file0\x00', 0xe8142, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4020aeb2, &(0x7f0000000080)={0x0, 0x2000000, @ioapic={0x0, 0x1, 0x8000, 0x0, 0x0, [{0x6, 0x7, 0xa, '\x00', 0xab}, {0x2, 0x0, 0x4, '\x00', 0x5b}, {0x1d, 0x4, 0x8, '\x00', 0xb}, {0x5, 0xe, 0x7, '\x00', 0xf1}, {0x1c, 0xc, 0xd, '\x00', 0x43}, {0x4, 0x78, 0xc5, '\x00', 0x9}, {0x94, 0x5, 0x9, '\x00', 0xbe}, {0xf, 0x0, 0x6, '\x00', 0xfc}, {0x1, 0x4, 0x5, '\x00', 0x33}, {0x9, 0xf, 0x57, '\x00', 0x9}, {0x2, 0x4, 0x1}, {0x81, 0x6, 0x6, '\x00', 0x48}, {0x3, 0x1, 0x8, '\x00', 0x8}, {0x6, 0x3, 0x2, '\x00', 0x2}, {0x8, 0x5, 0x3, '\x00', 0x50}, {0xd, 0x2, 0xd}, {0x8, 0x81, 0x81, '\x00', 0xb}, {0x3, 0x89, 0x81, '\x00', 0xf}, {0x7b, 0x7, 0x2, '\x00', 0x5}, {0x3, 0x7, 0x4, '\x00', 0x7}, {0x6, 0x26, 0x5, '\x00', 0x9}, {0x7, 0x9, 0xe4, '\x00', 0x4}, {0xc1, 0xd, 0x3, '\x00', 0x10}, {0xfd, 0x3, 0x80, '\x00', 0x6}]}}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) chown(&(0x7f0000000580)='./file0\x00', 0x0, 0x0) listen(r3, 0x80) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, 0x0, 0x0) 3m6.086440763s ago: executing program 4 (id=1855): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r6, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r8, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) 3m4.262899244s ago: executing program 4 (id=1857): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r6, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x7) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r9, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) 3m2.952897275s ago: executing program 4 (id=1858): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000400)={0xa}) epoll_pwait(r2, &(0x7f0000000080)=[{}], 0x1, 0xe112, 0x0, 0x0) 3m1.868831145s ago: executing program 4 (id=1860): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a0001000000000000000a0080202000", @ANYRES8], 0x38}}, 0x0) 2m46.406015149s ago: executing program 36 (id=1860): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a0001000000000000000a0080202000", @ANYRES8], 0x38}}, 0x0) 3.296798918s ago: executing program 8 (id=3056): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0xe8, 0x34, 0xb3, 0x5, 0x4, 0x5, 0x7, 0x8, 0xa, 0x0, 0x2, 0x56, 0x2, 0x3}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={r1, 0x5}, 0x8) 3.11274469s ago: executing program 8 (id=3059): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f00000001c0)='./file2\x00', 0x86442, 0x0) dup3(r1, r0, 0x0) io_setup(0x2, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, 0x0}]) 2.967028768s ago: executing program 8 (id=3063): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@gettfilter={0x2c, 0x2e, 0x1, 0x70bd2a, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xffff, 0x7}, {0x0, 0xfff1}, {0x6, 0x2}}, [{0x8, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x484) 2.724958893s ago: executing program 3 (id=3066): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x1, 0x85, 0x96}}, 0x28) 2.568298203s ago: executing program 3 (id=3069): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000080)) 2.384194402s ago: executing program 8 (id=3074): timer_create(0x2, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) timer_gettime(0x0, 0x0) 2.228604663s ago: executing program 3 (id=3078): r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000000)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016f64b4ef8a9cedaf6bec340dee49474360b24cb8", 0x0, 0x48) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x77359400}, {0x0, 0x3938700}}, 0x0) r4 = gettid() rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000003, 0x0}, 0x0, 0x8, &(0x7f0000000200)) tkill(r4, 0x16) 1.952478561s ago: executing program 9 (id=3082): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x4, 0x7, 0x8, 0x14, 0x2, 0x1, 0x5, 0x9, 0x28, 0x2, 0x1, 0x6, 0x0, 0x6e, 0x8a, 0x3}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.84945106s ago: executing program 9 (id=3083): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000100)="75c5456f", 0x0}, 0x20) 1.704486617s ago: executing program 9 (id=3085): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc, 0x0, 0x0, 0x1}}], 0x30}], 0x1, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.532622563s ago: executing program 9 (id=3087): sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x54}, 0x24008804) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r2, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) 1.425238306s ago: executing program 7 (id=3089): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000b40)=0x8) 1.34475652s ago: executing program 8 (id=3090): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.259345327s ago: executing program 3 (id=3092): ioperm(0x0, 0x3, 0x2) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000005, 0x20031, 0xffffffffffffffff, 0xb9ddd000) munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) remap_file_pages(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x0, 0x2, 0x100000) 1.253314416s ago: executing program 8 (id=3093): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000040)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f848b880180000000000000f23c00f21f83500000d000f23f80f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x7b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.182334992s ago: executing program 5 (id=3094): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) write$tun(r0, &(0x7f0000000640)={@val={0x0, 0xf7}, @val={0x3, 0x1, 0x3, 0x4, 0xc4, 0x10}, @llc={@llc={0x2, 0x4e, '\x00', "1c2d5625bd3131b04b5d1e03f3d3bce126e78d1284dfbce2d4c5634f00ba79f712e26681a55752c3a5e28ca2952786ba6aec804b2f5195afab8fa8c5d927b300d390eea97c4701443c3cc435939cc434950db40985269cb004064193ea8f6b34c932656ac3d102a2771e89736a8db4308f0576865c50791e14a946c235e018fe251ddf4851a47fdaf086ba1f7fa1b0c7876284a6f9e155a201d0e676b5b8e43ab77658de54b9eee7ca886d43da1a1da77ef26ab22a72c3008ab89289606d5dbad20f548f0aab2fb6d1"}}}, 0xda) 1.181644823s ago: executing program 7 (id=3095): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x6, 0x4, 0xffd, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000006c0)="bf92cd75", &(0x7f0000000a00), 0x6, r0}, 0x38) 1.016703601s ago: executing program 3 (id=3096): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001280)="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", 0x353}], 0x1}}], 0x1, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000180)="27a3557736d3c84a338e8fe4d32a1251f97e5584ebd3ff587b283d03906d281f7415474f511d7bd3b6159af04f9d050b4f710795bfc2c1ea233becef734750a252bd481c71cc8707e125a34602a37f26929c13ad3fa7e3a8a9bfe4b8bd4a30ff136001b125d672f402474b3d4284693e01b8cd8d92008674d46b4d873a274bd2aeec93157b0c9049bdb947149d4729bb6fd749cbc87e3aeb00"/162, 0xffffffffffffffac, 0x14008885, 0x0, 0x0) 1.01648892s ago: executing program 7 (id=3097): set_mempolicy(0x4005, &(0x7f0000000000)=0xaf93, 0x8) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000e00002085000000700000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, r2}, 0x3c) syz_emit_ethernet(0xfdef, &(0x7f0000002600)=ANY=[], 0x0) 913.520777ms ago: executing program 7 (id=3098): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001ac0)=""/191, 0x0, 0xffff1000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 833.633538ms ago: executing program 5 (id=3099): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@gettfilter={0x2c, 0x2e, 0x1, 0x70bd2a, 0x25dfdafd, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x7}, {0x0, 0xfff1}, {0x6, 0x2}}, [{0x8, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x484) 734.307219ms ago: executing program 7 (id=3100): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e26, 0x22, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, 0x82}, 0x1c) syz_emit_ethernet(0x4a, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 577.133155ms ago: executing program 9 (id=3101): r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='smaps\x00') mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close(0x3) openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) preadv(r0, &(0x7f0000000600)=[{&(0x7f00000036c0)=""/4092, 0xffc}], 0x1, 0x2de, 0xfffffffc) 575.863412ms ago: executing program 7 (id=3102): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) write$FUSE_WRITE(r2, &(0x7f0000000140)={0x18, 0x0, r1, {0x47}}, 0x18) 380.60212ms ago: executing program 9 (id=3103): r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000000)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016f64b4ef8a9cedaf6bec340dee49474360b24cb8", 0x0, 0x48) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x77359400}, {0x0, 0x3938700}}, 0x0) r4 = gettid() rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000003, 0x0}, 0x0, 0x8, &(0x7f0000000200)) tkill(r4, 0x16) 343.613749ms ago: executing program 5 (id=3104): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0xc002, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x4, {0x7, 0x28, 0x0, 0x40a08010, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10, 0xfb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) faccessat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x300) syz_fuse_handle_req(r0, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000700)={&(0x7f00000002c0)={0x50, 0xffffffffffffff8c, 0x0, {0x7, 0x2b, 0x800}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 225.069608ms ago: executing program 5 (id=3105): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = epoll_create1(0x0) r2 = eventfd2(0x3, 0x1) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000000)={0x10}) 133.921259ms ago: executing program 3 (id=3106): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x1, 0x5) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) 67.148823ms ago: executing program 5 (id=3107): mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x34, &(0x7f00000000c0), 0x4) 0s ago: executing program 5 (id=3108): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x5, 0x1, 0x81}, {0x6, 0x10, 0x1, 0x1, 0x3, 0x2}}}]}]}]}}]}, 0x5c}}, 0x0) kernel console output (not intermixed with test programs): 32 [ 979.544500][ T5866] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 979.544556][ T5866] usb 5-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 979.544578][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.637174][ T5866] usb 5-1: config 0 descriptor?? [ 980.058826][ T5114] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 980.115325][ T5114] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 980.118047][ T5114] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 980.137177][ T5114] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 980.140838][ T5114] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 980.674390][ T5866] elo 0003:04E7:0009.0004: hidraw0: USB HID v0.00 Device [HID 04e7:0009] on usb-dummy_hcd.4-1/input0 [ 981.702573][ T6466] team0 (unregistering): Port device team_slave_1 removed [ 981.910321][ T6466] team0 (unregistering): Port device team_slave_0 removed [ 982.116984][ T5866] usb 5-1: USB disconnect, device number 24 [ 982.276744][ C1] vkms_vblank_simulate: vblank timer overrun [ 982.781999][ T5114] Bluetooth: hci4: command tx timeout [ 983.925393][ C1] vkms_vblank_simulate: vblank timer overrun [ 984.124077][ T6466] team0 (unregistering): Port device team_slave_1 removed [ 984.352319][ T6466] team0 (unregistering): Port device team_slave_0 removed [ 984.872966][ T5114] Bluetooth: hci4: command tx timeout [ 985.125857][ C1] vkms_vblank_simulate: vblank timer overrun [ 986.221186][ C1] vkms_vblank_simulate: vblank timer overrun [ 986.310962][ C1] vkms_vblank_simulate: vblank timer overrun [ 986.323740][T11955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 986.323754][T11955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 986.323778][T11955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 986.941832][ T5114] Bluetooth: hci4: command tx timeout [ 988.006051][T11955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 988.006067][T11955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 988.006092][T11955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 989.222792][ T5114] Bluetooth: hci4: command tx timeout [ 989.343481][T12277] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1465'. [ 990.438358][T11955] hsr_slave_0: entered promiscuous mode [ 990.439772][T11955] hsr_slave_1: entered promiscuous mode [ 990.440775][T11955] debugfs: 'hsr0' already exists in 'hsr' [ 990.440798][T11955] Cannot create hsr debugfs directory [ 990.912742][T12300] syz.3.1469 (12300): drop_caches: 2 [ 992.961230][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.961304][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 996.248780][ T6692] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 996.266954][ T6692] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 996.268189][ T6692] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 996.269390][ T6692] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 996.270197][ T6692] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 996.565919][T12226] chnl_net:caif_netlink_parms(): no params data found [ 996.679827][T12185] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 996.852178][T12185] usb 6-1: Using ep0 maxpacket: 16 [ 996.854548][T12185] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 996.854572][T12185] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 996.854591][T12185] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 996.854609][T12185] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 996.854628][T12185] usb 6-1: config 0 has no interface number 0 [ 996.854675][T12185] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 996.854701][T12185] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 996.854722][T12185] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 996.854742][T12185] usb 6-1: config 0 interface 125 has no altsetting 0 [ 997.720490][T12185] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 997.720573][T12185] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.720621][T12185] usb 6-1: Product: syz [ 997.720662][T12185] usb 6-1: Manufacturer: syz [ 997.720714][T12185] usb 6-1: SerialNumber: syz [ 997.813972][T12185] usb 6-1: config 0 descriptor?? [ 998.073620][ T5879] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 998.108776][ T8060] usb 6-1: USB disconnect, device number 17 [ 998.242709][ T5879] usb 5-1: Using ep0 maxpacket: 32 [ 998.244726][ T5879] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 998.244770][ T5879] usb 5-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 998.244791][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.288925][ T5879] usb 5-1: config 0 descriptor?? [ 998.402197][ T6466] bridge_slave_1: left allmulticast mode [ 998.402233][ T6466] bridge_slave_1: left promiscuous mode [ 998.402447][ T6466] bridge0: port 2(bridge_slave_1) entered disabled state [ 998.464472][ T5114] Bluetooth: hci5: command tx timeout [ 998.517860][ T6466] bridge_slave_0: left allmulticast mode [ 998.517896][ T6466] bridge_slave_0: left promiscuous mode [ 998.521046][ T6466] bridge0: port 1(bridge_slave_0) entered disabled state [ 1000.036928][ T5879] usbhid 5-1:0.0: can't add hid device: -71 [ 1000.092659][ T5879] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1000.268273][ T5879] usb 5-1: USB disconnect, device number 25 [ 1000.542895][ T5114] Bluetooth: hci5: command tx timeout [ 1000.566949][ T6466] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1000.852916][T10548] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1000.898628][ T6466] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1000.953911][ T6466] bond0 (unregistering): Released all slaves [ 1001.006850][T10548] usb 6-1: config 6 has an invalid interface number: 14 but max is 0 [ 1001.006877][T10548] usb 6-1: config 6 has no interface number 0 [ 1001.006909][T10548] usb 6-1: config 6 interface 14 has no altsetting 0 [ 1001.016791][T10548] usb 6-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=6f.50 [ 1001.016818][T10548] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.016838][T10548] usb 6-1: Product: syz [ 1001.016850][T10548] usb 6-1: Manufacturer: syz [ 1001.016864][T10548] usb 6-1: SerialNumber: syz [ 1001.365360][T10548] gspca_main: jl2005bcd-2.14.0 probing 0979:0227 [ 1001.365466][T10548] command write [95] error -22 [ 1001.384979][T10548] usb 6-1: USB disconnect, device number 18 [ 1001.568966][T12400] syz.3.1485 (12400): drop_caches: 2 [ 1002.068373][T12395] ALSA: mixer_oss: invalid OSS volume '' [ 1002.119721][T12226] bridge0: port 1(bridge_slave_0) entered blocking state [ 1002.119999][T12226] bridge0: port 1(bridge_slave_0) entered disabled state [ 1002.120219][T12226] bridge_slave_0: entered allmulticast mode [ 1002.125432][T12226] bridge_slave_0: entered promiscuous mode [ 1002.178499][ T6466] hsr_slave_0: left promiscuous mode [ 1002.226553][ T6466] hsr_slave_1: left promiscuous mode [ 1002.227510][ T6466] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1002.262810][ T6466] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1002.688314][ T5114] Bluetooth: hci5: command tx timeout [ 1003.983905][T12426] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1488'. [ 1004.712027][ T5114] Bluetooth: hci5: command tx timeout [ 1006.167258][ T6466] team0 (unregistering): Port device team_slave_1 removed [ 1007.192575][ T6466] team0 (unregistering): Port device team_slave_0 removed [ 1007.753075][T12449] syz.4.1492 (12449): drop_caches: 2 [ 1012.820683][ C1] vkms_vblank_simulate: vblank timer overrun [ 1012.836743][T12226] bridge0: port 2(bridge_slave_1) entered blocking state [ 1012.836870][T12226] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.837078][T12226] bridge_slave_1: entered allmulticast mode [ 1012.838795][T12226] bridge_slave_1: entered promiscuous mode [ 1012.985519][ C1] vkms_vblank_simulate: vblank timer overrun [ 1013.091647][ C1] vkms_vblank_simulate: vblank timer overrun [ 1014.386483][T12226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1014.396519][T12226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1014.707065][ C1] vkms_vblank_simulate: vblank timer overrun [ 1015.270283][ C1] vkms_vblank_simulate: vblank timer overrun [ 1015.707941][ C1] vkms_vblank_simulate: vblank timer overrun [ 1016.189474][T12226] team0: Port device team_slave_0 added [ 1016.224007][T12226] team0: Port device team_slave_1 added [ 1016.472152][ C1] vkms_vblank_simulate: vblank timer overrun [ 1016.708946][ C1] vkms_vblank_simulate: vblank timer overrun [ 1017.355502][T12530] ALSA: mixer_oss: invalid OSS volume '' [ 1017.402792][T12526] syz.5.1507 (12526): drop_caches: 2 [ 1017.985464][T12226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1017.985481][T12226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1017.985502][T12226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1018.036032][T12226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1018.036047][T12226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1018.036073][T12226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1018.119979][T12345] chnl_net:caif_netlink_parms(): no params data found [ 1018.241776][ T5880] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1018.394874][ T5880] usb 5-1: config 6 has an invalid interface number: 14 but max is 0 [ 1018.394890][ T5880] usb 5-1: config 6 has no interface number 0 [ 1018.394911][ T5880] usb 5-1: config 6 interface 14 has no altsetting 0 [ 1018.396846][ T5880] usb 5-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=6f.50 [ 1018.396861][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.396871][ T5880] usb 5-1: Product: syz [ 1018.396879][ T5880] usb 5-1: Manufacturer: syz [ 1018.396886][ T5880] usb 5-1: SerialNumber: syz [ 1018.752507][ T5880] gspca_main: jl2005bcd-2.14.0 probing 0979:0227 [ 1018.752599][ T5880] command write [95] error -22 [ 1018.762294][ T5880] usb 5-1: USB disconnect, device number 26 [ 1018.851546][T12226] hsr_slave_0: entered promiscuous mode [ 1018.853682][T12226] hsr_slave_1: entered promiscuous mode [ 1018.865824][T12226] debugfs: 'hsr0' already exists in 'hsr' [ 1018.865849][T12226] Cannot create hsr debugfs directory [ 1020.080641][ C0] vkms_vblank_simulate: vblank timer overrun [ 1020.618247][ C0] vkms_vblank_simulate: vblank timer overrun [ 1020.767156][ C0] vkms_vblank_simulate: vblank timer overrun [ 1021.249407][ T6466] bridge_slave_1: left allmulticast mode [ 1021.249435][ T6466] bridge_slave_1: left promiscuous mode [ 1021.249692][ T6466] bridge0: port 2(bridge_slave_1) entered disabled state [ 1021.257960][ C0] vkms_vblank_simulate: vblank timer overrun [ 1021.403384][ T6466] bridge_slave_0: left allmulticast mode [ 1021.403413][ T6466] bridge_slave_0: left promiscuous mode [ 1021.403654][ T6466] bridge0: port 1(bridge_slave_0) entered disabled state [ 1021.839668][T12560] random: crng reseeded on system resumption [ 1021.855652][ C0] vkms_vblank_simulate: vblank timer overrun [ 1022.272174][ C0] vkms_vblank_simulate: vblank timer overrun [ 1022.638324][ C0] vkms_vblank_simulate: vblank timer overrun [ 1023.233755][ C0] vkms_vblank_simulate: vblank timer overrun [ 1023.677619][ C0] vkms_vblank_simulate: vblank timer overrun [ 1025.275574][ T6466] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1025.402437][ T6466] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1025.480874][ T6466] bond0 (unregistering): Released all slaves [ 1027.701848][ T6466] hsr_slave_0: left promiscuous mode [ 1027.751931][ T6466] hsr_slave_1: left promiscuous mode [ 1027.752838][ T6466] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1027.862695][ T6466] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1030.331911][ T8060] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1030.484264][ T8060] usb 4-1: config 6 has an invalid interface number: 14 but max is 0 [ 1030.484289][ T8060] usb 4-1: config 6 has no interface number 0 [ 1030.484320][ T8060] usb 4-1: config 6 interface 14 has no altsetting 0 [ 1030.487356][ T8060] usb 4-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=6f.50 [ 1030.487383][ T8060] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.487403][ T8060] usb 4-1: Product: syz [ 1030.487417][ T8060] usb 4-1: Manufacturer: syz [ 1030.487431][ T8060] usb 4-1: SerialNumber: syz [ 1032.311833][ T8060] gspca_main: jl2005bcd-2.14.0 probing 0979:0227 [ 1032.311936][ T8060] command write [95] error -22 [ 1032.334520][ T8060] usb 4-1: USB disconnect, device number 14 [ 1033.312189][ T8060] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1033.562032][ T8060] usb 6-1: Using ep0 maxpacket: 32 [ 1033.610502][ T8060] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1033.610716][ T8060] usb 6-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 1033.610771][ T8060] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.826051][ T8060] usb 6-1: config 0 descriptor?? [ 1035.202783][ T6466] team0 (unregistering): Port device team_slave_1 removed [ 1035.443038][ T6466] team0 (unregistering): Port device team_slave_0 removed [ 1035.679451][ T8060] usbhid 6-1:0.0: can't add hid device: -71 [ 1035.681001][ T8060] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1035.729886][ T8060] usb 6-1: USB disconnect, device number 19 [ 1036.661745][T10548] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1036.814156][T10548] usb 5-1: config 6 has an invalid interface number: 14 but max is 0 [ 1036.814181][T10548] usb 5-1: config 6 has no interface number 0 [ 1036.814221][T10548] usb 5-1: config 6 interface 14 has no altsetting 0 [ 1036.822629][T10548] usb 5-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=6f.50 [ 1036.822656][T10548] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.822674][T10548] usb 5-1: Product: syz [ 1036.822687][T10548] usb 5-1: Manufacturer: syz [ 1036.822700][T10548] usb 5-1: SerialNumber: syz [ 1037.075695][ T6692] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1037.095492][ T6692] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1037.104668][ T6692] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1037.117637][ T6692] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1037.121908][ T6692] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1037.180388][T10548] gspca_main: jl2005bcd-2.14.0 probing 0979:0227 [ 1037.182521][T10548] command write [95] error -22 [ 1037.246314][T10548] usb 5-1: USB disconnect, device number 27 [ 1037.890839][T12345] bridge0: port 1(bridge_slave_0) entered blocking state [ 1037.898827][T12345] bridge0: port 1(bridge_slave_0) entered disabled state [ 1037.909691][T12345] bridge_slave_0: entered allmulticast mode [ 1038.044951][T12345] bridge_slave_0: entered promiscuous mode [ 1038.533134][T12345] bridge0: port 2(bridge_slave_1) entered blocking state [ 1038.533277][T12345] bridge0: port 2(bridge_slave_1) entered disabled state [ 1038.533469][T12345] bridge_slave_1: entered allmulticast mode [ 1038.558064][T12345] bridge_slave_1: entered promiscuous mode [ 1039.191769][ T5114] Bluetooth: hci2: command tx timeout [ 1039.484982][T12345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1039.518558][T12345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1039.531786][ T5866] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1040.852490][ T5866] usb 6-1: config 6 has an invalid interface number: 14 but max is 0 [ 1040.852515][ T5866] usb 6-1: config 6 has no interface number 0 [ 1040.852547][ T5866] usb 6-1: config 6 interface 14 has no altsetting 0 [ 1040.855392][ T5866] usb 6-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=6f.50 [ 1040.855417][ T5866] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.855436][ T5866] usb 6-1: Product: syz [ 1040.855450][ T5866] usb 6-1: Manufacturer: syz [ 1040.855463][ T5866] usb 6-1: SerialNumber: syz [ 1041.869910][ T5114] Bluetooth: hci2: command tx timeout [ 1042.519263][T12688] ALSA: mixer_oss: invalid OSS volume '' [ 1042.567041][T12688] syz.4.1536 (12688): drop_caches: 2 [ 1042.880583][ T5866] gspca_main: jl2005bcd-2.14.0 probing 0979:0227 [ 1042.880686][ T5866] command write [95] error -22 [ 1042.958881][ T5866] usb 6-1: USB disconnect, device number 20 [ 1043.903923][ T5114] Bluetooth: hci2: command tx timeout [ 1044.822833][T12345] team0: Port device team_slave_0 added [ 1045.820170][T12345] team0: Port device team_slave_1 added [ 1045.981992][ T5114] Bluetooth: hci2: command tx timeout [ 1047.200821][T12719] syz.5.1541 (12719): drop_caches: 2 [ 1047.322571][T12345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1047.322582][T12345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1047.322597][T12345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1047.324042][T12345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1047.324051][T12345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1047.324065][T12345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1048.154821][T12345] hsr_slave_0: entered promiscuous mode [ 1048.156347][T12345] hsr_slave_1: entered promiscuous mode [ 1048.157301][T12345] debugfs: 'hsr0' already exists in 'hsr' [ 1048.157324][T12345] Cannot create hsr debugfs directory [ 1048.575995][ T6466] bridge_slave_1: left allmulticast mode [ 1048.576022][ T6466] bridge_slave_1: left promiscuous mode [ 1048.577301][ T6466] bridge0: port 2(bridge_slave_1) entered disabled state [ 1048.658947][T12740] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1544'. [ 1049.303244][ T6466] bridge_slave_0: left allmulticast mode [ 1049.303264][ T6466] bridge_slave_0: left promiscuous mode [ 1049.303799][ T6466] bridge0: port 1(bridge_slave_0) entered disabled state [ 1050.733376][T12753] netlink: 'syz.4.1547': attribute type 10 has an invalid length. [ 1051.115042][ T6466] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1051.142078][T10548] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1051.851803][T10548] usb 4-1: Using ep0 maxpacket: 32 [ 1051.910554][T10548] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1051.910605][T10548] usb 4-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 1051.910628][T10548] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.946967][T10548] usb 4-1: config 0 descriptor?? [ 1052.113009][ T6466] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1052.323020][ T6466] bond0 (unregistering): Released all slaves [ 1053.710329][T12753] bridge0: port 2(bridge_slave_1) entered disabled state [ 1053.721353][T12753] bridge0: port 1(bridge_slave_0) entered disabled state [ 1053.781975][T12753] bridge0: port 2(bridge_slave_1) entered blocking state [ 1053.787099][T12753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1053.813140][T12753] bridge0: port 1(bridge_slave_0) entered blocking state [ 1053.814058][T12753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1053.825338][T12753] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1053.951803][ T6466] hsr_slave_0: left promiscuous mode [ 1053.993072][ T6466] hsr_slave_1: left promiscuous mode [ 1053.994117][ T6466] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1054.062764][ T6466] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1054.466139][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.466721][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.473388][T10548] usbhid 4-1:0.0: can't add hid device: -71 [ 1055.473601][T10548] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1055.478664][T10548] usb 4-1: USB disconnect, device number 15 [ 1055.649242][ T6692] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1055.730830][ T6692] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1055.744593][ T6692] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1055.766329][ T6692] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1055.768695][ T6692] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1056.640605][ T6466] team0 (unregistering): Port device team_slave_1 removed [ 1057.961790][ T5114] Bluetooth: hci4: command tx timeout [ 1057.966408][ T6466] team0 (unregistering): Port device team_slave_0 removed [ 1060.891791][ T5114] Bluetooth: hci4: command tx timeout [ 1061.599649][T12821] random: crng reseeded on system resumption [ 1062.948556][T12834] ALSA: mixer_oss: invalid OSS volume '' [ 1062.971235][T12834] syz.3.1566 (12834): drop_caches: 2 [ 1062.981684][ T5114] Bluetooth: hci4: command tx timeout [ 1066.119162][ T5114] Bluetooth: hci4: command tx timeout [ 1067.789199][T12855] ALSA: mixer_oss: invalid OSS volume '' [ 1070.463046][T12876] ALSA: mixer_oss: invalid OSS volume '' [ 1070.482873][T12876] syz.4.1572 (12876): drop_caches: 2 [ 1071.848054][T12641] chnl_net:caif_netlink_parms(): no params data found [ 1074.275076][T12903] ALSA: mixer_oss: invalid OSS volume '' [ 1074.310527][T12903] syz.5.1577 (12903): drop_caches: 2 [ 1074.347290][T12641] bridge0: port 1(bridge_slave_0) entered blocking state [ 1074.347498][T12641] bridge0: port 1(bridge_slave_0) entered disabled state [ 1074.347694][T12641] bridge_slave_0: entered allmulticast mode [ 1074.511771][T12641] bridge_slave_0: entered promiscuous mode [ 1074.571878][T12641] bridge0: port 2(bridge_slave_1) entered blocking state [ 1074.572010][T12641] bridge0: port 2(bridge_slave_1) entered disabled state [ 1074.574396][T12641] bridge_slave_1: entered allmulticast mode [ 1074.579032][T12641] bridge_slave_1: entered promiscuous mode [ 1074.778947][T12907] ALSA: mixer_oss: invalid OSS volume '' [ 1075.286181][T12907] syz.3.1579 (12907): drop_caches: 2 [ 1075.744131][ T6466] bridge_slave_1: left allmulticast mode [ 1075.744152][ T6466] bridge_slave_1: left promiscuous mode [ 1075.744302][ T6466] bridge0: port 2(bridge_slave_1) entered disabled state [ 1075.812106][ T6466] bridge_slave_0: left allmulticast mode [ 1075.813214][ T6466] bridge_slave_0: left promiscuous mode [ 1075.816640][ T6466] bridge0: port 1(bridge_slave_0) entered disabled state [ 1077.605293][ T6466] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1078.735289][ T6466] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1078.827748][T12929] ALSA: mixer_oss: invalid OSS volume '' [ 1078.926782][ T6466] bond0 (unregistering): Released all slaves [ 1079.138985][T12641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1079.204915][T12641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1079.521802][ T6466] hsr_slave_0: left promiscuous mode [ 1079.541896][ T6466] hsr_slave_1: left promiscuous mode [ 1079.542583][ T6466] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1079.592414][ T6466] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1080.092226][ C1] vkms_vblank_simulate: vblank timer overrun [ 1080.133460][ C1] vkms_vblank_simulate: vblank timer overrun [ 1080.386271][T12949] random: crng reseeded on system resumption [ 1080.922531][ C1] vkms_vblank_simulate: vblank timer overrun [ 1081.173276][ C1] vkms_vblank_simulate: vblank timer overrun [ 1081.273167][ C1] vkms_vblank_simulate: vblank timer overrun [ 1081.352233][T12948] syz.5.1588 (12948): drop_caches: 2 [ 1081.362851][ C1] vkms_vblank_simulate: vblank timer overrun [ 1081.702226][T12957] netlink: 'syz.3.1591': attribute type 10 has an invalid length. [ 1081.982305][ T6466] team0 (unregistering): Port device team_slave_1 removed [ 1082.249910][ T6466] team0 (unregistering): Port device team_slave_0 removed [ 1083.542896][T12957] bridge0: port 2(bridge_slave_1) entered disabled state [ 1083.543074][T12957] bridge0: port 1(bridge_slave_0) entered disabled state [ 1083.547796][T12957] bridge0: port 2(bridge_slave_1) entered blocking state [ 1083.547882][T12957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1083.548274][T12957] bridge0: port 1(bridge_slave_0) entered blocking state [ 1083.548482][T12957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1083.551079][T12957] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1083.551470][T12776] chnl_net:caif_netlink_parms(): no params data found [ 1083.564328][T12641] team0: Port device team_slave_0 added [ 1083.629939][T12641] team0: Port device team_slave_1 added [ 1083.924648][T12973] ALSA: mixer_oss: invalid OSS volume '' [ 1083.955198][T12971] syz.4.1595 (12971): drop_caches: 2 [ 1084.148708][T12641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1084.148719][T12641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1084.148733][T12641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1084.316338][T12641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1084.316354][T12641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1084.316381][T12641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1084.627158][ C1] vkms_vblank_simulate: vblank timer overrun [ 1085.910894][T12776] bridge0: port 1(bridge_slave_0) entered blocking state [ 1085.936252][T12776] bridge0: port 1(bridge_slave_0) entered disabled state [ 1085.936487][T12776] bridge_slave_0: entered allmulticast mode [ 1086.232574][ C1] vkms_vblank_simulate: vblank timer overrun [ 1086.402744][T12776] bridge_slave_0: entered promiscuous mode [ 1086.604472][ C1] vkms_vblank_simulate: vblank timer overrun [ 1086.656283][T12776] bridge0: port 2(bridge_slave_1) entered blocking state [ 1086.660761][T12776] bridge0: port 2(bridge_slave_1) entered disabled state [ 1086.680862][T12776] bridge_slave_1: entered allmulticast mode [ 1086.730023][T12776] bridge_slave_1: entered promiscuous mode [ 1086.916151][ C1] vkms_vblank_simulate: vblank timer overrun [ 1087.311760][T10548] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1087.486914][ C1] vkms_vblank_simulate: vblank timer overrun [ 1087.849017][ C1] vkms_vblank_simulate: vblank timer overrun [ 1088.471997][ C1] vkms_vblank_simulate: vblank timer overrun [ 1088.566936][ C1] vkms_vblank_simulate: vblank timer overrun [ 1088.614129][T10548] usb 4-1: config 6 has an invalid interface number: 14 but max is 0 [ 1088.614155][T10548] usb 4-1: config 6 has no interface number 0 [ 1088.614187][T10548] usb 4-1: config 6 interface 14 has no altsetting 0 [ 1088.646412][T10548] usb 4-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=6f.50 [ 1088.646439][T10548] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.646458][T10548] usb 4-1: Product: syz [ 1088.646472][T10548] usb 4-1: Manufacturer: syz [ 1088.646485][T10548] usb 4-1: SerialNumber: syz [ 1088.744773][T12641] hsr_slave_0: entered promiscuous mode [ 1088.746164][T12641] hsr_slave_1: entered promiscuous mode [ 1088.747157][T12641] debugfs: 'hsr0' already exists in 'hsr' [ 1088.747180][T12641] Cannot create hsr debugfs directory [ 1089.614250][ C1] vkms_vblank_simulate: vblank timer overrun [ 1091.557018][T10548] gspca_main: jl2005bcd-2.14.0 probing 0979:0227 [ 1091.557114][T10548] command write [95] error -22 [ 1091.582704][T10548] usb 4-1: USB disconnect, device number 16 [ 1091.684218][T12776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1092.264203][T12776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1094.696434][T12776] team0: Port device team_slave_0 added [ 1095.631491][T12776] team0: Port device team_slave_1 added [ 1095.976209][T12776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1095.976224][T12776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1095.976250][T12776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1095.980324][T12776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1095.980337][T12776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1095.980362][T12776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1098.270605][ T6692] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1098.298516][ T6692] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1098.300088][ T6692] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1098.301457][ T6692] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1098.303394][ T6692] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1098.686497][T12776] hsr_slave_0: entered promiscuous mode [ 1098.687949][T12776] hsr_slave_1: entered promiscuous mode [ 1098.689000][T12776] debugfs: 'hsr0' already exists in 'hsr' [ 1098.689023][T12776] Cannot create hsr debugfs directory [ 1099.250551][T10548] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1099.771757][T10548] usb 6-1: Using ep0 maxpacket: 32 [ 1101.131971][ T6692] Bluetooth: hci2: command tx timeout [ 1101.351313][T13075] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1617'. [ 1101.964991][ T6742] bridge_slave_1: left allmulticast mode [ 1101.965220][ T6742] bridge_slave_1: left promiscuous mode [ 1101.969055][ T6742] bridge0: port 2(bridge_slave_1) entered disabled state [ 1102.036943][ T6742] bridge_slave_0: left allmulticast mode [ 1102.037105][ T6742] bridge_slave_0: left promiscuous mode [ 1102.037397][ T6742] bridge0: port 1(bridge_slave_0) entered disabled state [ 1102.040164][T10548] usb 6-1: device descriptor read/all, error -71 [ 1103.181868][ T5114] Bluetooth: hci2: command tx timeout [ 1106.439707][ T5114] Bluetooth: hci2: command tx timeout [ 1108.802462][ T5114] Bluetooth: hci2: command tx timeout [ 1108.860461][ T6742] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1110.002434][ T6742] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1110.458501][ T6742] bond0 (unregistering): Released all slaves [ 1110.706910][T13120] netlink: 'syz.3.1628': attribute type 10 has an invalid length. [ 1110.726289][T13120] bridge0: port 2(bridge_slave_1) entered disabled state [ 1110.726514][T13120] bridge0: port 1(bridge_slave_0) entered disabled state [ 1111.301902][ T6742] hsr_slave_0: left promiscuous mode [ 1111.345285][ T6742] hsr_slave_1: left promiscuous mode [ 1111.346657][ T6742] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1111.397243][ T6742] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1114.224253][ T6742] team0 (unregistering): Port device team_slave_1 removed [ 1114.352314][ T6742] team0 (unregistering): Port device team_slave_0 removed [ 1115.828656][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.828719][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.885973][ T6692] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1115.983326][ T6692] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1116.171800][ T6692] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1116.235095][ T6692] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1116.278990][ T6692] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1116.485346][T13163] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1638'. [ 1117.598239][T13172] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1641'. [ 1120.197533][ T6692] Bluetooth: hci5: command tx timeout [ 1122.222302][ T6692] Bluetooth: hci5: command tx timeout [ 1124.397244][ T6692] Bluetooth: hci5: command tx timeout [ 1124.721390][T13211] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1649'. [ 1125.860372][ C1] vkms_vblank_simulate: vblank timer overrun [ 1126.354111][ C1] vkms_vblank_simulate: vblank timer overrun [ 1126.479965][ T6692] Bluetooth: hci5: command tx timeout [ 1126.688238][T13054] chnl_net:caif_netlink_parms(): no params data found [ 1127.089449][ C1] vkms_vblank_simulate: vblank timer overrun [ 1127.609985][ C1] vkms_vblank_simulate: vblank timer overrun [ 1127.846213][ C1] vkms_vblank_simulate: vblank timer overrun [ 1128.388489][ C1] vkms_vblank_simulate: vblank timer overrun [ 1128.522693][ C1] vkms_vblank_simulate: vblank timer overrun [ 1129.099877][ C1] vkms_vblank_simulate: vblank timer overrun [ 1129.710747][ C1] vkms_vblank_simulate: vblank timer overrun [ 1130.430647][ C1] vkms_vblank_simulate: vblank timer overrun [ 1130.672154][ C1] vkms_vblank_simulate: vblank timer overrun [ 1130.911732][ C1] vkms_vblank_simulate: vblank timer overrun [ 1132.811061][T13260] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1659'. [ 1133.271957][ T6742] bridge_slave_1: left allmulticast mode [ 1133.271984][ T6742] bridge_slave_1: left promiscuous mode [ 1133.272492][ T6742] bridge0: port 2(bridge_slave_1) entered disabled state [ 1135.203983][ T6742] bridge_slave_0: left allmulticast mode [ 1135.204011][ T6742] bridge_slave_0: left promiscuous mode [ 1135.204274][ T6742] bridge0: port 1(bridge_slave_0) entered disabled state [ 1137.833223][ T6742] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1138.373056][ T6742] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1138.541859][ T6742] bond0 (unregistering): Released all slaves [ 1139.915901][T13160] chnl_net:caif_netlink_parms(): no params data found [ 1140.102020][ T5880] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1140.251710][ T5880] usb 6-1: Using ep0 maxpacket: 32 [ 1140.254006][ T5880] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1140.254052][ T5880] usb 6-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 1140.254074][ T5880] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1140.290056][ T5880] usb 6-1: config 0 descriptor?? [ 1140.706637][ T5866] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1140.851787][ T5866] usb 5-1: Using ep0 maxpacket: 32 [ 1140.853944][ T5866] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1140.853989][ T5866] usb 5-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 1140.854011][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1140.863927][ T5866] usb 5-1: config 0 descriptor?? [ 1141.032119][ T5880] elo 0003:04E7:0009.0005: hidraw0: USB HID v0.00 Device [HID 04e7:0009] on usb-dummy_hcd.5-1/input0 [ 1141.035347][ T6742] hsr_slave_0: left promiscuous mode [ 1141.553844][ T6742] hsr_slave_1: left promiscuous mode [ 1141.555537][ T6742] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1141.591513][ T6742] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1142.199994][ T8060] usb 6-1: USB disconnect, device number 23 [ 1143.429578][ T5866] usbhid 5-1:0.0: can't add hid device: -71 [ 1143.429703][ T5866] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1143.460235][ T5866] usb 5-1: USB disconnect, device number 28 [ 1145.620662][ T5880] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 1146.674416][ T6742] team0 (unregistering): Port device team_slave_1 removed [ 1146.917870][ T5880] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1146.918623][ T5880] usb 6-1: not running at top speed; connect to a high speed hub [ 1146.920105][ T5880] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1146.920128][ T5880] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1146.959658][ T5880] usb 6-1: string descriptor 0 read error: -22 [ 1146.959830][ T5880] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1146.959853][ T5880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1147.016848][ T5880] usb 6-1: 0:2 : does not exist [ 1147.762667][ T6742] team0 (unregistering): Port device team_slave_0 removed [ 1148.501758][ T5880] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1148.510278][ T5880] usb 6-1: 5:0: failed to get current value for ch 1 (-22) [ 1148.601113][ T5880] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1148.619533][ T5880] usb 6-1: USB disconnect, device number 24 [ 1148.802292][T13054] bridge0: port 1(bridge_slave_0) entered blocking state [ 1148.802437][T13054] bridge0: port 1(bridge_slave_0) entered disabled state [ 1148.802632][T13054] bridge_slave_0: entered allmulticast mode [ 1148.804311][T13054] bridge_slave_0: entered promiscuous mode [ 1148.882999][T13054] bridge0: port 2(bridge_slave_1) entered blocking state [ 1148.883147][T13054] bridge0: port 2(bridge_slave_1) entered disabled state [ 1148.883341][T13054] bridge_slave_1: entered allmulticast mode [ 1148.886398][T13054] bridge_slave_1: entered promiscuous mode [ 1149.185038][T13054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1149.202146][T13362] ALSA: mixer_oss: invalid OSS volume '' [ 1149.295361][T13054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1150.761986][T13160] bridge0: port 1(bridge_slave_0) entered blocking state [ 1150.762133][T13160] bridge0: port 1(bridge_slave_0) entered disabled state [ 1150.762355][T13160] bridge_slave_0: entered allmulticast mode [ 1150.803912][T13160] bridge_slave_0: entered promiscuous mode [ 1152.009370][T13160] bridge0: port 2(bridge_slave_1) entered blocking state [ 1152.010274][T13160] bridge0: port 2(bridge_slave_1) entered disabled state [ 1152.010602][T13160] bridge_slave_1: entered allmulticast mode [ 1152.033208][T13160] bridge_slave_1: entered promiscuous mode [ 1152.048805][T13054] team0: Port device team_slave_0 added [ 1153.394654][T13054] team0: Port device team_slave_1 added [ 1155.578509][T13160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1157.393679][T13160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1157.624039][T13160] team0: Port device team_slave_0 added [ 1157.627253][T13160] team0: Port device team_slave_1 added [ 1157.804281][T13160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1157.804293][T13160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1157.804306][T13160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1157.805733][T13160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1157.805744][T13160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1157.805757][T13160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1159.523739][ T5114] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1159.533425][ T5114] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1159.534662][ T5114] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1159.536015][ T5114] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1159.539520][ T5114] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1159.668130][T13160] hsr_slave_0: entered promiscuous mode [ 1159.668924][T13160] hsr_slave_1: entered promiscuous mode [ 1159.669509][T13160] debugfs: 'hsr0' already exists in 'hsr' [ 1159.669525][T13160] Cannot create hsr debugfs directory [ 1160.552210][ T992] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 1160.734960][ T8319] bridge_slave_1: left allmulticast mode [ 1160.734987][ T8319] bridge_slave_1: left promiscuous mode [ 1160.735223][ T8319] bridge0: port 2(bridge_slave_1) entered disabled state [ 1160.761258][T12764] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1160.784260][ T992] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1160.784818][ T992] usb 4-1: not running at top speed; connect to a high speed hub [ 1160.785912][ T992] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1160.785932][ T992] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1160.789127][ T992] usb 4-1: string descriptor 0 read error: -22 [ 1160.789246][ T992] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1160.789259][ T992] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.814272][ T992] usb 4-1: 0:2 : does not exist [ 1160.834957][ T8319] bridge_slave_0: left allmulticast mode [ 1160.834982][ T8319] bridge_slave_0: left promiscuous mode [ 1160.835664][ T8319] bridge0: port 1(bridge_slave_0) entered disabled state [ 1160.911903][T12764] usb 6-1: Using ep0 maxpacket: 32 [ 1160.913853][T12764] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1160.913984][T12764] usb 6-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 1160.914007][T12764] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.920286][T12764] usb 6-1: config 0 descriptor?? [ 1161.213112][ T8319] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1161.322816][ T8319] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1161.373313][T13420] ALSA: mixer_oss: invalid OSS volume '' [ 1161.391771][ T8319] bond0 (unregistering): Released all slaves [ 1161.582706][ T5114] Bluetooth: hci2: command tx timeout [ 1161.694488][ T992] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1161.711508][ T992] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 1161.774306][ T992] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1161.810720][T13420] syz.4.1694 (13420): drop_caches: 2 [ 1161.940889][ T992] usb 4-1: USB disconnect, device number 17 [ 1162.400188][T12764] usbhid 6-1:0.0: can't add hid device: -71 [ 1162.400307][T12764] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1162.408092][T12764] usb 6-1: USB disconnect, device number 25 [ 1162.702167][ T8319] team0 (unregistering): Port device team_slave_1 removed [ 1163.671906][ T5114] Bluetooth: hci2: command tx timeout [ 1165.751884][ T5114] Bluetooth: hci2: command tx timeout [ 1167.822113][ T5114] Bluetooth: hci2: command tx timeout [ 1171.982306][ T8319] team0 (unregistering): Port device team_slave_0 removed [ 1173.332982][T13444] ALSA: mixer_oss: invalid OSS volume '' [ 1173.400182][T13444] syz.3.1699 (13444): drop_caches: 2 [ 1173.660999][T13445] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1698'. [ 1177.076840][T13409] chnl_net:caif_netlink_parms(): no params data found [ 1177.340399][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.340472][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.493384][T10548] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1178.524022][ T6692] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1178.528649][ T6692] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1178.529673][ T6692] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1178.530801][ T6692] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1178.539250][ T6692] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1178.573577][ T995] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1178.631920][ T3536] bridge_slave_1: left allmulticast mode [ 1178.631945][ T3536] bridge_slave_1: left promiscuous mode [ 1178.632209][ T3536] bridge0: port 2(bridge_slave_1) entered disabled state [ 1178.643953][T10548] usb 6-1: config 6 has an invalid interface number: 14 but max is 0 [ 1178.643976][T10548] usb 6-1: config 6 has no interface number 0 [ 1178.644007][T10548] usb 6-1: config 6 interface 14 has no altsetting 0 [ 1178.646885][T10548] usb 6-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=6f.50 [ 1178.646909][T10548] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.646927][T10548] usb 6-1: Product: syz [ 1178.646940][T10548] usb 6-1: Manufacturer: syz [ 1178.646953][T10548] usb 6-1: SerialNumber: syz [ 1178.731835][ T995] usb 4-1: Using ep0 maxpacket: 32 [ 1178.734987][ T995] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1178.735001][T10548] gspca_main: jl2005bcd-2.14.0 probing 0979:0227 [ 1178.735029][ T995] usb 4-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 1178.735051][ T995] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1178.735160][T10548] command write [95] error -22 [ 1178.794158][T10548] usb 6-1: USB disconnect, device number 26 [ 1178.811352][ T995] usb 4-1: config 0 descriptor?? [ 1178.890692][T13480] syz.4.1706 (13480): drop_caches: 2 [ 1178.975023][ T3536] bridge_slave_0: left allmulticast mode [ 1178.975051][ T3536] bridge_slave_0: left promiscuous mode [ 1178.977358][ T3536] bridge0: port 1(bridge_slave_0) entered disabled state [ 1179.478991][ T995] elo 0003:04E7:0009.0006: hidraw0: USB HID v0.00 Device [HID 04e7:0009] on usb-dummy_hcd.3-1/input0 [ 1180.712980][ T5114] Bluetooth: hci4: command tx timeout [ 1181.526183][T10548] usb 4-1: USB disconnect, device number 18 [ 1181.903204][T13497] ALSA: mixer_oss: invalid OSS volume '' [ 1181.931540][T13497] syz.5.1709 (13497): drop_caches: 2 [ 1182.412250][ T3536] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1182.894705][ T5114] Bluetooth: hci4: command tx timeout [ 1182.924912][ T3536] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1184.500648][ T3536] bond0 (unregistering): Released all slaves [ 1184.947895][ T5114] Bluetooth: hci4: command tx timeout [ 1186.432229][T10548] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 1186.768699][T10548] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1186.769175][T10548] usb 5-1: not running at top speed; connect to a high speed hub [ 1186.770144][T10548] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1186.770156][T10548] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1186.774500][T10548] usb 5-1: string descriptor 0 read error: -22 [ 1186.774649][T10548] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1186.774670][T10548] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.885636][T10548] usb 5-1: 0:2 : does not exist [ 1187.021817][ T5114] Bluetooth: hci4: command tx timeout [ 1187.071806][ T3536] hsr_slave_0: left promiscuous mode [ 1187.093551][ T3536] hsr_slave_1: left promiscuous mode [ 1187.094295][ T3536] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1187.155056][ T3536] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1188.171027][T10548] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1188.328935][T10548] usb 5-1: Warning! Unlikely big volume range (=23808), cval->res is probably wrong. [ 1188.329194][T10548] usb 5-1: [5] FU [Mic Capture Volume] ch = 1, val = -23808/0/1 [ 1188.365300][T10548] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1188.404091][T10548] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 1188.474288][T10548] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1188.491014][T10548] usb 5-1: USB disconnect, device number 29 [ 1188.589004][T13525] udevd[13525]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1189.480426][ C1] vkms_vblank_simulate: vblank timer overrun [ 1190.200206][T10548] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1190.377126][T13540] ALSA: mixer_oss: invalid OSS volume '' [ 1190.441846][T10548] usb 5-1: Using ep0 maxpacket: 32 [ 1190.446044][T10548] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1190.446088][T10548] usb 5-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 1190.446110][T10548] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1190.494317][T10548] usb 5-1: config 0 descriptor?? [ 1190.576347][ C1] vkms_vblank_simulate: vblank timer overrun [ 1190.607790][T13540] syz.3.1720 (13540): drop_caches: 2 [ 1191.034700][ T3536] team0 (unregistering): Port device team_slave_1 removed [ 1191.436126][ T3536] team0 (unregistering): Port device team_slave_0 removed [ 1192.036214][T10548] usbhid 5-1:0.0: can't add hid device: -71 [ 1192.036298][T10548] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1192.061787][T10548] usb 5-1: USB disconnect, device number 30 [ 1193.306964][ C1] vkms_vblank_simulate: vblank timer overrun [ 1194.688867][T13409] bridge0: port 1(bridge_slave_0) entered blocking state [ 1194.689322][T13409] bridge0: port 1(bridge_slave_0) entered disabled state [ 1194.689548][T13409] bridge_slave_0: entered allmulticast mode [ 1194.716170][T13409] bridge_slave_0: entered promiscuous mode [ 1194.749420][T13409] bridge0: port 2(bridge_slave_1) entered blocking state [ 1194.749563][T13409] bridge0: port 2(bridge_slave_1) entered disabled state [ 1194.749751][T13409] bridge_slave_1: entered allmulticast mode [ 1194.791807][T10548] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1194.833299][T13409] bridge_slave_1: entered promiscuous mode [ 1196.043871][T10548] usb 5-1: config 6 has an invalid interface number: 14 but max is 0 [ 1196.043896][T10548] usb 5-1: config 6 has no interface number 0 [ 1196.043928][T10548] usb 5-1: config 6 interface 14 has no altsetting 0 [ 1196.046684][T10548] usb 5-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=6f.50 [ 1196.046710][T10548] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1196.046728][T10548] usb 5-1: Product: syz [ 1196.046742][T10548] usb 5-1: Manufacturer: syz [ 1196.046756][T10548] usb 5-1: SerialNumber: syz [ 1196.322825][T13580] ALSA: mixer_oss: invalid OSS volume '' [ 1196.376061][T13580] syz.3.1728 (13580): drop_caches: 2 [ 1196.445834][T10548] gspca_main: jl2005bcd-2.14.0 probing 0979:0227 [ 1196.445898][T10548] command write [95] error -22 [ 1196.450632][T10548] usb 5-1: USB disconnect, device number 31 [ 1196.549650][T13409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1196.760373][T13409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1198.479710][T13596] ALSA: mixer_oss: invalid OSS volume '' [ 1198.506127][T13596] syz.5.1731 (13596): drop_caches: 2 [ 1198.870842][T13409] team0: Port device team_slave_0 added [ 1198.891207][T13409] team0: Port device team_slave_1 added [ 1200.594702][T13409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1200.594717][T13409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1200.594739][T13409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1200.663129][T13409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1200.663140][T13409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1200.663155][T13409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1203.022945][T13409] hsr_slave_0: entered promiscuous mode [ 1203.026991][T13409] hsr_slave_1: entered promiscuous mode [ 1203.033163][T13409] debugfs: 'hsr0' already exists in 'hsr' [ 1203.033187][T13409] Cannot create hsr debugfs directory [ 1204.614953][T13625] ALSA: mixer_oss: invalid OSS volume '' [ 1204.644658][T13625] syz.4.1739 (13625): drop_caches: 2 [ 1205.001204][T13630] syz.5.1740 (13630): drop_caches: 2 [ 1206.462573][T13639] ALSA: mixer_oss: invalid OSS volume '' [ 1206.515236][T13639] syz.3.1742 (13639): drop_caches: 2 [ 1206.595204][T13472] chnl_net:caif_netlink_parms(): no params data found [ 1207.551095][T13472] bridge0: port 1(bridge_slave_0) entered blocking state [ 1207.551307][T13472] bridge0: port 1(bridge_slave_0) entered disabled state [ 1207.551501][T13472] bridge_slave_0: entered allmulticast mode [ 1207.579330][T13472] bridge_slave_0: entered promiscuous mode [ 1207.812118][T13472] bridge0: port 2(bridge_slave_1) entered blocking state [ 1207.812255][T13472] bridge0: port 2(bridge_slave_1) entered disabled state [ 1207.812486][T13472] bridge_slave_1: entered allmulticast mode [ 1207.815348][T13472] bridge_slave_1: entered promiscuous mode [ 1207.859838][T13649] syz.5.1744 (13649): drop_caches: 2 [ 1208.557218][T13472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1208.583069][T13472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1208.803559][T13409] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1208.847100][T13472] team0: Port device team_slave_0 added [ 1208.847520][T13409] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1208.867782][T13472] team0: Port device team_slave_1 added [ 1208.953348][T13409] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1209.947000][T13657] syz.3.1746 (13657) used greatest stack depth: 17624 bytes left [ 1210.152640][T13409] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1210.277502][T13472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1210.277512][T13472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1210.277526][T13472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1210.390581][T13472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1210.390593][T13472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1210.390608][T13472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1213.936588][T13472] hsr_slave_0: entered promiscuous mode [ 1213.948622][T13472] hsr_slave_1: entered promiscuous mode [ 1213.959211][T13472] debugfs: 'hsr0' already exists in 'hsr' [ 1213.959236][T13472] Cannot create hsr debugfs directory [ 1214.649929][T13689] syz.4.1752 (13689): drop_caches: 2 [ 1215.829685][ C0] vkms_vblank_simulate: vblank timer overrun [ 1216.091869][T13409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1216.362916][T13409] 8021q: adding VLAN 0 to HW filter on device team0 [ 1216.466111][ T6012] bridge0: port 1(bridge_slave_0) entered blocking state [ 1216.466319][ T6012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1216.512139][T13472] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1216.568090][T13472] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1216.618883][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1216.628125][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1216.636063][T13472] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1216.701359][T13472] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1217.406057][ C0] vkms_vblank_simulate: vblank timer overrun [ 1217.561538][ C0] vkms_vblank_simulate: vblank timer overrun [ 1217.664404][T13712] ALSA: mixer_oss: invalid OSS volume '' [ 1217.710788][T13712] syz.3.1756 (13712): drop_caches: 2 [ 1218.021823][ T5879] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 1218.126145][T13472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1218.176389][T13472] 8021q: adding VLAN 0 to HW filter on device team0 [ 1218.206267][ T5879] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1218.206876][ T5879] usb 5-1: not running at top speed; connect to a high speed hub [ 1218.208134][ T5879] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1218.208156][ T5879] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1218.210644][ T5879] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1218.210669][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1218.210686][ T5879] usb 5-1: Product: syz [ 1218.210693][ T5879] usb 5-1: Manufacturer: syz [ 1218.210701][ T5879] usb 5-1: SerialNumber: syz [ 1218.334796][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 1218.351136][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1218.378489][ T6012] bridge0: port 2(bridge_slave_1) entered blocking state [ 1218.380192][ T6012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1218.561603][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 1218.570332][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 1218.638457][ T5879] usb 5-1: 0:2 : does not exist [ 1218.704983][ T5879] usb 5-1: USB disconnect, device number 32 [ 1218.800708][T13608] udevd[13608]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1219.261178][T13472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1223.372420][T12764] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1224.211773][T12764] usb 6-1: Using ep0 maxpacket: 32 [ 1224.214090][T12764] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1224.214135][T12764] usb 6-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 1224.214158][T12764] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1224.260208][T12764] usb 6-1: config 0 descriptor?? [ 1224.353019][T12764] usbhid 6-1:0.0: can't add hid device: -71 [ 1224.353147][T12764] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1224.513120][T12764] usb 6-1: USB disconnect, device number 27 [ 1224.608772][ T6692] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1224.628024][ T6692] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1224.629343][ T6692] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1224.630586][ T6692] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1224.631384][ T6692] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1225.537604][T13768] syz.5.1764 (13768): drop_caches: 2 [ 1227.043936][ T5114] Bluetooth: hci2: command tx timeout [ 1229.239653][ T5114] Bluetooth: hci2: command tx timeout [ 1231.279426][ T5114] Bluetooth: hci2: command tx timeout [ 1232.554229][ T5880] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1232.777190][ T5880] usb 6-1: Using ep0 maxpacket: 32 [ 1232.787028][ T5880] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1232.787077][ T5880] usb 6-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 1232.787098][ T5880] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.976250][ T5880] usb 6-1: config 0 descriptor?? [ 1233.795034][ T5114] Bluetooth: hci2: command tx timeout [ 1235.074813][ T5880] usbhid 6-1:0.0: can't add hid device: -71 [ 1235.074938][ T5880] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1235.079262][ T5880] usb 6-1: USB disconnect, device number 28 [ 1236.322646][T13472] veth0_vlan: entered promiscuous mode [ 1236.676700][T13754] chnl_net:caif_netlink_parms(): no params data found [ 1236.874110][ T43] bridge_slave_1: left allmulticast mode [ 1236.874129][ T43] bridge_slave_1: left promiscuous mode [ 1236.874284][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 1236.955751][ T43] bridge_slave_0: left allmulticast mode [ 1236.955771][ T43] bridge_slave_0: left promiscuous mode [ 1236.955919][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 1237.418835][T13840] ALSA: mixer_oss: invalid OSS volume '' [ 1237.754753][T13839] ALSA: mixer_oss: invalid OSS volume '' [ 1237.830197][T13838] syz.5.1779 (13838): drop_caches: 2 [ 1237.847297][T13837] syz.4.1781 (13837): drop_caches: 2 [ 1238.653010][ T6692] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1238.745841][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.745909][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.748599][ T6692] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1238.778817][T13162] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1238.856358][T13162] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1238.886531][T13162] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1241.434251][T13162] Bluetooth: hci4: command tx timeout [ 1241.720497][T12185] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1241.903834][T12185] usb 5-1: Using ep0 maxpacket: 32 [ 1241.910876][T12185] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1241.911067][T12185] usb 5-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 1241.911113][T12185] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.978923][T12185] usb 5-1: config 0 descriptor?? [ 1242.554547][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1242.722668][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1242.779679][ T43] bond0 (unregistering): Released all slaves [ 1243.572063][T13162] Bluetooth: hci4: command tx timeout [ 1243.595674][T12185] usbhid 5-1:0.0: can't add hid device: -71 [ 1243.595794][T12185] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1243.635377][T12185] usb 5-1: USB disconnect, device number 33 [ 1246.151800][T13162] Bluetooth: hci4: command tx timeout [ 1248.230496][T13162] Bluetooth: hci4: command tx timeout [ 1249.773457][ T43] hsr_slave_0: left promiscuous mode [ 1249.963125][ T43] hsr_slave_1: left promiscuous mode [ 1249.964097][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1250.096254][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1251.391803][ T5879] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1251.602551][ T5879] usb 4-1: Using ep0 maxpacket: 32 [ 1251.915266][ T5879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1251.915314][ T5879] usb 4-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 1251.915336][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1251.920751][ T5879] usb 4-1: config 0 descriptor?? [ 1252.423641][T10548] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1253.484677][ T5879] usbhid 4-1:0.0: can't add hid device: -71 [ 1253.486658][ T5879] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1253.542437][ T5879] usb 4-1: USB disconnect, device number 19 [ 1254.622733][T10548] usb 5-1: device descriptor read/all, error -71 [ 1257.440875][T13957] syz.5.1802 (13957): drop_caches: 2 [ 1265.232877][ T43] team0 (unregistering): Port device team_slave_1 removed [ 1265.285611][T13998] syz.3.1814 (13998): drop_caches: 2 [ 1267.543361][ T43] team0 (unregistering): Port device team_slave_0 removed [ 1272.357978][T13754] bridge0: port 1(bridge_slave_0) entered blocking state [ 1272.358148][T13754] bridge0: port 1(bridge_slave_0) entered disabled state [ 1272.358292][T13754] bridge_slave_0: entered allmulticast mode [ 1272.365358][T14037] ALSA: mixer_oss: invalid OSS volume '' [ 1272.377928][T14037] syz.5.1822 (14037): drop_caches: 2 [ 1272.411747][T13754] bridge_slave_0: entered promiscuous mode [ 1272.483046][T13754] bridge0: port 2(bridge_slave_1) entered blocking state [ 1272.483122][T13754] bridge0: port 2(bridge_slave_1) entered disabled state [ 1272.483238][T13754] bridge_slave_1: entered allmulticast mode [ 1272.489425][T13754] bridge_slave_1: entered promiscuous mode [ 1274.183624][T13754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1274.202685][T13754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1275.135501][T14053] ALSA: mixer_oss: invalid OSS volume '' [ 1275.212522][T14053] syz.4.1826 (14053): drop_caches: 2 [ 1276.720733][T13754] team0: Port device team_slave_0 added [ 1277.957130][T13754] team0: Port device team_slave_1 added [ 1278.172270][T14069] random: crng reseeded on system resumption [ 1284.325239][ T5114] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1284.346154][ T5114] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1284.347477][ T5114] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1284.349295][ T5114] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1284.350502][ T5114] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1286.582123][T13162] Bluetooth: hci2: command tx timeout [ 1286.974752][T14130] ALSA: mixer_oss: invalid OSS volume '' [ 1287.032851][T14130] syz.3.1837 (14130): drop_caches: 2 [ 1288.273413][T13846] chnl_net:caif_netlink_parms(): no params data found [ 1288.624490][ T5114] Bluetooth: hci2: command tx timeout [ 1290.461929][ T5879] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1290.703385][ T5114] Bluetooth: hci2: command tx timeout [ 1292.011788][ T5879] usb 4-1: Using ep0 maxpacket: 16 [ 1292.014984][ T5879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1292.015012][ T5879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1292.015049][ T5879] usb 4-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 1292.015068][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1292.018513][T13846] bridge0: port 1(bridge_slave_0) entered blocking state [ 1292.018719][T13846] bridge0: port 1(bridge_slave_0) entered disabled state [ 1292.018929][T13846] bridge_slave_0: entered allmulticast mode [ 1292.028260][ T5879] usb 4-1: config 0 descriptor?? [ 1292.099674][T13846] bridge_slave_0: entered promiscuous mode [ 1292.124773][T13846] bridge0: port 2(bridge_slave_1) entered blocking state [ 1292.124922][T13846] bridge0: port 2(bridge_slave_1) entered disabled state [ 1292.125105][T13846] bridge_slave_1: entered allmulticast mode [ 1292.129498][T13846] bridge_slave_1: entered promiscuous mode [ 1292.467648][T13846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1292.496118][T13846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1292.585828][ T5879] usbhid 4-1:0.0: can't add hid device: -71 [ 1292.585954][ T5879] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1292.594199][ T5879] usb 4-1: USB disconnect, device number 20 [ 1292.782280][ T5114] Bluetooth: hci2: command tx timeout [ 1293.384397][T13846] team0: Port device team_slave_0 added [ 1293.402239][T13846] team0: Port device team_slave_1 added [ 1293.619400][ T43] bridge_slave_1: left allmulticast mode [ 1293.619427][ T43] bridge_slave_1: left promiscuous mode [ 1293.619662][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 1294.693062][ T43] bridge_slave_0: left allmulticast mode [ 1294.693082][ T43] bridge_slave_0: left promiscuous mode [ 1294.693236][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 1294.931826][ T5879] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1295.582214][T14185] syz.5.1850 (14185) used greatest stack depth: 17064 bytes left [ 1295.926598][T14187] overlayfs: missing 'lowerdir' [ 1295.931970][ T5879] usb 4-1: Using ep0 maxpacket: 32 [ 1295.933946][ T5879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1295.933991][ T5879] usb 4-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 1295.934011][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1295.954871][ T5879] usb 4-1: config 0 descriptor?? [ 1297.545111][ T5879] usbhid 4-1:0.0: can't add hid device: -71 [ 1297.545233][ T5879] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1297.658326][ T5879] usb 4-1: USB disconnect, device number 21 [ 1300.148786][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.148856][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.159208][T13162] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1300.190209][T13162] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1300.199839][T10548] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 1300.201296][T13162] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1300.218768][T13162] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1300.219664][T13162] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1300.500641][T10548] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1300.501398][T10548] usb 4-1: not running at top speed; connect to a high speed hub [ 1300.518994][T10548] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1300.519016][T10548] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1300.522856][T10548] usb 4-1: string descriptor 0 read error: -22 [ 1300.522976][T10548] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1300.522989][T10548] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.945125][T10548] usb 4-1: 0:2 : does not exist [ 1302.142566][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1302.203234][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1302.226150][ T43] bond0 (unregistering): Released all slaves [ 1302.321964][ T5114] Bluetooth: hci5: command tx timeout [ 1302.357370][T10548] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1302.360755][T10548] usb 4-1: Warning! Unlikely big volume range (=23808), cval->res is probably wrong. [ 1302.360767][T10548] usb 4-1: [5] FU [Mic Capture Volume] ch = 1, val = -23808/0/1 [ 1302.390551][T10548] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1302.403292][T10548] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 1302.424609][T10548] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1302.433030][T10548] usb 4-1: USB disconnect, device number 22 [ 1302.467521][T14060] udevd[14060]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1304.213040][ T43] hsr_slave_0: left promiscuous mode [ 1304.465021][ T5114] Bluetooth: hci5: command tx timeout [ 1304.599307][ T43] hsr_slave_1: left promiscuous mode [ 1304.822302][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1305.052777][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1305.124814][ T43] veth0_vlan: left promiscuous mode [ 1305.289407][T14242] overlayfs: missing 'lowerdir' [ 1306.543195][ T5114] Bluetooth: hci5: command tx timeout [ 1308.632808][ T5114] Bluetooth: hci5: command tx timeout [ 1311.267345][T14274] random: crng reseeded on system resumption [ 1317.692641][ T43] team0 (unregistering): Port device team_slave_1 removed [ 1321.722267][ T995] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1321.812573][ T43] team0 (unregistering): Port device team_slave_0 removed [ 1321.882528][ T995] usb 4-1: Using ep0 maxpacket: 32 [ 1321.884485][ T995] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1321.884531][ T995] usb 4-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 1321.884553][ T995] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1321.890007][ T995] usb 4-1: config 0 descriptor?? [ 1322.056840][T13162] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1322.078390][T13162] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1322.079667][T13162] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1322.081370][T13162] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1322.096423][T13162] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1322.291825][T12185] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 1322.478529][T12185] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1322.480052][T12185] usb 6-1: not running at top speed; connect to a high speed hub [ 1322.481468][T12185] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1322.481482][T12185] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1322.519178][T12185] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1322.519194][T12185] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1322.519204][T12185] usb 6-1: Product: syz [ 1322.519388][T12185] usb 6-1: Manufacturer: syz [ 1322.519395][T12185] usb 6-1: SerialNumber: syz [ 1322.787408][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 1322.808353][T12185] usb 6-1: 0:2 : does not exist [ 1322.860316][T12185] usb 6-1: USB disconnect, device number 29 [ 1322.943253][T14309] udevd[14309]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1323.384239][ T995] usbhid 4-1:0.0: can't add hid device: -71 [ 1323.384363][ T995] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1323.413154][ T995] usb 4-1: USB disconnect, device number 23 [ 1324.562067][ T5114] Bluetooth: hci4: command tx timeout [ 1326.622109][ T5114] Bluetooth: hci4: command tx timeout [ 1328.163922][T14347] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1889'. [ 1328.701961][ T5114] Bluetooth: hci4: command tx timeout [ 1328.864571][T14350] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1890'. [ 1330.462820][T14360] random: crng reseeded on system resumption [ 1331.493473][ T5114] Bluetooth: hci4: command tx timeout [ 1331.833322][T14226] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1860'. [ 1331.932704][T14364] syz.3.1893 (14364): drop_caches: 2 [ 1333.796132][T14375] random: crng reseeded on system resumption [ 1339.550613][T14116] chnl_net:caif_netlink_parms(): no params data found [ 1339.849713][T14405] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1903'. [ 1344.532038][T13162] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1344.549201][T13162] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1344.550446][T13162] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1344.551622][T13162] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1344.554243][T13162] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1344.593212][T14453] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1911'. [ 1345.033756][T14211] chnl_net:caif_netlink_parms(): no params data found [ 1345.671865][ T43] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1345.732032][T14313] chnl_net:caif_netlink_parms(): no params data found [ 1346.044005][ T43] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1346.884491][T13162] Bluetooth: hci2: command tx timeout [ 1347.354423][ T43] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1348.947714][T13162] Bluetooth: hci2: command tx timeout [ 1351.021932][T13162] Bluetooth: hci2: command tx timeout [ 1351.241536][T14498] mmap: syz.3.1920 (14498) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1351.331600][ T43] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1351.417814][T14211] bridge0: port 1(bridge_slave_0) entered blocking state [ 1351.418037][T14211] bridge0: port 1(bridge_slave_0) entered disabled state [ 1351.418252][T14211] bridge_slave_0: entered allmulticast mode [ 1351.421069][T14211] bridge_slave_0: entered promiscuous mode [ 1351.589131][T14211] bridge0: port 2(bridge_slave_1) entered blocking state [ 1351.589270][T14211] bridge0: port 2(bridge_slave_1) entered disabled state [ 1351.589469][T14211] bridge_slave_1: entered allmulticast mode [ 1351.613056][T14211] bridge_slave_1: entered promiscuous mode [ 1351.625784][T14313] bridge0: port 1(bridge_slave_0) entered blocking state [ 1351.625993][T14313] bridge0: port 1(bridge_slave_0) entered disabled state [ 1351.626173][T14313] bridge_slave_0: entered allmulticast mode [ 1351.707410][T14313] bridge_slave_0: entered promiscuous mode [ 1352.140719][T14313] bridge0: port 2(bridge_slave_1) entered blocking state [ 1352.140793][T14313] bridge0: port 2(bridge_slave_1) entered disabled state [ 1352.140946][T14313] bridge_slave_1: entered allmulticast mode [ 1352.143979][T14313] bridge_slave_1: entered promiscuous mode [ 1352.527409][T14211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1352.673144][T14211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1352.678295][T14313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1353.105134][T13162] Bluetooth: hci2: command tx timeout [ 1353.330864][T14313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1353.644365][T14211] team0: Port device team_slave_0 added [ 1353.935763][T14211] team0: Port device team_slave_1 added [ 1354.014860][T14549] capability: warning: `syz.3.1932' uses 32-bit capabilities (legacy support in use) [ 1354.067994][T14313] team0: Port device team_slave_0 added [ 1354.237662][T14313] team0: Port device team_slave_1 added [ 1354.262066][T14211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1354.262081][T14211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1354.262102][T14211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1354.414792][T14211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1354.414809][T14211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1354.414835][T14211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1354.720345][T14313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1354.720361][T14313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1354.720385][T14313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1354.909325][T14313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1354.909339][T14313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1354.909358][T14313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1354.910115][ T43] bridge_slave_1: left allmulticast mode [ 1354.910138][ T43] bridge_slave_1: left promiscuous mode [ 1354.910379][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 1355.045350][ T43] bridge_slave_0: left allmulticast mode [ 1355.045380][ T43] bridge_slave_0: left promiscuous mode [ 1355.045646][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 1355.136368][ T43] bridge_slave_1: left allmulticast mode [ 1355.136396][ T43] bridge_slave_1: left promiscuous mode [ 1355.136634][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 1355.213178][ T43] bridge_slave_0: left allmulticast mode [ 1355.213206][ T43] bridge_slave_0: left promiscuous mode [ 1355.213446][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 1355.220655][T14549] io-wq is not configured for unbound workers [ 1355.296611][ T43] bridge_slave_1: left allmulticast mode [ 1355.296640][ T43] bridge_slave_1: left promiscuous mode [ 1355.296986][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 1355.356173][ T43] bridge_slave_0: left allmulticast mode [ 1355.356199][ T43] bridge_slave_0: left promiscuous mode [ 1355.356538][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 1355.731409][T14563] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1356.743417][ T43] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1357.532482][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1357.622347][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1357.666971][ T43] bond0 (unregistering): Released all slaves [ 1357.823151][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1357.922611][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1357.993644][ T43] bond0 (unregistering): Released all slaves [ 1358.182498][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1358.272540][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1358.333643][ T43] bond0 (unregistering): Released all slaves [ 1358.714391][T14448] chnl_net:caif_netlink_parms(): no params data found [ 1358.921131][T14313] hsr_slave_0: entered promiscuous mode [ 1358.931331][T14313] hsr_slave_1: entered promiscuous mode [ 1358.938209][T14313] debugfs: 'hsr0' already exists in 'hsr' [ 1358.938233][T14313] Cannot create hsr debugfs directory [ 1359.930439][ T5114] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1359.955871][ T5114] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1359.957142][ T5114] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1359.963380][ T5114] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1359.964631][ T5114] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1360.658941][T14448] bridge0: port 1(bridge_slave_0) entered blocking state [ 1360.659151][T14448] bridge0: port 1(bridge_slave_0) entered disabled state [ 1360.659357][T14448] bridge_slave_0: entered allmulticast mode [ 1360.663764][T14448] bridge_slave_0: entered promiscuous mode [ 1360.691327][T14448] bridge0: port 2(bridge_slave_1) entered blocking state [ 1360.691495][T14448] bridge0: port 2(bridge_slave_1) entered disabled state [ 1360.691628][T14448] bridge_slave_1: entered allmulticast mode [ 1360.695137][T14448] bridge_slave_1: entered promiscuous mode [ 1361.146132][ T43] hsr_slave_0: left promiscuous mode [ 1361.182466][ T43] hsr_slave_1: left promiscuous mode [ 1361.183570][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1361.183594][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1361.234952][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1361.234988][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1361.340933][ T43] veth1_macvtap: left promiscuous mode [ 1361.341001][ T43] veth0_macvtap: left promiscuous mode [ 1361.341193][ T43] veth1_vlan: left promiscuous mode [ 1361.341302][ T43] veth0_vlan: left promiscuous mode [ 1361.589737][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.589810][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.981913][ T5114] Bluetooth: hci3: command tx timeout [ 1363.723908][ T43] team0 (unregistering): Port device team_slave_1 removed [ 1363.902673][ T43] team0 (unregistering): Port device team_slave_0 removed [ 1364.062110][ T5114] Bluetooth: hci3: command tx timeout [ 1366.152414][ T5114] Bluetooth: hci3: command tx timeout [ 1366.212936][ T43] team0 (unregistering): Port device team_slave_1 removed [ 1366.342967][ T43] team0 (unregistering): Port device team_slave_0 removed [ 1366.752334][ T43] team0 (unregistering): Port device team_slave_1 removed [ 1366.892976][ T43] team0 (unregistering): Port device team_slave_0 removed [ 1367.270020][T14448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1367.283218][T14644] veth0_to_bridge: entered promiscuous mode [ 1367.475881][T14448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1367.826409][T14448] team0: Port device team_slave_0 added [ 1367.862642][T14448] team0: Port device team_slave_1 added [ 1368.148049][T14448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1368.148065][T14448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1368.148092][T14448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1368.222398][ T5114] Bluetooth: hci3: command tx timeout [ 1368.241434][T14448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1368.241449][T14448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1368.241474][T14448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1368.949859][T14448] hsr_slave_0: entered promiscuous mode [ 1368.951157][T14448] hsr_slave_1: entered promiscuous mode [ 1368.964965][T14448] debugfs: 'hsr0' already exists in 'hsr' [ 1368.964989][T14448] Cannot create hsr debugfs directory [ 1369.040983][T14313] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1369.141209][T14313] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1369.413655][T14313] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1369.633039][T14313] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1369.976070][T14589] chnl_net:caif_netlink_parms(): no params data found [ 1370.603126][T14749] program syz.5.2001 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1371.004912][T14589] bridge0: port 1(bridge_slave_0) entered blocking state [ 1371.005885][T14589] bridge0: port 1(bridge_slave_0) entered disabled state [ 1371.006102][T14589] bridge_slave_0: entered allmulticast mode [ 1371.008720][T14589] bridge_slave_0: entered promiscuous mode [ 1371.239151][T14589] bridge0: port 2(bridge_slave_1) entered blocking state [ 1371.239306][T14589] bridge0: port 2(bridge_slave_1) entered disabled state [ 1371.239865][T14589] bridge_slave_1: entered allmulticast mode [ 1371.251152][T14589] bridge_slave_1: entered promiscuous mode [ 1371.705525][T14589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1371.729076][T14589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1372.495027][T14589] team0: Port device team_slave_0 added [ 1372.514679][T14589] team0: Port device team_slave_1 added [ 1372.964140][T14589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1372.964157][T14589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1372.964172][T14589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1372.968728][T14589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1372.968740][T14589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1372.968760][T14589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1373.146354][ T43] bridge_slave_1: left allmulticast mode [ 1373.146381][ T43] bridge_slave_1: left promiscuous mode [ 1373.146617][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 1373.202765][ T43] bridge_slave_0: left allmulticast mode [ 1373.202782][ T43] bridge_slave_0: left promiscuous mode [ 1373.202936][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 1373.573298][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1373.692298][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1373.787808][ T43] bond0 (unregistering): Released all slaves [ 1373.916157][ T43] bond0 (unregistering): Released all slaves [ 1374.089558][T14589] hsr_slave_0: entered promiscuous mode [ 1374.090986][T14589] hsr_slave_1: entered promiscuous mode [ 1374.095941][T14589] debugfs: 'hsr0' already exists in 'hsr' [ 1374.095965][T14589] Cannot create hsr debugfs directory [ 1374.388294][T14448] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1374.435723][T14448] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1374.474005][T14448] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1374.504813][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1374.542841][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1374.758118][T14840] program syz.5.2040 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1374.863355][ T43] team0 (unregistering): Port device team_slave_1 removed [ 1375.043976][ T43] team0 (unregistering): Port device team_slave_0 removed [ 1375.385312][T14858] program syz.5.2048 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1375.768794][T14448] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1375.818519][T14313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1376.235715][T14313] 8021q: adding VLAN 0 to HW filter on device team0 [ 1376.310776][ T1019] bridge0: port 1(bridge_slave_0) entered blocking state [ 1376.313274][ T1019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1376.381516][ T6181] bridge0: port 2(bridge_slave_1) entered blocking state [ 1376.389000][ T6181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1376.901313][T14890] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2057'. [ 1376.956160][T14890] bond1: entered promiscuous mode [ 1376.957484][T14890] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1376.978076][T14890] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2057'. [ 1377.097190][T14890] bond1: entered allmulticast mode [ 1377.186990][T14892] bridge1: entered promiscuous mode [ 1377.187153][T14892] bridge1: entered allmulticast mode [ 1377.214543][T14892] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1377.339794][T14448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1377.376138][T14448] 8021q: adding VLAN 0 to HW filter on device team0 [ 1377.395471][ T3536] bridge0: port 1(bridge_slave_0) entered blocking state [ 1377.396285][ T3536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1377.466346][T13322] bridge0: port 2(bridge_slave_1) entered blocking state [ 1377.466499][T13322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1378.021975][T14589] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1378.069997][T14589] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1378.109253][T14589] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1378.136466][T14313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1378.171883][T14589] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1378.595382][T14448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1378.769595][T14589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1378.946379][T14589] 8021q: adding VLAN 0 to HW filter on device team0 [ 1378.969554][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 1378.972514][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1378.994980][ T1019] bridge0: port 2(bridge_slave_1) entered blocking state [ 1378.995191][ T1019] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1378.999162][T14945] 9pnet_fd: Insufficient options for proto=fd [ 1379.627433][T14448] veth0_vlan: entered promiscuous mode [ 1379.837829][T13162] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1379.844499][T13162] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1379.852489][T13162] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1379.880181][T13162] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1379.892574][T13162] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1380.134318][T14448] veth1_vlan: entered promiscuous mode [ 1380.944457][T14448] veth0_macvtap: entered promiscuous mode [ 1380.951592][T14589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1380.994605][T14448] veth1_macvtap: entered promiscuous mode [ 1381.730863][T14448] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1381.792216][T14448] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1381.887741][ T6181] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1381.894038][ T6181] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1381.894084][ T6181] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1381.894120][ T6181] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1381.982001][ T5114] Bluetooth: hci4: command tx timeout [ 1382.019523][T14964] chnl_net:caif_netlink_parms(): no params data found [ 1383.118794][T14964] bridge0: port 1(bridge_slave_0) entered blocking state [ 1383.124364][T14964] bridge0: port 1(bridge_slave_0) entered disabled state [ 1383.124877][T14964] bridge_slave_0: entered allmulticast mode [ 1383.128071][T14964] bridge_slave_0: entered promiscuous mode [ 1383.146122][T14964] bridge0: port 2(bridge_slave_1) entered blocking state [ 1383.146249][T14964] bridge0: port 2(bridge_slave_1) entered disabled state [ 1383.146440][T14964] bridge_slave_1: entered allmulticast mode [ 1383.149999][T14964] bridge_slave_1: entered promiscuous mode [ 1383.290416][ T43] bridge_slave_1: left allmulticast mode [ 1383.290445][ T43] bridge_slave_1: left promiscuous mode [ 1383.290708][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 1383.376541][ T43] bridge_slave_0: left allmulticast mode [ 1383.376567][ T43] bridge_slave_0: left promiscuous mode [ 1383.376804][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 1384.064692][ T5114] Bluetooth: hci4: command tx timeout [ 1384.195130][T15066] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2095'. [ 1385.162403][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1385.224173][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1385.265672][ T43] bond0 (unregistering): Released all slaves [ 1385.526777][T14964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1385.533473][T14964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1385.541290][ T6466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1385.541308][ T6466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1385.771887][ T43] hsr_slave_0: left promiscuous mode [ 1385.791805][ T43] hsr_slave_1: left promiscuous mode [ 1385.792803][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1385.842599][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1386.141857][ T5114] Bluetooth: hci4: command tx timeout [ 1386.836556][ T43] team0 (unregistering): Port device team_slave_1 removed [ 1387.074222][ T43] team0 (unregistering): Port device team_slave_0 removed [ 1387.754992][T15081] ======================================================= [ 1387.754992][T15081] WARNING: The mand mount option has been deprecated and [ 1387.754992][T15081] and is ignored by this kernel. Remove the mand [ 1387.754992][T15081] option from the mount to silence this warning. [ 1387.754992][T15081] ======================================================= [ 1388.235601][ T5114] Bluetooth: hci4: command tx timeout [ 1389.541626][T15106] kvm: pic: single mode not supported [ 1389.541922][T15106] kvm: pic: level sensitive irq not supported [ 1389.599690][T14964] team0: Port device team_slave_0 added [ 1389.643735][T14964] team0: Port device team_slave_1 added [ 1389.850405][T14589] veth0_vlan: entered promiscuous mode [ 1389.874705][T14964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1389.874721][T14964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1389.874747][T14964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1389.879515][T13322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1389.879534][T13322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1389.881603][T14964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1389.881617][T14964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1389.904855][T14964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1389.979928][T14589] veth1_vlan: entered promiscuous mode [ 1390.270107][T14964] hsr_slave_0: entered promiscuous mode [ 1390.281173][T14964] hsr_slave_1: entered promiscuous mode [ 1390.295679][T14964] debugfs: 'hsr0' already exists in 'hsr' [ 1390.295705][T14964] Cannot create hsr debugfs directory [ 1391.692712][T14589] veth0_macvtap: entered promiscuous mode [ 1391.789987][T14589] veth1_macvtap: entered promiscuous mode [ 1392.106382][T14589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1392.166036][T14589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1392.415204][ T43] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1392.415577][ T43] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1392.416930][ T43] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1392.420307][ T43] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1393.183654][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1393.183675][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1393.462490][T15187] overlayfs: overlapping lowerdir path [ 1393.533941][ T6466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1393.533961][ T6466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1393.665552][T14964] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1393.728507][T14964] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1393.825835][T14964] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1393.921826][T14964] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1394.982725][T14964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1395.104618][T15223] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2147'. [ 1395.216688][T14964] 8021q: adding VLAN 0 to HW filter on device team0 [ 1395.306967][ T3536] bridge0: port 1(bridge_slave_0) entered blocking state [ 1395.317350][ T3536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1395.380612][ T3536] bridge0: port 2(bridge_slave_1) entered blocking state [ 1395.384881][ T3536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1396.686923][T14964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1397.738199][T14964] veth0_vlan: entered promiscuous mode [ 1397.768415][T14964] veth1_vlan: entered promiscuous mode [ 1398.004908][T14964] veth0_macvtap: entered promiscuous mode [ 1398.065026][T14964] veth1_macvtap: entered promiscuous mode [ 1398.209763][T14964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1398.269002][T14964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1398.308921][ T43] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1398.309175][ T43] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1398.309213][ T43] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1398.309247][ T43] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1398.992999][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1398.993019][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1399.124349][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1399.124377][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1402.746407][T13162] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1402.750119][T13162] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1402.774318][T13162] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1402.792388][T13162] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1402.793125][T13162] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1404.482363][ T5914] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1404.868280][ T5114] Bluetooth: hci5: command tx timeout [ 1405.066069][ T5914] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1405.550627][ T5914] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1406.323524][ T5914] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1406.677452][T15377] chnl_net:caif_netlink_parms(): no params data found [ 1406.941979][ T5114] Bluetooth: hci5: command tx timeout [ 1407.854966][ T5914] bridge_slave_1: left allmulticast mode [ 1407.854994][ T5914] bridge_slave_1: left promiscuous mode [ 1407.855469][ T5914] bridge0: port 2(bridge_slave_1) entered disabled state [ 1407.953201][ T5914] bridge_slave_0: left allmulticast mode [ 1407.953228][ T5914] bridge_slave_0: left promiscuous mode [ 1407.958562][ T5914] bridge0: port 1(bridge_slave_0) entered disabled state [ 1408.578898][T15572] fuse: Bad value for 'fd' [ 1409.027879][ T5114] Bluetooth: hci5: command tx timeout [ 1410.508211][ T5914] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1411.101891][ T5114] Bluetooth: hci5: command tx timeout [ 1411.985497][T15663] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2283'. [ 1412.102282][ T5914] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1412.164120][ T5914] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1412.186160][ T5914] bond0 (unregistering): Released all slaves [ 1412.223226][T15377] bridge0: port 1(bridge_slave_0) entered blocking state [ 1412.223395][T15377] bridge0: port 1(bridge_slave_0) entered disabled state [ 1412.223650][T15377] bridge_slave_0: entered allmulticast mode [ 1412.227645][T15377] bridge_slave_0: entered promiscuous mode [ 1412.291925][T15377] bridge0: port 2(bridge_slave_1) entered blocking state [ 1412.292059][T15377] bridge0: port 2(bridge_slave_1) entered disabled state [ 1412.292297][T15377] bridge_slave_1: entered allmulticast mode [ 1412.295015][T15377] bridge_slave_1: entered promiscuous mode [ 1413.353958][T15377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1413.444897][T15377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1413.461969][T15696] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2297'. [ 1414.540286][T15377] team0: Port device team_slave_0 added [ 1414.551200][T15377] team0: Port device team_slave_1 added [ 1414.680885][T15735] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2314'. [ 1415.003294][T15377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1415.003310][T15377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1415.003334][T15377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1415.253964][ T5914] hsr_slave_0: left promiscuous mode [ 1415.298559][ T5914] hsr_slave_1: left promiscuous mode [ 1415.299441][ T5914] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1415.299469][ T5914] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1415.352744][ T5914] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1415.352771][ T5914] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1415.549839][ T5914] veth1_macvtap: left promiscuous mode [ 1415.549958][ T5914] veth0_macvtap: left promiscuous mode [ 1415.550227][ T5914] veth1_vlan: left promiscuous mode [ 1415.550412][ T5914] veth0_vlan: left promiscuous mode [ 1415.630314][T15769] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2328'. [ 1416.726742][T15787] overlayfs: missing 'lowerdir' [ 1417.240196][T15804] fuse: Bad value for 'fd' [ 1417.814103][T15811] overlayfs: missing 'lowerdir' [ 1418.500803][ T5914] team0 (unregistering): Port device team_slave_1 removed [ 1418.752238][ T5914] team0 (unregistering): Port device team_slave_0 removed [ 1421.143391][T15377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1421.143402][T15377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1421.143417][T15377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1421.378846][T15830] fuse: Bad value for 'fd' [ 1421.631005][T15839] overlay: Unknown parameter '/' [ 1421.926974][T15377] hsr_slave_0: entered promiscuous mode [ 1421.976488][T15377] hsr_slave_1: entered promiscuous mode [ 1421.977501][T15377] debugfs: 'hsr0' already exists in 'hsr' [ 1421.977524][T15377] Cannot create hsr debugfs directory [ 1422.362205][T15863] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2363'. [ 1422.562967][T15869] fuse: Bad value for 'fd' [ 1422.990541][T15883] overlay: Unknown parameter '/' [ 1423.029464][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.029534][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1425.717508][T15377] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1425.804730][T15377] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1425.912610][T15377] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1425.971062][T15377] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1426.541239][T15377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1426.598100][T15377] 8021q: adding VLAN 0 to HW filter on device team0 [ 1426.624401][ T1019] bridge0: port 1(bridge_slave_0) entered blocking state [ 1426.624595][ T1019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1426.664828][ T1019] bridge0: port 2(bridge_slave_1) entered blocking state [ 1426.666406][ T1019] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1427.697988][T15377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1428.044183][T15377] veth0_vlan: entered promiscuous mode [ 1428.119861][T15377] veth1_vlan: entered promiscuous mode [ 1428.289441][T15377] veth0_macvtap: entered promiscuous mode [ 1428.321998][T15377] veth1_macvtap: entered promiscuous mode [ 1428.375940][T15377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1428.399447][T15377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1428.442269][ T43] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1428.454951][ T6012] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1428.471000][ T6012] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1428.479718][ T6012] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1428.885155][ T6012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1428.885174][ T6012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1429.014642][ T5914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1429.014661][ T5914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1431.635082][T16193] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2472'. [ 1431.886866][T16204] sctp: [Deprecated]: syz.7.2477 (pid 16204) Use of int in maxseg socket option. [ 1431.886866][T16204] Use struct sctp_assoc_value instead [ 1432.786128][T16232] sctp: [Deprecated]: syz.9.2490 (pid 16232) Use of int in maxseg socket option. [ 1432.786128][T16232] Use struct sctp_assoc_value instead [ 1432.835427][T16193] team0 (unregistering): Port device team_slave_0 removed [ 1432.893269][T16193] team0 (unregistering): Port device team_slave_1 removed [ 1433.622620][T16265] fuse: Bad value for 'user_id' [ 1433.622639][T16265] fuse: Bad value for 'user_id' [ 1433.892704][T16272] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2507'. [ 1434.312955][T16290] fuse: Bad value for 'user_id' [ 1434.312974][T16290] fuse: Bad value for 'user_id' [ 1434.421023][T16294] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2518'. [ 1435.097319][T16320] fuse: Bad value for 'user_id' [ 1435.097339][T16320] fuse: Bad value for 'user_id' [ 1436.551609][T16359] fuse: Bad value for 'fd' [ 1436.740368][T16365] sctp: [Deprecated]: syz.8.2546 (pid 16365) Use of int in maxseg socket option. [ 1436.740368][T16365] Use struct sctp_assoc_value instead [ 1437.257800][T16394] fuse: Bad value for 'fd' [ 1437.877600][T16419] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2568'. [ 1438.015048][T16425] fuse: Bad value for 'fd' [ 1440.870632][T16556] program syz.5.2626 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1442.548371][T16631] 9pnet_fd: Insufficient options for proto=fd [ 1442.581937][T16632] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2654'. [ 1443.524050][T16672] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2666'. [ 1444.865116][T16706] fuse: Invalid rootmode [ 1444.891353][T16708] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2679'. [ 1446.149157][T16747] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2694'. [ 1447.270544][T13162] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1447.288899][T13162] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1447.299253][T13162] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1447.313417][T13162] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1447.314698][T13162] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1447.678019][T16787] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2705'. [ 1449.341804][T13162] Bluetooth: hci1: command tx timeout [ 1449.471215][T16826] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2718'. [ 1449.626117][ T6466] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1450.118422][ T6466] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1450.449095][T16859] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2729'. [ 1450.706178][ T6466] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1451.306272][ T6466] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1451.422436][T13162] Bluetooth: hci1: command tx timeout [ 1451.710545][T16896] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2743'. [ 1451.717224][T16896] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2743'. [ 1451.970996][T16775] chnl_net:caif_netlink_parms(): no params data found [ 1452.271479][T16913] overlayfs: failed to clone upperpath [ 1452.284579][ T6466] bridge_slave_1: left allmulticast mode [ 1452.284605][ T6466] bridge_slave_1: left promiscuous mode [ 1452.284858][ T6466] bridge0: port 2(bridge_slave_1) entered disabled state [ 1452.373829][ T6466] bridge_slave_0: left allmulticast mode [ 1452.373857][ T6466] bridge_slave_0: left promiscuous mode [ 1452.374110][ T6466] bridge0: port 1(bridge_slave_0) entered disabled state [ 1453.332600][T16943] fuse: Bad value for 'fd' [ 1453.522061][T13162] Bluetooth: hci1: command tx timeout [ 1454.215163][T16967] fuse: Bad value for 'fd' [ 1454.832336][ T6466] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 1454.952349][ T6466] bridge1 (unregistering): left promiscuous mode [ 1454.952378][ T6466] bridge1 (unregistering): left allmulticast mode [ 1455.581878][T13162] Bluetooth: hci1: command tx timeout [ 1457.127279][T17020] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2796'. [ 1457.163044][ T6466] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1457.180113][T17021] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2796'. [ 1457.272505][ T6466] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1457.307240][ T6466] bond0 (unregistering): Released all slaves [ 1458.444930][ T6466] bond1 (unregistering): Released all slaves [ 1459.874914][T16775] bridge0: port 1(bridge_slave_0) entered blocking state [ 1459.875054][T16775] bridge0: port 1(bridge_slave_0) entered disabled state [ 1459.875297][T16775] bridge_slave_0: entered allmulticast mode [ 1459.878650][T16775] bridge_slave_0: entered promiscuous mode [ 1459.923434][T17090] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2824'. [ 1459.926338][T17073] 8021q: adding VLAN 0 to HW filter on device team0 [ 1459.976867][T17091] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2824'. [ 1459.986401][T17073] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1460.022046][T16775] bridge0: port 2(bridge_slave_1) entered blocking state [ 1460.022185][T16775] bridge0: port 2(bridge_slave_1) entered disabled state [ 1460.022443][T16775] bridge_slave_1: entered allmulticast mode [ 1460.025203][T16775] bridge_slave_1: entered promiscuous mode [ 1460.774746][T17117] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2836'. [ 1460.835722][T17120] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2836'. [ 1461.008733][T17130] fuse: Bad value for 'fd' [ 1461.107238][T16775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1461.418563][ T6466] hsr_slave_0: left promiscuous mode [ 1461.504430][ T6466] hsr_slave_1: left promiscuous mode [ 1461.505432][ T6466] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1461.505457][ T6466] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1461.638881][ T6466] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1461.638909][ T6466] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1461.695876][T17157] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2851'. [ 1461.758002][T17160] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2851'. [ 1461.835773][ T6466] veth1_macvtap: left promiscuous mode [ 1461.835856][ T6466] veth0_macvtap: left promiscuous mode [ 1461.836103][ T6466] veth1_vlan: left promiscuous mode [ 1461.836185][ T6466] veth0_vlan: left promiscuous mode [ 1463.434741][T17215] fuse: Bad value for 'fd' [ 1464.702771][ T6466] team0 (unregistering): Port device team_slave_1 removed [ 1464.912277][ T6466] team0 (unregistering): Port device team_slave_0 removed [ 1467.574535][T16775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1468.026433][T16775] team0: Port device team_slave_0 added [ 1468.035742][T16775] team0: Port device team_slave_1 added [ 1468.230550][T17273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2895'. [ 1468.281088][T17273] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2895'. [ 1468.347227][T17279] fuse: Bad value for 'group_id' [ 1468.347244][T17279] fuse: Bad value for 'group_id' [ 1468.429366][T16775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1468.429383][T16775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1468.429410][T16775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1468.443348][T16775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1468.443364][T16775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1468.443389][T16775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1468.970137][T16775] hsr_slave_0: entered promiscuous mode [ 1468.981389][T16775] hsr_slave_1: entered promiscuous mode [ 1469.462344][T17315] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2908'. [ 1469.488645][T17315] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2908'. [ 1471.187416][T13162] Bluetooth: hci2: command 0x0406 tx timeout [ 1471.799677][T17400] loop2: detected capacity change from 0 to 7 [ 1471.897566][T17313] Dev loop2: unable to read RDB block 7 [ 1471.897617][T17313] loop2: unable to read partition table [ 1471.905816][T17313] loop2: partition table beyond EOD, truncated [ 1471.947143][T17400] Dev loop2: unable to read RDB block 7 [ 1471.947186][T17400] loop2: unable to read partition table [ 1471.947429][T17400] loop2: partition table beyond EOD, truncated [ 1471.947459][T17400] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1472.072006][T16775] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1472.129695][T16775] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1472.194380][T16775] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1472.289283][T16775] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1472.714035][T16775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1472.746887][T17437] 9pnet_fd: Insufficient options for proto=fd [ 1472.815166][T16775] 8021q: adding VLAN 0 to HW filter on device team0 [ 1472.849292][ T1019] bridge0: port 1(bridge_slave_0) entered blocking state [ 1472.850841][ T1019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1472.896480][ T1019] bridge0: port 2(bridge_slave_1) entered blocking state [ 1472.896639][ T1019] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1473.736195][T16775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1474.425743][T17503] 9pnet_fd: Insufficient options for proto=fd [ 1474.529200][T16775] veth0_vlan: entered promiscuous mode [ 1474.556479][T16775] veth1_vlan: entered promiscuous mode [ 1474.631035][T16775] veth0_macvtap: entered promiscuous mode [ 1474.637377][T17509] loop2: detected capacity change from 0 to 7 [ 1474.645661][T17313] Dev loop2: unable to read RDB block 7 [ 1474.645701][T17313] loop2: unable to read partition table [ 1474.645949][T17313] loop2: partition table beyond EOD, truncated [ 1474.657048][T17509] Dev loop2: unable to read RDB block 7 [ 1474.657093][T17509] loop2: unable to read partition table [ 1474.657323][T17509] loop2: partition table beyond EOD, truncated [ 1474.657339][T17509] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1474.744694][T16775] veth1_macvtap: entered promiscuous mode [ 1474.894550][T16775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1474.943283][T16775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1475.111952][ T5914] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1475.133097][ T5914] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1475.135021][ T5914] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1475.135568][ T5914] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1475.586324][T17539] fuse: Unknown parameter 'user_id00000000000000000000' [ 1476.040740][ T6466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1476.040760][ T6466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1476.233767][T13322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1476.233788][T13322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1476.280502][T17563] fuse: Bad value for 'fd' [ 1476.446473][T17567] ref_ctr_offset mismatch. inode: 0x232 offset: 0x0 ref_ctr_offset(old): 0xffffffff00000000 ref_ctr_offset(new): 0x0 [ 1476.957679][T17590] fuse: Unknown parameter 'user_id00000000000000000000' [ 1477.281392][T17601] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2991'. [ 1477.477681][T17605] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1477.477699][T17605] IPv6: NLM_F_CREATE should be set when creating new route [ 1477.756704][T17618] fuse: Bad value for 'fd' [ 1477.878283][T17624] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3002'. [ 1478.337225][T17644] fuse: Bad value for 'fd' [ 1478.357006][T17641] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1478.649353][T17649] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3013'. [ 1478.710061][T17652] loop2: detected capacity change from 0 to 7 [ 1478.726123][T17652] Dev loop2: unable to read RDB block 7 [ 1478.726168][T17652] loop2: unable to read partition table [ 1478.726396][T17652] loop2: partition table beyond EOD, truncated [ 1478.726432][T17652] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1479.384047][T17677] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3026'. [ 1480.277165][T17719] fuse: Unknown parameter 'grou00000000000000000000' [ 1481.068961][T17748] loop2: detected capacity change from 0 to 7 [ 1481.071557][T17748] Dev loop2: unable to read RDB block 7 [ 1481.071601][T17748] loop2: unable to read partition table [ 1481.097115][T17750] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1481.097581][T17748] loop2: partition table beyond EOD, truncated [ 1481.097621][T17748] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1481.100499][T17750] netlink: 'syz.5.3054': attribute type 24 has an invalid length. [ 1481.100516][T17750] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3054'. [ 1481.100554][T17750] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1483.544262][T17843] kvm: pic: single mode not supported [ 1483.545023][T17843] kvm: pic: single mode not supported [ 1483.545034][T17843] kvm: pic: level sensitive irq not supported [ 1483.545333][T17843] kvm: pic: single mode not supported [ 1483.546843][T17843] kvm: pic: non byte read [ 1483.546942][T17843] kvm: pic: non byte read [ 1483.547026][T17843] kvm: pic: non byte read [ 1483.547109][T17843] kvm: pic: non byte read [ 1483.860744][T17859] loop2: detected capacity change from 0 to 7 [ 1483.870677][T17859] Dev loop2: unable to read RDB block 7 [ 1483.870727][T17859] loop2: unable to read partition table [ 1483.870971][T17859] loop2: partition table beyond EOD, truncated [ 1483.871005][T17859] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1483.974458][T17861] fuse: Unknown parameter 'grou00000000000000000000' [ 1484.469197][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.469265][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.546585][T17877] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3108'. [ 1484.567498][T17878] ------------[ cut here ]------------ [ 1484.567521][T17878] WARNING: CPU: 1 PID: 17878 at ./include/linux/seqlock.h:221 cgroup_freeze+0x80a/0xf90 [ 1484.567650][T17878] Modules linked in: [ 1484.567687][T17878] CPU: 1 UID: 0 PID: 17878 Comm: syz.3.3106 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1484.567710][T17878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1484.567727][T17878] RIP: 0010:cgroup_freeze+0x80a/0xf90 [ 1484.567756][T17878] Code: 90 e9 9e fb ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c e7 f9 ff ff 4c 89 f7 e8 11 1a 68 00 e9 da f9 ff ff e8 37 68 06 00 90 <0f> 0b 90 e9 10 fc ff ff 44 89 f9 80 e1 07 38 c1 48 8b 0c 24 0f 8c [ 1484.567774][T17878] RSP: 0018:ffffc9000d8078e0 EFLAGS: 00010287 [ 1484.567791][T17878] RAX: ffffffff81b894f9 RBX: 0000000000000000 RCX: 0000000000080000 [ 1484.567806][T17878] RDX: ffffc9001c028000 RSI: 00000000000000a8 RDI: 00000000000000a9 [ 1484.567820][T17878] RBP: ffffc9000d807a70 R08: 0000000000000000 R09: 0000000000000000 [ 1484.567834][T17878] R10: dffffc0000000000 R11: fffffbfff1deee6f R12: dffffc0000000000 [ 1484.567849][T17878] R13: 0000000000000000 R14: 0000000000000001 R15: ffff88803bc24791 [ 1484.567863][T17878] FS: 00007f3a44b856c0(0000) GS:ffff888126cc6000(0000) knlGS:0000000000000000 [ 1484.567881][T17878] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1484.567896][T17878] CR2: 000000110c2b1f54 CR3: 00000000680fe000 CR4: 00000000003526f0 [ 1484.567914][T17878] Call Trace: [ 1484.567925][T17878] [ 1484.567941][T17878] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1484.568195][T17878] ? __pfx_cgroup_freeze+0x10/0x10 [ 1484.568221][T17878] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1484.568251][T17878] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1484.568277][T17878] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 1484.568336][T17878] ? mutex_lock_nested+0x154/0x1d0 [ 1484.568359][T17878] ? cgroup_kn_lock_live+0x13c/0x230 [ 1484.568391][T17878] cgroup_freeze_write+0x156/0x1c0 [ 1484.568420][T17878] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 1484.568442][T17878] ? kernfs_root+0x1c/0x230 [ 1484.568492][T17878] ? kernfs_root+0x1c/0x230 [ 1484.568518][T17878] ? kernfs_root+0x1ea/0x230 [ 1484.568542][T17878] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 1484.568568][T17878] cgroup_file_write+0x39e/0x740 [ 1484.568597][T17878] ? __pfx_cgroup_file_write+0x10/0x10 [ 1484.568633][T17878] ? __pfx_cgroup_file_write+0x10/0x10 [ 1484.568652][T17878] kernfs_fop_write_iter+0x3b0/0x540 [ 1484.568682][T17878] vfs_write+0x5d5/0xb40 [ 1484.568734][T17878] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1484.568756][T17878] ? __pfx_vfs_write+0x10/0x10 [ 1484.568782][T17878] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 1484.568818][T17878] ? mutex_lock_nested+0x154/0x1d0 [ 1484.568840][T17878] ? fdget_pos+0x253/0x320 [ 1484.568872][T17878] ksys_write+0x14b/0x260 [ 1484.568903][T17878] ? __pfx_ksys_write+0x10/0x10 [ 1484.568936][T17878] ? do_syscall_64+0xbe/0xfa0 [ 1484.569019][T17878] do_syscall_64+0xfa/0xfa0 [ 1484.569045][T17878] ? lockdep_hardirqs_on+0x9c/0x150 [ 1484.569074][T17878] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1484.569112][T17878] ? clear_bhb_loop+0x60/0xb0 [ 1484.569144][T17878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1484.569164][T17878] RIP: 0033:0x7f3a4693efc9 [ 1484.569187][T17878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1484.569205][T17878] RSP: 002b:00007f3a44b85038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1484.569227][T17878] RAX: ffffffffffffffda RBX: 00007f3a46b96090 RCX: 00007f3a4693efc9 [ 1484.569242][T17878] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 000000000000000a [ 1484.569257][T17878] RBP: 00007f3a469c1f91 R08: 0000000000000000 R09: 0000000000000000 [ 1484.569270][T17878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1484.569283][T17878] R13: 00007f3a46b96128 R14: 00007f3a46b96090 R15: 00007ffee547dd48 [ 1484.569321][T17878] [ 1484.569337][T17878] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1484.569353][T17878] CPU: 1 UID: 0 PID: 17878 Comm: syz.3.3106 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1484.569376][T17878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1484.569388][T17878] Call Trace: [ 1484.569396][T17878] [ 1484.569404][T17878] dump_stack_lvl+0x99/0x250 [ 1484.569442][T17878] ? __asan_memcpy+0x40/0x70 [ 1484.569477][T17878] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1484.569500][T17878] ? __pfx__printk+0x10/0x10 [ 1484.569540][T17878] vpanic+0x237/0x6d0 [ 1484.569569][T17878] ? __pfx_vpanic+0x10/0x10 [ 1484.569601][T17878] panic+0xb9/0xc0 [ 1484.569619][T17878] ? __pfx_panic+0x10/0x10 [ 1484.569657][T17878] __warn+0x31b/0x4b0 [ 1484.569674][T17878] ? cgroup_freeze+0x80a/0xf90 [ 1484.569705][T17878] ? cgroup_freeze+0x80a/0xf90 [ 1484.569732][T17878] report_bug+0x2be/0x4f0 [ 1484.569827][T17878] ? cgroup_freeze+0x80a/0xf90 [ 1484.569855][T17878] ? cgroup_freeze+0x80a/0xf90 [ 1484.569883][T17878] ? cgroup_freeze+0x80c/0xf90 [ 1484.569911][T17878] handle_bug+0x84/0x160 [ 1484.569932][T17878] exc_invalid_op+0x1a/0x50 [ 1484.569953][T17878] asm_exc_invalid_op+0x1a/0x20 [ 1484.569971][T17878] RIP: 0010:cgroup_freeze+0x80a/0xf90 [ 1484.569999][T17878] Code: 90 e9 9e fb ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c e7 f9 ff ff 4c 89 f7 e8 11 1a 68 00 e9 da f9 ff ff e8 37 68 06 00 90 <0f> 0b 90 e9 10 fc ff ff 44 89 f9 80 e1 07 38 c1 48 8b 0c 24 0f 8c [ 1484.570017][T17878] RSP: 0018:ffffc9000d8078e0 EFLAGS: 00010287 [ 1484.570034][T17878] RAX: ffffffff81b894f9 RBX: 0000000000000000 RCX: 0000000000080000 [ 1484.570048][T17878] RDX: ffffc9001c028000 RSI: 00000000000000a8 RDI: 00000000000000a9 [ 1484.570062][T17878] RBP: ffffc9000d807a70 R08: 0000000000000000 R09: 0000000000000000 [ 1484.570075][T17878] R10: dffffc0000000000 R11: fffffbfff1deee6f R12: dffffc0000000000 [ 1484.570090][T17878] R13: 0000000000000000 R14: 0000000000000001 R15: ffff88803bc24791 [ 1484.570114][T17878] ? cgroup_freeze+0x809/0xf90 [ 1484.570162][T17878] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1484.570194][T17878] ? __pfx_cgroup_freeze+0x10/0x10 [ 1484.570220][T17878] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1484.570250][T17878] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1484.570277][T17878] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 1484.570312][T17878] ? mutex_lock_nested+0x154/0x1d0 [ 1484.570334][T17878] ? cgroup_kn_lock_live+0x13c/0x230 [ 1484.570366][T17878] cgroup_freeze_write+0x156/0x1c0 [ 1484.570393][T17878] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 1484.570415][T17878] ? kernfs_root+0x1c/0x230 [ 1484.570437][T17878] ? kernfs_root+0x1c/0x230 [ 1484.570464][T17878] ? kernfs_root+0x1ea/0x230 [ 1484.570487][T17878] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 1484.570513][T17878] cgroup_file_write+0x39e/0x740 [ 1484.570542][T17878] ? __pfx_cgroup_file_write+0x10/0x10 [ 1484.570577][T17878] ? __pfx_cgroup_file_write+0x10/0x10 [ 1484.570595][T17878] kernfs_fop_write_iter+0x3b0/0x540 [ 1484.570625][T17878] vfs_write+0x5d5/0xb40 [ 1484.570659][T17878] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1484.570681][T17878] ? __pfx_vfs_write+0x10/0x10 [ 1484.570706][T17878] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 1484.570741][T17878] ? mutex_lock_nested+0x154/0x1d0 [ 1484.570763][T17878] ? fdget_pos+0x253/0x320 [ 1484.570795][T17878] ksys_write+0x14b/0x260 [ 1484.570826][T17878] ? __pfx_ksys_write+0x10/0x10 [ 1484.570858][T17878] ? do_syscall_64+0xbe/0xfa0 [ 1484.570890][T17878] do_syscall_64+0xfa/0xfa0 [ 1484.570913][T17878] ? lockdep_hardirqs_on+0x9c/0x150 [ 1484.570942][T17878] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1484.570962][T17878] ? clear_bhb_loop+0x60/0xb0 [ 1484.570985][T17878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1484.571004][T17878] RIP: 0033:0x7f3a4693efc9 [ 1484.571021][T17878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1484.571038][T17878] RSP: 002b:00007f3a44b85038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1484.571058][T17878] RAX: ffffffffffffffda RBX: 00007f3a46b96090 RCX: 00007f3a4693efc9 [ 1484.571074][T17878] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 000000000000000a [ 1484.571087][T17878] RBP: 00007f3a469c1f91 R08: 0000000000000000 R09: 0000000000000000 [ 1484.571101][T17878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1484.571113][T17878] R13: 00007f3a46b96128 R14: 00007f3a46b96090 R15: 00007ffee547dd48 [ 1484.571156][T17878] [ 1484.571403][T17878] Kernel Offset: disabled