last executing test programs: 20m47.435338078s ago: executing program 32 (id=199): syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x476202) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, 0x0, &(0x7f00000001c0)) unshare(0x2c060000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) clock_nanosleep(0x4, 0x0, &(0x7f0000000340)={r5, r6+60000000}, &(0x7f0000000400)) r7 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x0, 0x400, 0x3, 0xfffffffe}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x13}) io_uring_enter(r7, 0x47f9, 0x0, 0x0, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000040)={[0x20000001]}, 0x8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r10 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r10, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01], 0x20e) unshare(0x24020400) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 20m38.516308657s ago: executing program 33 (id=231): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1c, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="1805000000000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001801000020696c2500000000002020207b0ef8ff00000000bd510000000000000701000000feffffb7020000080000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000003e40)=""/222, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 19m20.00130818s ago: executing program 34 (id=519): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ec000000010101020000000000000000050000016400068008000200ac14142614000500fc02000000000000000000000000000014000500fe8000000000000000000000000000aa08000100ffffffff140004002001000000000000000000000000d67c14000500fe80000031f4586d1cad6e47000000aa080008400000000b08001540000000024800068014000400ff02000000000000000000000000000108000100e000000214000400ff01000000000000000000000000000114"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0xf5cd57960ab6c716) 18m41.144687641s ago: executing program 35 (id=646): r0 = socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x7, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x54c1}, 0x8) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000a0000000000000008000f0001000000", 0x24) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x1a0300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x0, 0x32, 0x1, 0x0, 0x0, {}, {}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 17m28.47423434s ago: executing program 36 (id=937): r0 = socket(0x10, 0x80002, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) socket$packet(0x11, 0x3, 0x300) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000000400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000210000280012800b00010067656e657665000018000280140007"], 0x17}, 0x9, 0x0, 0x0, 0x95}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) mount$9p_fd(0x0, 0x0, 0x0, 0x200400, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = memfd_create(&(0x7f00000000c0)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYS', 0x0) write(r3, 0x0, 0x0) ioctl$TIOCL_BLANKSCREEN(r2, 0x5609, &(0x7f0000000000)) getsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f00000000c0)=0x5, 0x0) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @rose}, [@null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) listen(0xffffffffffffffff, 0x3) r4 = syz_open_dev$vim2m(0x0, 0x800000003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffd1, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00"], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 17m26.310280816s ago: executing program 37 (id=954): prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x80000400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/wireless\x00') preadv(r1, &(0x7f0000000100)=[{0x0}], 0x1, 0x1fc, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r2, 0x5761, &(0x7f0000000140)={0x1, 0x0, [{0x4001ff}]}) futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000080), 0x4) shmget$private(0x0, 0x3000, 0x54001800, &(0x7f000010d000/0x3000)=nil) sendmsg$key(r3, 0x0, 0x20000000) 17m25.134567696s ago: executing program 38 (id=960): socket$rxrpc(0x21, 0x2, 0xa) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x8a}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$packet(0x11, 0x2, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000040)={'wg2\x00', 0x0}) sendto$packet(r0, &(0x7f0000000140)="648e6e0d802c64a9447807fda33015d275e8d22cbc7b321d083ecb5f80b955a92bd5eaf6f415f5f4", 0x28, 0x8000, &(0x7f0000000000)={0x11, 0x11, r3, 0x1, 0x4, 0x6, @local}, 0x14) 14m23.827906252s ago: executing program 2 (id=1618): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = socket$inet(0x2, 0x1, 0x0) getsockopt$MRT(r4, 0x0, 0xd0, 0x0, 0x0) socket$isdn_base(0x22, 0x3, 0x0) r5 = socket$isdn_base(0x22, 0x3, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$IMGETCOUNT(r5, 0x80044943, &(0x7f0000000000)) syz_open_dev$dmmidi(0x0, 0x200, 0x220002) add_key(&(0x7f0000000000)='pkcs7_test\x00', 0x0, &(0x7f00000021c0)="305c0607e182087051667557c7d7982b8f57fb20a3adc9e3baa292ce8f0a861e64", 0x21, 0xfffffffffffffffe) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000040)={{@my=0x1, 0x10000}, @host, 0x0, 0x0, 0x7}) close_range(r0, 0xffffffffffffffff, 0x0) 14m22.582072062s ago: executing program 2 (id=1624): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_DELETE_ELEM(0x15, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) epoll_create(0x207ffd) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340), 0xc901, 0x0) mlockall(0x7) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) recvmmsg(r3, 0x0, 0x0, 0x10001, 0x0) poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x8000}], 0x1, 0x68) socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006000000000000", @ANYRES32, @ANYBLOB="0000005160383bb5b9846c00000080000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES16=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 14m20.883993049s ago: executing program 2 (id=1631): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f00000000c0)={0x0, 0x9, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 14m19.859608051s ago: executing program 2 (id=1634): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$P9_RREAD(r3, 0x0, 0x100b) 14m18.640223003s ago: executing program 2 (id=1638): syz_open_dev$video4linux(0x0, 0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0/bus\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) 14m18.49838909s ago: executing program 2 (id=1641): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000500)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)='J', 0x8980}], 0x1) 14m15.000951607s ago: executing program 1 (id=1647): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000070000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) 14m6.598836266s ago: executing program 39 (id=1626): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0xfffffffffffff800}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r9, 0x0, &(0x7f00007ff000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r7, 0x3ba0, &(0x7f0000000680)={0x48, 0x7, r10, 0x0, 0x10001, 0x0, 0x1000, 0x2000001, 0x314d1e}) ioctl$IOMMU_IOAS_UNMAP$ALL(r6, 0x3b86, &(0x7f0000000200)={0x18, r9}) sendmsg$nl_route(r0, 0x0, 0x8000) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f0000000200)={0x11, 0x1a, r1, 0x1, 0x0, 0x6, @local}, 0x14) 14m6.22454672s ago: executing program 1 (id=1663): syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x4804) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x7}, {0x0}, &(0x7f00000011c0)=[{&(0x7f0000001140)=""/101, 0x65}], 0x1, 0x60, 0xffffffff00000003}}], 0x48, 0x8004}, 0x0) 14m5.191078538s ago: executing program 1 (id=1664): ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4}}) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x80000) read$watch_queue(0xffffffffffffffff, &(0x7f0000002e00)=""/4088, 0xff8) read$watch_queue(r1, &(0x7f0000004ac0)=""/4082, 0xff2) 14m4.830166514s ago: executing program 1 (id=1666): r0 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/kernel/fscaps', 0x0, 0x0) lseek(r0, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f0000000440)='system.posix_acl_access\x00', 0x0, 0x9, 0x1) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, &(0x7f00000003c0)) ptrace$cont(0x9, r4, 0x10000, 0x0) 14m3.897209488s ago: executing program 1 (id=1668): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0/bus\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) 14m1.260529789s ago: executing program 40 (id=1641): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000500)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)='J', 0x8980}], 0x1) 14m1.229328512s ago: executing program 1 (id=1671): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/wakeup_count', 0x242, 0x2e0) r1 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) move_mount(0xffffffffffffffff, 0x0, r5, &(0x7f0000000300)='./file0\x00', 0x40) r6 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_REQ_PARAM(r6, 0x116, 0x80, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000100)={0x48}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)={'#! ', './file0'}, 0xb) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0x15, 0x0, 0x1, 0x5, 0x6, @broadcast}, 0x14) close(r7) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080211000000040000a118000200e000000e00000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendfile(r0, r0, 0x0, 0xa) 13m44.789502535s ago: executing program 41 (id=1671): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/wakeup_count', 0x242, 0x2e0) r1 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) move_mount(0xffffffffffffffff, 0x0, r5, &(0x7f0000000300)='./file0\x00', 0x40) r6 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_REQ_PARAM(r6, 0x116, 0x80, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000100)={0x48}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)={'#! ', './file0'}, 0xb) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0x15, 0x0, 0x1, 0x5, 0x6, @broadcast}, 0x14) close(r7) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080211000000040000a118000200e000000e00000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendfile(r0, r0, 0x0, 0xa) 9m47.989325916s ago: executing program 5 (id=2541): syz_open_dev$video(&(0x7f0000000080), 0x9, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x2000000000000376, &(0x7f00000000c0)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) ioprio_set$uid(0x3, 0x0, 0x0) io_setup(0x40, &(0x7f0000003fc0)=0x0) r2 = socket$inet(0x2, 0x3, 0x3) io_submit(r1, 0x1, &(0x7f0000001dc0)=[&(0x7f0000000280)={0x0, 0x0, 0x21, 0x1, 0x0, r2, 0x0, 0xfffffe88}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x800005d, 0x4810) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0xc102, 0x0) r5 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000480)=@secondary) 9m46.13916318s ago: executing program 5 (id=2545): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = socket(0xa, 0x1, 0x0) getpeername$unix(r3, &(0x7f0000000280), &(0x7f00000001c0)=0x6e) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast1, 0x4e20, 0x1000001, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) 9m44.613085297s ago: executing program 5 (id=2549): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000780)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000040)={0x1, 0x80000001}) 9m43.367848776s ago: executing program 5 (id=2554): prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8b}, 0x0) setgroups(0x0, &(0x7f0000000240)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$netlink(0x10, 0x3, 0x6) writev(r0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000080)="c113", 0x2}], 0x2) 9m40.375578725s ago: executing program 5 (id=2560): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83a7404087d4bcb64f6ecad05459d12595d5b8b2657f2f29656a15e5a18e3168946dcb5faa59f7b404bad393ba06734d170b0513aeb0d051", 0xd5}, {&(0x7f00000004c0)="62c99e05d98775ed1beb5d67431ead896f7060f03e5b8671b283168d0df1573bef271f3a22b9cac06e27c7e87b34a19188d3e10e670bc070f0d3eb88d2f891d242747e0deec4a10609b12d4058b0fbff28bb01e6e49b533b03b11288ff4da1ab3226a2e3ba5fc47969142f1a1a0ca9ba4cece2ac9a5fcd89343de7e57dfcbb6216499555bd04f2fcb91c3c6c72868a3797ec63f8138ab74b5034878812df8b0445704cb33f81bffed93c3e645a206db134f626a59f4fac53fbf23489cf2f45d05d735e64033376671da045df", 0xcc}], 0x2}}], 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000495"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010101, 0x4e23, 0x3, 'sh\x00', 0x1, 0x7, 0x49}, 0x2c) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000080)={{0x84, @multicast1, 0x4e21, 0x3, 'rr\x00', 0x2, 0x81, 0x37}, {@local, 0x4e22, 0x4, 0x0, 0x12d5c, 0x12d5b}}, 0x44) 9m38.169910031s ago: executing program 5 (id=2565): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) socket(0x15, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x66, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prlimit64(0x0, 0x0, 0x0, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x80000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) bind$llc(r0, &(0x7f0000000080), 0x10) 9m22.39861178s ago: executing program 42 (id=2565): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) socket(0x15, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x66, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prlimit64(0x0, 0x0, 0x0, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x80000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) bind$llc(r0, &(0x7f0000000080), 0x10) 5m39.214448244s ago: executing program 4 (id=3263): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000009c0)="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", 0x6f4}], 0x1}}], 0x1, 0x0) 5m39.010335569s ago: executing program 4 (id=3265): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x8004b708, 0x0) rename(&(0x7f0000000040)='./bus\x00', &(0x7f0000000340)='./file0\x00') 5m37.424861473s ago: executing program 4 (id=3271): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, 0x0, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[], 0xfdef) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x3, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0x10}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_SRC_IF={0x8, 0x9, r7}, @CGW_DST_IF={0x8, 0xa, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 5m35.874689802s ago: executing program 4 (id=3274): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=@newsa={0x13c, 0x10, 0x413, 0x70bd26, 0x0, {{@in=@remote, @in6=@rand_addr=' \x01\x00', 0x4e21, 0x4, 0x4e23, 0x1, 0x2, 0x0, 0x20}, {@in6=@local, 0x0, 0x2b}, @in=@rand_addr=0x64010101, {0x0, 0x0, 0x7, 0xfffffffffffffffd, 0x8, 0x2000000000088, 0x5}, {0x80000001, 0xf, 0xcc, 0x6}, {0x0, 0x7}, 0x3, 0x34ff, 0x2, 0x4, 0xb}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x84) 5m35.662251834s ago: executing program 4 (id=3276): r0 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000ec0)={0x0, 0x8, 0x5, 0x4, 0x18, 0x0, 0x7}) 5m35.319956367s ago: executing program 4 (id=3279): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x1ff) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 5m20.180012034s ago: executing program 43 (id=3279): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x1ff) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 46.589501727s ago: executing program 9 (id=4793): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x305001, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000000c0)='\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000380)={&(0x7f0000000180)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, 0x0) 45.997247734s ago: executing program 9 (id=4798): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000040)={r4, 0x4, 0x20}, 0xc) 44.570075438s ago: executing program 9 (id=4806): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d80)=ANY=[@ANYBLOB="240000002c00010000000000000000000400008010000c"], 0x24}], 0x1}, 0x0) 44.247546s ago: executing program 9 (id=4810): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x305001, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000000c0)='\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000380)={&(0x7f0000000180)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, 0x0) 43.310511395s ago: executing program 9 (id=4813): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0xb0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x9629, 0x0, 0x0, 0x0, 0x0, 0x203], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10000}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xb}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}]}}]}, 0xb0}}, 0x0) 42.926243287s ago: executing program 9 (id=4815): socket$packet(0x11, 0xa, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000881}, 0x20000000) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) shutdown(r3, 0x1) recvmmsg(r3, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000037000000080003", @ANYRES32=r8, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x808) r10 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x1, 0x2ffffffff}, 0xc) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000100)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x3, 0xff, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}, 0x1, 0x7}, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r12, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmmsg$inet(r2, &(0x7f0000004600)=[{{&(0x7f0000000400)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000004) 38.936521963s ago: executing program 6 (id=4833): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4affeeaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x0) 38.789644706s ago: executing program 8 (id=4836): r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000080)={0x14, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 38.671129777s ago: executing program 6 (id=4837): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000040)={r4, 0x4, 0x20}, 0xc) 38.453002848s ago: executing program 3 (id=4838): accept4$ax25(0xffffffffffffffff, &(0x7f00000008c0)={{0x3, @netrom}, [@remote, @netrom, @rose, @remote, @netrom, @default, @rose, @null]}, &(0x7f00000001c0)=0x48, 0x80000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r2, 0x2}, 0x18) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80c05000}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)={0x58, 0x0, 0x0, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x2}, {0x8, 0x0, 0x1}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x1}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x8}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x40}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x2}, @NL80211_ATTR_IE={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000010}, 0xc000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00", @ANYBLOB], 0x1c}}, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x38, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) r7 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r7, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@newtfilter={0x24, 0x11, 0x1, 0x74bd2b, 0x0, {0x0, 0x0, 0x74, r8, {0x6, 0x4}, {0x0, 0x4}, {0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 33.069661275s ago: executing program 8 (id=4841): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000006c0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}]}, 0x44}}, 0x0) pselect6(0x40, &(0x7f0000000100)={0xb619, 0xa5, 0xf71, 0x6, 0x80000001, 0xff, 0xf90, 0xe1}, &(0x7f0000000140)={0x80000001, 0x80, 0x10001, 0x7, 0xfffffffffffffffd, 0xe69, 0x8, 0xe}, &(0x7f0000000180)={0x0, 0x0, 0x400, 0x274, 0x0, 0x400, 0x6, 0x5}, &(0x7f00000001c0), &(0x7f0000000240)={&(0x7f0000000200)={[0x1]}, 0x8}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x38) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipmr_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, 0x5}, [@RTA_MULTIPATH={0xc, 0x9, {0x8}}, @RTA_PREFSRC={0x8, 0x7, @multicast2}]}, 0x30}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffff000000000101000000000000"], 0xb8}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1c, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x10000000}, {}, 0x20, 0x0, 0x1}}, 0xb8}}, 0x0) r10 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r10, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/20, 0x14}], 0x1, 0x4, 0x0) 32.859467138s ago: executing program 3 (id=4842): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240"], 0x7c}}, 0x0) close(r0) 32.674697131s ago: executing program 7 (id=4843): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x3, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x2, 0x0, 0x4, 0x8}, {0x12, 0x3, 0x0, 0x1c00, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}]}}]}, 0x58}}, 0x44080) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000440000000800", @ANYRES32=r2, @ANYBLOB="08002700851600000a00180000000000000000001c005a801800018014"], 0x4c}}, 0x4000000) 32.557184274s ago: executing program 6 (id=4844): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0xb0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x9629, 0x0, 0x0, 0x0, 0x0, 0x203], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10000}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xb}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}]}}]}, 0xb0}}, 0x0) 32.320490684s ago: executing program 3 (id=4845): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0x4}, @timestamp, @timestamp, @mss={0x2, 0x5}], 0x7) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xa000000, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 32.243686636s ago: executing program 7 (id=4846): openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x402, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x32) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 32.214067467s ago: executing program 8 (id=4847): r0 = socket(0x8000000010, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, r1) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f00000006c0)=0x6, 0x4) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) bind$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x20000040) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @remote}, {0x20000010304, @dev}, 0x4, {0x2, 0x0, @multicast1=0xe000cc02}}) 32.154667196s ago: executing program 6 (id=4848): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r1, 0x7, 0x8, 0x4}) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0xfffffffffffffc54, 0x2, {0x0, 0x0, 0x8}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) close(r1) socket(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'tunl0\x00'}) close(0x3) 31.863521932s ago: executing program 3 (id=4849): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={0x0, r0, 0x0, 0x800}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d80)=ANY=[@ANYBLOB="240000002c00010000000000000000000400008010000c"], 0x24}], 0x1}, 0x0) 31.597184221s ago: executing program 0 (id=4850): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000140)='contention_begin\x00', r0, 0x0, 0x9}, 0x18) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x0, r4}, 0x10) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) 31.440527693s ago: executing program 8 (id=4851): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000018000180140002006e6574646576"], 0x34}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0xf8}}, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@empty, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) 31.328321663s ago: executing program 6 (id=4852): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x305001, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000000c0)='\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000380)={&(0x7f0000000180)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000280)=[0x80001], &(0x7f0000000200), &(0x7f0000000380)}) 31.153604158s ago: executing program 8 (id=4853): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5], 0x3c}}, 0x0) 31.04876715s ago: executing program 3 (id=4854): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r2, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e21}, 0x6d) bind$unix(r0, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e24}, 0x6e) 30.292845561s ago: executing program 0 (id=4855): unshare(0x20000400) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x804, 0x8000}, 0x4) 30.291817911s ago: executing program 7 (id=4856): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000340)="580000001400192340834b", 0xb}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x41000, 0x80, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x4, 0x9, 0xffffffff, 0x3d}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) write$tun(0xffffffffffffffff, 0x0, 0xf7) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) 30.163627623s ago: executing program 7 (id=4857): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) close(r0) 30.040822211s ago: executing program 0 (id=4858): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x3, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x2, 0x0, 0x4, 0x8}, {0x12, 0x3, 0x0, 0x1c00, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}]}}]}, 0x58}}, 0x44080) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000440000000800", @ANYRES32=r2, @ANYBLOB="08002700851600000a00180000000000000000001c005a801800018014"], 0x4c}}, 0x4000000) 29.926923064s ago: executing program 0 (id=4859): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0x88}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r3, 0x0, 0x4000000) socket$key(0xf, 0x3, 0x2) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002ac0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc8734c295cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f244a3c307145452ce64dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c65070020d7df0abc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3593], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r5, 0x0) recvmmsg(r5, &(0x7f00000055c0), 0x400023c, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB], 0xac}, 0x1, 0x0, 0x0, 0x5}, 0x4014) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x31cd, 0x1}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}}, 0x0) 29.675140229s ago: executing program 6 (id=4860): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x9629, 0x0, 0x0, 0x0, 0x0, 0x203], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1000}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xb}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}]}}]}, 0xac}}, 0x0) 29.654674045s ago: executing program 7 (id=4861): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$can_j1939(0x1d, 0x2, 0x7) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x3, @local, 0xb}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) listen(r1, 0x3ff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @remote, @local, {[], {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@sack={0x5, 0xa, [0x7, 0x93cc]}]}}}}}}}}, 0x0) 29.472328501s ago: executing program 8 (id=4862): r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000040)={0x6, 'bridge_slave_0\x00', {0x2}}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000140)={0x0, 'team_slave_1\x00', {0x4}, 0xa}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0xf, &(0x7f00000000c0)=0x3, 0x4) setsockopt$inet6_udp_int(r1, 0x11, 0xa, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r2 = socket$inet(0x2b, 0x801, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080), 0x10) unshare(0x68040200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@mangle={'mangle\x00', 0x10, 0x6, 0x5d0, 0x360, 0x290, 0x290, 0xd0, 0x290, 0x500, 0x500, 0x500, 0x500, 0x500, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0xfd}}}, {{@ipv6={@dev, @loopback, [], [], 'pim6reg\x00', 'veth1_macvtap\x00'}, 0x0, 0x180, 0x1c0, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0x0, 0xff], [], [], 0x3f89a73c4f305294}}, @common=@dst={{0x48}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xe, 0x32, "fe16ae0c233aecbad824e681d33b3f604e23df7bfdb968a58bfe8d3caaf9"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x630) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000000)={'mangle\x00', 0x2, [{}, {}]}, 0x48) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xfe}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) write$tun(0xffffffffffffffff, 0x0, 0x3b) setsockopt$inet_tcp_int(r2, 0x6, 0x12, &(0x7f0000000000), 0x4) 29.411456575s ago: executing program 3 (id=4863): r0 = socket(0x8000000010, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, r1) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f00000006c0)=0x6, 0x4) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) write(r0, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9463cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) bind$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x20000040) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @remote}, {0x20000010304, @dev}, 0x4, {0x2, 0x0, @multicast1=0xe000cc02}}) 29.215985662s ago: executing program 7 (id=4864): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0xfffffffffffffc54, 0x2, {0x0, 0x0, 0x8}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) close(r1) socket(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'tunl0\x00'}) close(0x3) 28.230858955s ago: executing program 0 (id=4865): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000018000180140002006e6574646576"], 0x34}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0xf8}}, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@empty, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) 20.221314053s ago: executing program 44 (id=4815): socket$packet(0x11, 0xa, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000881}, 0x20000000) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) shutdown(r3, 0x1) recvmmsg(r3, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000037000000080003", @ANYRES32=r8, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x808) r10 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x1, 0x2ffffffff}, 0xc) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000100)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x3, 0xff, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}, 0x1, 0x7}, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r12, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmmsg$inet(r2, &(0x7f0000004600)=[{{&(0x7f0000000400)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000004) 20.214013316s ago: executing program 0 (id=4867): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000140)='contention_begin\x00', r0, 0x0, 0x9}, 0x18) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x0, r4}, 0x10) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) 6.782121721s ago: executing program 45 (id=4862): r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000040)={0x6, 'bridge_slave_0\x00', {0x2}}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000140)={0x0, 'team_slave_1\x00', {0x4}, 0xa}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0xf, &(0x7f00000000c0)=0x3, 0x4) setsockopt$inet6_udp_int(r1, 0x11, 0xa, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r2 = socket$inet(0x2b, 0x801, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080), 0x10) unshare(0x68040200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@mangle={'mangle\x00', 0x10, 0x6, 0x5d0, 0x360, 0x290, 0x290, 0xd0, 0x290, 0x500, 0x500, 0x500, 0x500, 0x500, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0xfd}}}, {{@ipv6={@dev, @loopback, [], [], 'pim6reg\x00', 'veth1_macvtap\x00'}, 0x0, 0x180, 0x1c0, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0x0, 0xff], [], [], 0x3f89a73c4f305294}}, @common=@dst={{0x48}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xe, 0x32, "fe16ae0c233aecbad824e681d33b3f604e23df7bfdb968a58bfe8d3caaf9"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x630) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000000)={'mangle\x00', 0x2, [{}, {}]}, 0x48) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xfe}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) write$tun(0xffffffffffffffff, 0x0, 0x3b) setsockopt$inet_tcp_int(r2, 0x6, 0x12, &(0x7f0000000000), 0x4) 2.944396216s ago: executing program 46 (id=4864): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0xfffffffffffffc54, 0x2, {0x0, 0x0, 0x8}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) close(r1) socket(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'tunl0\x00'}) close(0x3) 896.175656ms ago: executing program 47 (id=4863): r0 = socket(0x8000000010, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, r1) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f00000006c0)=0x6, 0x4) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) bind$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x20000040) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @remote}, {0x20000010304, @dev}, 0x4, {0x2, 0x0, @multicast1=0xe000cc02}}) 510.336207ms ago: executing program 48 (id=4860): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x9629, 0x0, 0x0, 0x0, 0x0, 0x203], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1000}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xb}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}]}}]}, 0xac}}, 0x0) 0s ago: executing program 49 (id=4867): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000140)='contention_begin\x00', r0, 0x0, 0x9}, 0x18) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x0, r4}, 0x10) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4) kernel console output (not intermixed with test programs): 63] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.313388][T15663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 975.330801][T15663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.350486][T15663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 975.362271][T15663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.377634][T15663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 975.388825][T15663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.632454][T15663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 975.664013][T15663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 975.706510][T15663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.741177][T15663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 975.751919][T15663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.762025][T15663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 975.772557][T15663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.782606][T15663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 975.793303][T15663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.803516][T15663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 975.814157][T15663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.824548][T15663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 975.835637][T15663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.845612][T15663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 975.856332][T15663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.866425][T15663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 975.876940][T15663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.887059][T15663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 975.897748][T15663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.910708][T15663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 975.925736][T15663] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.935856][T15663] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.943019][T15849] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 975.944818][T15663] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.953571][T15849] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 975.959386][T15663] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.975148][T15849] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 975.981346][T15849] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 975.987503][T15849] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 977.402429][ T6894] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 977.440372][ T6894] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 977.628148][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 978.031642][ T5845] Bluetooth: hci1: command 0x0c1a tx timeout [ 978.038565][ T5845] Bluetooth: hci2: command 0x0406 tx timeout [ 978.064719][ T5844] Bluetooth: hci0: command 0x040f tx timeout [ 978.071411][ T5844] Bluetooth: hci4: command 0x0c1a tx timeout [ 978.085360][ T5844] Bluetooth: hci3: command 0x0c1a tx timeout [ 978.370437][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 978.574365][T15878] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 979.434040][T15881] netlink: 'syz.9.3025': attribute type 2 has an invalid length. [ 979.600720][T15881] netlink: 'syz.9.3025': attribute type 8 has an invalid length. [ 979.608520][T15881] netlink: 132 bytes leftover after parsing attributes in process `syz.9.3025'. [ 980.789373][T15905] Bluetooth: MGMT ver 1.23 [ 981.351241][T15907] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3034'. [ 981.579376][T15916] sg_write: data in/out 39330/17 bytes for SCSI command 0x8-- guessing data in; [ 981.579376][T15916] program syz.4.3036 not setting count and/or reply_len properly [ 981.958416][T15913] bond2: entered allmulticast mode [ 981.958431][T15907] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3034'. [ 982.022607][T15913] 8021q: adding VLAN 0 to HW filter on device bond2 [ 982.090109][T15913] bond1: (slave bond2): Enslaving as an active interface with an up link [ 982.181132][T15919] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3037'. [ 985.048351][T15960] pimreg: entered allmulticast mode [ 985.138616][T15957] 9pnet_fd: Insufficient options for proto=fd [ 985.613578][T15954] pimreg: left allmulticast mode [ 988.253944][ T5845] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 988.314141][ T5845] Bluetooth: hci0: command 0x040f tx timeout [ 989.292353][ T5844] Bluetooth: hci4: unexpected event for opcode 0x2036 [ 989.318912][T15990] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 990.060299][T15990] netlink: 'syz.0.3057': attribute type 2 has an invalid length. [ 990.171366][T15990] netlink: 'syz.0.3057': attribute type 8 has an invalid length. [ 990.221357][T15990] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3057'. [ 990.550565][ T5891] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 990.581070][T16010] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 990.623290][T16010] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 990.661301][T16010] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 990.714024][T16010] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 990.740674][ T5891] usb 9-1: Using ep0 maxpacket: 32 [ 990.776096][ T5891] usb 9-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 990.798248][T16010] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 990.882763][ T5891] usb 9-1: config 1 interface 0 has no altsetting 0 [ 990.938143][ T5891] usb 9-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 990.992663][ T5891] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.037226][ T5891] usb 9-1: Product: syz [ 991.070602][ T5891] usb 9-1: Manufacturer: syz [ 991.104128][ T5891] usb 9-1: SerialNumber: syz [ 991.360653][T16005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 991.655449][T16005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 992.463389][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.469846][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.620787][ T5844] Bluetooth: hci1: command 0x0c1a tx timeout [ 992.627028][ T5844] Bluetooth: hci2: command 0x0406 tx timeout [ 992.708304][ T5845] Bluetooth: hci3: command 0x0c1a tx timeout [ 992.780986][ T5845] Bluetooth: hci4: command 0x0c1a tx timeout [ 992.861143][ T5845] Bluetooth: hci0: command 0x040f tx timeout [ 993.371412][ T5891] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/input/input44 [ 993.412637][ T5891] usb 9-1: USB disconnect, device number 14 [ 997.957187][T16049] Invalid logical block size (524288) [ 998.750885][ T5979] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 999.068808][ T5891] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 999.560521][ T5979] usb 10-1: Using ep0 maxpacket: 32 [ 999.732403][ T5979] usb 10-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 999.746726][ T5979] usb 10-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 999.757015][ T5979] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.765722][ T5979] usb 10-1: Product: syz [ 999.772493][ T5979] usb 10-1: Manufacturer: syz [ 999.777197][ T5979] usb 10-1: SerialNumber: syz [ 999.803205][ T5979] usb 10-1: config 0 descriptor?? [ 1000.235063][ T5979] usb 10-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1000.364423][T16081] netlink: 11 bytes leftover after parsing attributes in process `syz.9.3081'. [ 1001.263007][ T1896] usb 10-1: Failed to submit usb control message: -110 [ 1001.270193][ T1896] usb 10-1: unable to send the bmi data to the device: -110 [ 1001.277647][ T1896] usb 10-1: unable to get target info from device [ 1001.284142][ T1896] usb 10-1: could not get target info (-110) [ 1001.290197][ T1896] usb 10-1: could not probe fw (-110) [ 1001.348044][ T5891] usb 1-1: Using ep0 maxpacket: 32 [ 1001.454331][ T5891] usb 1-1: device descriptor read/all, error -71 [ 1001.975626][T16091] can0: slcan on ttyS3. [ 1003.196321][T13018] usb 10-1: USB disconnect, device number 20 [ 1003.290649][T16092] can0 (unregistered): slcan off ttyS3. [ 1003.530750][ T5979] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1005.316738][ T5979] usb 8-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.02 [ 1005.326307][ T5979] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.334555][ T5979] usb 8-1: Product: syz [ 1005.339133][ T5979] usb 8-1: Manufacturer: syz [ 1005.344293][ T5979] usb 8-1: SerialNumber: syz [ 1005.402007][ T5979] usb 8-1: config 0 descriptor?? [ 1005.650177][ T5979] hso 8-1:0.0: Failed to find BULK IN ep [ 1006.825619][T13018] usb 8-1: USB disconnect, device number 15 [ 1007.730436][ T9] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1007.891167][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 1008.970444][ T9] usb 9-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1008.995697][ T9] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1009.323847][T16155] netlink: 'syz.0.3104': attribute type 10 has an invalid length. [ 1009.446094][ T9] usb 9-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 1009.455561][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.463712][ T9] usb 9-1: Product: syz [ 1009.468026][ T9] usb 9-1: Manufacturer: syz [ 1009.472820][ T9] usb 9-1: SerialNumber: syz [ 1009.517793][T16155] macvlan0: entered allmulticast mode [ 1009.559528][T16155] veth1_vlan: entered allmulticast mode [ 1009.610521][T16155] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 1009.912124][T16134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1009.928762][T16134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1011.741707][T16181] fuse: Bad value for 'rootmode' [ 1011.963337][ T9] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/input/input45 [ 1011.982189][ T5186] bcm5974 9-1:1.0: could not read from device [ 1012.034224][ T5186] bcm5974 9-1:1.0: could not read from device [ 1012.079144][ T5186] bcm5974 9-1:1.0: could not read from device [ 1012.441659][ T5186] bcm5974 9-1:1.0: could not read from device [ 1012.673952][ T9] usb 9-1: USB disconnect, device number 15 [ 1016.560752][T16238] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1016.572595][T16238] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1016.632679][T16238] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1016.639128][T16238] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1017.970846][T16238] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1018.364971][ T5844] Bluetooth: hci2: command 0x0406 tx timeout [ 1018.623941][ T5844] Bluetooth: hci1: command 0x0c1a tx timeout [ 1018.904710][ T5844] Bluetooth: hci4: command 0x0c1a tx timeout [ 1018.911355][ T5844] Bluetooth: hci3: command 0x0c1a tx timeout [ 1020.460274][ T5845] Bluetooth: hci0: command 0x040f tx timeout [ 1022.934095][T16307] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1023.149128][T16316] sg_write: data in/out 39330/17 bytes for SCSI command 0x8-- guessing data in; [ 1023.149128][T16316] program syz.0.3149 not setting count and/or reply_len properly [ 1023.219289][T16311] veth1_to_team: mtu greater than device maximum [ 1024.608296][T16327] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3154'. [ 1025.325262][T16318] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1025.437872][T16318] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1025.555585][T16318] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1025.648135][T16318] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1025.654809][T16318] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1027.430543][ T5845] Bluetooth: hci2: command 0x0406 tx timeout [ 1027.501033][ T5845] Bluetooth: hci1: command 0x0c1a tx timeout [ 1028.375486][ T5845] Bluetooth: hci3: command 0x0c1a tx timeout [ 1028.382057][ T5845] Bluetooth: hci0: command 0x040f tx timeout [ 1028.388481][ T5845] Bluetooth: hci4: command 0x0c1a tx timeout [ 1028.950560][ T9] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1029.570386][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 1029.583566][ T9] usb 9-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1029.598156][ T9] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1029.680270][ T9] usb 9-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 1029.716446][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.702823][ T9] usb 9-1: Product: syz [ 1030.707042][ T9] usb 9-1: Manufacturer: syz [ 1030.712153][ T9] usb 9-1: SerialNumber: syz [ 1031.033142][T16372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1031.042032][T16372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1032.388094][ T9] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/input/input46 [ 1032.416691][ T5186] bcm5974 9-1:1.0: could not read from device [ 1032.463596][ T5186] bcm5974 9-1:1.0: could not read from device [ 1032.472256][ T9] usb 9-1: USB disconnect, device number 16 [ 1035.211184][ T9] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1035.370805][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 1035.402485][ T9] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1035.441490][ T9] usb 9-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1035.480708][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.750992][ T9] usb 9-1: Product: syz [ 1035.760995][ T9] usb 9-1: Manufacturer: syz [ 1035.765659][ T9] usb 9-1: SerialNumber: syz [ 1035.772699][ T9] usb 9-1: config 0 descriptor?? [ 1036.440074][T16455] netlink: 11 bytes leftover after parsing attributes in process `syz.8.3189'. [ 1036.872223][ T5845] Bluetooth: hci0: command 0x040f tx timeout [ 1036.878388][ T5844] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 1036.954485][ T9] usb 9-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1038.362480][ T5893] usb 9-1: USB disconnect, device number 17 [ 1038.370529][ T52] usb 9-1: Failed to submit usb control message: -71 [ 1038.410663][ T52] usb 9-1: unable to send the bmi data to the device: -71 [ 1038.418071][ T52] usb 9-1: unable to get target info from device [ 1038.470118][ T52] usb 9-1: could not get target info (-71) [ 1038.500424][ T5979] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1038.510428][ T52] usb 9-1: could not probe fw (-71) [ 1038.650460][ T5979] usb 8-1: Using ep0 maxpacket: 32 [ 1038.674304][ T5979] usb 8-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1038.721090][ T5979] usb 8-1: config 1 interface 0 has no altsetting 0 [ 1038.752817][ T5979] usb 8-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 1038.779587][ T5979] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.810440][ T5979] usb 8-1: Product: syz [ 1038.837528][ T5979] usb 8-1: Manufacturer: syz [ 1038.853260][ T5979] usb 8-1: SerialNumber: syz [ 1039.190791][T16459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1039.540577][T16459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1040.525159][T16479] pimreg: entered allmulticast mode [ 1041.012069][T16476] pimreg: left allmulticast mode [ 1041.797712][ T5979] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/input/input47 [ 1041.913487][ T5186] bcm5974 8-1:1.0: could not read from device [ 1042.009947][ T5186] bcm5974 8-1:1.0: could not read from device [ 1042.850488][ T5186] bcm5974 8-1:1.0: could not read from device [ 1043.329836][ T5186] bcm5974 8-1:1.0: could not read from device [ 1043.427481][ T5979] usb 8-1: USB disconnect, device number 16 [ 1044.839083][T16523] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3219'. [ 1046.176017][ T5845] Bluetooth: hci0: command 0x040f tx timeout [ 1046.190589][ T5844] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 1046.467281][T16544] sg_write: data in/out 39330/14 bytes for SCSI command 0x8-- guessing data in; [ 1046.467281][T16544] program syz.7.3221 not setting count and/or reply_len properly [ 1047.262348][T16541] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1047.268638][T16541] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1047.275096][T16541] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1047.281235][T16541] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1047.287718][T16541] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1048.861212][ T5844] Bluetooth: hci2: command 0x0406 tx timeout [ 1049.340804][ T5844] Bluetooth: hci0: command 0x040f tx timeout [ 1049.349372][ T5844] Bluetooth: hci4: command 0x0c1a tx timeout [ 1049.355596][ T5844] Bluetooth: hci3: command 0x0c1a tx timeout [ 1049.361922][ T5844] Bluetooth: hci1: command 0x0c1a tx timeout [ 1049.380599][ T5845] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 1051.463329][T16589] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3238'. [ 1051.483085][ T5836] Bluetooth: hci0: command 0x040f tx timeout [ 1051.529454][T16584] bond1: entered allmulticast mode [ 1051.693108][T16584] bond1 (unregistering): Released all slaves [ 1053.294859][T16601] sg_write: data in/out 39330/14 bytes for SCSI command 0x8-- guessing data in; [ 1053.294859][T16601] program syz.8.3241 not setting count and/or reply_len properly [ 1053.990861][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1053.997201][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.410919][T16611] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1054.417143][T16611] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1054.423689][T16611] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1054.431555][T16611] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1054.439751][ T5845] Bluetooth: hci0: Opcode 0x1407 failed: -112 [ 1054.446811][T16611] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1055.697459][T16627] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1055.807873][T16628] netlink: 'syz.8.3249': attribute type 10 has an invalid length. [ 1055.868833][T16628] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1055.993309][T16627] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3249'. [ 1056.460698][ T5845] Bluetooth: hci0: command 0x040f tx timeout [ 1056.461518][ T5844] Bluetooth: hci4: command 0x0c1a tx timeout [ 1056.466857][ T5845] Bluetooth: hci3: command 0x0c1a tx timeout [ 1056.472882][ T5844] Bluetooth: hci1: command 0x0c1a tx timeout [ 1056.472926][ T5844] Bluetooth: hci2: command 0x0406 tx timeout [ 1056.622410][T16638] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3252'. [ 1057.498402][T16647] syz.6.3255: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1058.220012][T16647] CPU: 0 UID: 0 PID: 16647 Comm: syz.6.3255 Not tainted 6.13.0-rc2-syzkaller-00382-gdccbe2047a5b #0 [ 1058.230852][T16647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1058.240907][T16647] Call Trace: [ 1058.244180][T16647] [ 1058.247191][T16647] dump_stack_lvl+0x241/0x360 [ 1058.251884][T16647] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1058.257092][T16647] ? __pfx__printk+0x10/0x10 [ 1058.261726][T16647] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 1058.268172][T16647] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1058.273982][T16647] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 1058.280501][T16647] warn_alloc+0x278/0x410 [ 1058.284831][T16647] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 1058.291161][T16647] ? __pfx_warn_alloc+0x10/0x10 [ 1058.296010][T16647] ? kasan_save_track+0x3f/0x80 [ 1058.300860][T16647] ? __kasan_kmalloc+0x98/0xb0 [ 1058.305625][T16647] ? xsk_setsockopt+0x4ea/0x950 [ 1058.310483][T16647] ? do_sock_setsockopt+0x3b1/0x720 [ 1058.315679][T16647] ? __x64_sys_setsockopt+0x1ee/0x280 [ 1058.321051][T16647] ? do_syscall_64+0xf3/0x230 [ 1058.325731][T16647] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1058.331899][T16647] __vmalloc_node_range_noprof+0x126/0x1380 [ 1058.337899][T16647] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1058.344227][T16647] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1058.349853][T16647] ? __kasan_kmalloc+0x98/0xb0 [ 1058.354620][T16647] vmalloc_user_noprof+0x74/0x80 [ 1058.359558][T16647] ? xskq_create+0xb6/0x170 [ 1058.364154][T16647] xskq_create+0xb6/0x170 [ 1058.368489][T16647] xsk_init_queue+0xa1/0x100 [ 1058.373082][T16647] xsk_setsockopt+0x4ea/0x950 [ 1058.377764][T16647] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1058.382962][T16647] ? __pfx_aa_sk_perm+0x10/0x10 [ 1058.387836][T16647] ? aa_sock_opt_perm+0x79/0x120 [ 1058.392792][T16647] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1058.398462][T16647] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1058.403685][T16647] do_sock_setsockopt+0x3b1/0x720 [ 1058.408728][T16647] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1058.414291][T16647] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1058.419923][T16647] ? __fget_files+0x395/0x410 [ 1058.424611][T16647] ? __fget_files+0x2a/0x410 [ 1058.429216][T16647] __x64_sys_setsockopt+0x1ee/0x280 [ 1058.434426][T16647] do_syscall_64+0xf3/0x230 [ 1058.438941][T16647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1058.444855][T16647] RIP: 0033:0x7f82f5785d19 [ 1058.449265][T16647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1058.469337][T16647] RSP: 002b:00007f82f6697038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1058.477760][T16647] RAX: ffffffffffffffda RBX: 00007f82f5975fa0 RCX: 00007f82f5785d19 [ 1058.485731][T16647] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 1058.493734][T16647] RBP: 00007f82f5801a20 R08: 0000000000000004 R09: 0000000000000000 [ 1058.501790][T16647] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 1058.509755][T16647] R13: 0000000000000000 R14: 00007f82f5975fa0 R15: 00007ffcc3092698 [ 1058.517773][T16647] [ 1058.543974][T16647] Mem-Info: [ 1058.552162][T16647] active_anon:10140 inactive_anon:0 isolated_anon:0 [ 1058.552162][T16647] active_file:17591 inactive_file:39093 isolated_file:0 [ 1058.552162][T16647] unevictable:768 dirty:200 writeback:0 [ 1058.552162][T16647] slab_reclaimable:6152 slab_unreclaimable:115122 [ 1058.552162][T16647] mapped:39648 shmem:7164 pagetables:837 [ 1058.552162][T16647] sec_pagetables:0 bounce:0 [ 1058.552162][T16647] kernel_misc_reclaimable:0 [ 1058.552162][T16647] free:1293854 free_pcp:406 free_cma:0 [ 1058.761250][T16647] Node 0 active_anon:28860kB inactive_anon:0kB active_file:70364kB inactive_file:156300kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:147092kB dirty:800kB writeback:0kB shmem:15720kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11844kB pagetables:3148kB sec_pagetables:0kB all_unreclaimable? no [ 1059.098732][T16647] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1059.216496][T16657] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3258'. [ 1059.828769][T16647] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1059.856282][ C0] vkms_vblank_simulate: vblank timer overrun [ 1059.896069][T16647] lowmem_reserve[]: 0 2465 2466 0 0 [ 1059.901659][T16647] Node 0 DMA32 free:1255240kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:26308kB inactive_anon:0kB active_file:70364kB inactive_file:155464kB unevictable:1536kB writepending:612kB present:3129332kB managed:2552772kB mlocked:0kB bounce:0kB free_pcp:20980kB local_pcp:4712kB free_cma:0kB [ 1059.932108][ C0] vkms_vblank_simulate: vblank timer overrun [ 1059.938712][T16647] lowmem_reserve[]: 0 0 0 0 0 [ 1059.943532][T16647] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:836kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1059.971606][T16647] lowmem_reserve[]: 0 0 0 0 0 [ 1059.976872][T16647] Node 1 Normal free:3903732kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 1060.005769][ C0] vkms_vblank_simulate: vblank timer overrun [ 1060.012603][T16647] lowmem_reserve[]: 0 0 0 0 0 [ 1060.017412][T16647] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1060.030740][T16647] Node 0 DMA32: 596*4kB (M) 623*8kB (ME) 389*16kB (UME) 804*32kB (UME) 408*64kB (UME) 88*128kB (UME) 32*256kB (UME) 35*512kB (UME) 73*1024kB (UME) 22*2048kB (UME) 254*4096kB (UM) = 1263000kB [ 1060.050441][T16647] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1060.062429][T16647] Node 1 Normal: 217*4kB (UE) 76*8kB (UME) 49*16kB (UME) 215*32kB (UME) 91*64kB (UME) 35*128kB (UME) 17*256kB (UME) 6*512kB (UM) 2*1024kB (UM) 4*2048kB (UE) 944*4096kB (UM) = 3903732kB [ 1060.088758][T16647] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1060.129771][T16662] input: syz0 as /devices/virtual/input/input48 [ 1060.159851][T16647] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1060.170738][T16647] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1060.210488][T16647] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1060.221730][T16647] 58125 total pagecache pages [ 1060.226505][T16647] 0 pages in swap cache [ 1060.292066][T16647] Free swap = 124580kB [ 1060.297307][T16647] Total swap = 124996kB [ 1060.303371][T16647] 2097051 pages RAM [ 1060.307209][T16647] 0 pages HighMem/MovableOnly [ 1060.326521][T16647] 427008 pages reserved [ 1060.436711][T16647] 0 pages cma reserved [ 1061.138297][T16684] overlayfs: missing 'lowerdir' [ 1064.541966][T16717] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3278'. [ 1065.904305][T16737] overlayfs: missing 'lowerdir' [ 1067.732576][T16739] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1069.423348][ T5844] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 1070.122689][ T5844] Bluetooth: hci0: command 0x040f tx timeout [ 1072.460036][T16792] overlayfs: missing 'lowerdir' [ 1074.611022][ T5836] Bluetooth: hci3: unexpected event for opcode 0x0036 [ 1076.595876][T16828] fuse: Unknown parameter '0x0000000000000003' [ 1077.290373][T16848] overlayfs: missing 'lowerdir' [ 1079.411250][ T5836] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1079.421653][ T5836] Bluetooth: hci3: Injecting HCI hardware error event [ 1079.431232][ T5836] Bluetooth: hci3: hardware error 0x00 [ 1080.834318][T16869] netlink: 'syz.0.3327': attribute type 1 has an invalid length. [ 1081.414659][ T5845] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1081.500476][ T5836] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1081.576529][ T5845] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1081.610039][ T5845] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1081.911507][ T5845] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1081.919723][ T5845] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1081.920994][T16869] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1081.927582][ T5845] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1083.248750][T16874] bond1: (slave ip6gretap1): making interface the new active one [ 1083.283340][T16874] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1083.915547][T11931] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1083.980636][ T5844] Bluetooth: hci6: command tx timeout [ 1084.110632][T11931] usb 9-1: Using ep0 maxpacket: 32 [ 1084.976300][T16870] chnl_net:caif_netlink_parms(): no params data found [ 1085.039023][T11931] usb 9-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1085.052950][T11931] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1085.152470][T11931] usb 9-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 1085.162781][T11931] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.171725][T11931] usb 9-1: Product: syz [ 1085.176103][T11931] usb 9-1: Manufacturer: syz [ 1085.239133][T11931] usb 9-1: SerialNumber: syz [ 1085.510728][T16745] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1086.533924][ T5845] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 1086.543187][ T5845] Bluetooth: hci0: command 0x040f tx timeout [ 1086.549579][ T5845] Bluetooth: hci6: command tx timeout [ 1086.660400][T16745] usb 7-1: Using ep0 maxpacket: 32 [ 1086.667263][T16745] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1086.680766][T16745] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1086.689864][T16745] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.698421][T16745] usb 7-1: Product: syz [ 1086.702675][T16745] usb 7-1: Manufacturer: syz [ 1086.707311][T16745] usb 7-1: SerialNumber: syz [ 1086.715510][T16745] usb 7-1: config 0 descriptor?? [ 1086.811675][T16936] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3340'. [ 1086.958103][T11931] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/input/input49 [ 1086.968975][ T5186] bcm5974 9-1:1.0: could not read from device [ 1087.045838][T11931] usb 9-1: USB disconnect, device number 18 [ 1087.128625][T16870] bridge0: port 1(bridge_slave_0) entered blocking state [ 1087.162727][T16870] bridge0: port 1(bridge_slave_0) entered disabled state [ 1087.220753][T16745] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1087.248626][T16870] bridge_slave_0: entered allmulticast mode [ 1087.420241][T16950] netlink: 11 bytes leftover after parsing attributes in process `syz.6.3339'. [ 1087.480579][T16870] bridge_slave_0: entered promiscuous mode [ 1088.045174][T16870] bridge0: port 2(bridge_slave_1) entered blocking state [ 1088.097908][T16870] bridge0: port 2(bridge_slave_1) entered disabled state [ 1088.170868][T16870] bridge_slave_1: entered allmulticast mode [ 1088.182791][T16870] bridge_slave_1: entered promiscuous mode [ 1088.295764][T16870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1088.305536][ T35] usb 7-1: Failed to submit usb control message: -110 [ 1088.321342][ T35] usb 7-1: unable to send the bmi data to the device: -110 [ 1088.377656][T16870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1088.390076][ T35] usb 7-1: unable to get target info from device [ 1088.411820][ T35] usb 7-1: could not get target info (-110) [ 1088.431806][ T35] usb 7-1: could not probe fw (-110) [ 1088.529762][ T1909] usb 7-1: USB disconnect, device number 14 [ 1088.631769][ T5845] Bluetooth: hci6: command tx timeout [ 1089.032880][T16870] team0: Port device team_slave_0 added [ 1089.148517][T16971] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1089.218335][T16971] netlink: 'syz.8.3353': attribute type 2 has an invalid length. [ 1089.263396][T16870] team0: Port device team_slave_1 added [ 1089.277757][T16971] netlink: 'syz.8.3353': attribute type 8 has an invalid length. [ 1089.342785][T16971] netlink: 132 bytes leftover after parsing attributes in process `syz.8.3353'. [ 1089.535142][T16870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1089.560187][T16870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1089.586092][ C0] vkms_vblank_simulate: vblank timer overrun [ 1089.667651][T16870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1089.693874][T16870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1089.726773][T16870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1089.752656][ C0] vkms_vblank_simulate: vblank timer overrun [ 1089.863111][T16870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1090.250014][T16870] hsr_slave_0: entered promiscuous mode [ 1090.271934][T16870] hsr_slave_1: entered promiscuous mode [ 1090.350522][T16870] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1090.367235][T16870] Cannot create hsr debugfs directory [ 1090.740433][ T5845] Bluetooth: hci6: command tx timeout [ 1091.211952][T16870] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1091.281075][T16870] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1091.441471][T16997] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3358'. [ 1092.221827][T11931] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1092.390488][T11931] usb 7-1: Using ep0 maxpacket: 32 [ 1092.401162][T11931] usb 7-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1092.414971][T11931] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1092.482594][T11931] usb 7-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 1092.498237][T11931] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.514452][T16870] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1092.530765][T11931] usb 7-1: Product: syz [ 1092.538160][T11931] usb 7-1: Manufacturer: syz [ 1092.543951][T16870] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.556842][T11931] usb 7-1: SerialNumber: syz [ 1092.678296][T16870] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1092.703927][T16870] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.777662][T16988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1092.800390][ T1909] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1092.821295][T16988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1092.836328][T11931] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input50 [ 1092.850925][ T5186] bcm5974 7-1:1.0: could not read from device [ 1092.860759][T16870] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1092.861131][ T5186] bcm5974 7-1:1.0: could not read from device [ 1092.879454][T11931] usb 7-1: USB disconnect, device number 15 [ 1092.889361][T16870] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.910419][ T5979] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1092.970423][ T1909] usb 8-1: Using ep0 maxpacket: 32 [ 1092.980209][T17018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3366'. [ 1092.991557][ T1909] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1093.013957][ T1909] usb 8-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1093.031015][ T1909] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.049251][ T1909] usb 8-1: Product: syz [ 1093.053912][ T1909] usb 8-1: Manufacturer: syz [ 1093.058700][ T1909] usb 8-1: SerialNumber: syz [ 1093.071900][ T1909] usb 8-1: config 0 descriptor?? [ 1093.090690][ T5979] usb 10-1: Using ep0 maxpacket: 32 [ 1093.108188][ T1909] usb 8-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1093.108308][ T5979] usb 10-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1093.136120][ T5979] usb 10-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1093.145576][ T5979] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.153823][ T5979] usb 10-1: Product: syz [ 1093.158278][ T5979] usb 10-1: Manufacturer: syz [ 1093.163532][ T5979] usb 10-1: SerialNumber: syz [ 1093.175562][ T5979] usb 10-1: config 0 descriptor?? [ 1093.231159][ T5979] usb 10-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1093.382019][T17028] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1093.401639][T16870] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1093.696368][T17032] netlink: 11 bytes leftover after parsing attributes in process `syz.7.3362'. [ 1093.738314][T17031] netlink: 11 bytes leftover after parsing attributes in process `syz.9.3363'. [ 1093.804805][T16870] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1093.813743][T17028] netlink: 'syz.0.3367': attribute type 2 has an invalid length. [ 1093.826642][T17028] netlink: 'syz.0.3367': attribute type 8 has an invalid length. [ 1093.880081][T17028] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3367'. [ 1093.909435][T16870] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1093.978363][T16870] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1094.151031][ T35] usb 8-1: Failed to submit usb control message: -110 [ 1094.159291][ T35] usb 8-1: unable to send the bmi data to the device: -110 [ 1094.186655][ T35] usb 8-1: unable to get target info from device [ 1094.193208][ T35] usb 8-1: could not get target info (-110) [ 1094.200035][ T35] usb 8-1: could not probe fw (-110) [ 1094.300900][ T1087] usb 10-1: Failed to submit usb control message: -110 [ 1094.308569][ T1087] usb 10-1: unable to send the bmi data to the device: -110 [ 1094.321543][ T1087] usb 10-1: unable to get target info from device [ 1094.335662][ T1087] usb 10-1: could not get target info (-110) [ 1094.349443][ T1087] usb 10-1: could not probe fw (-110) [ 1094.364175][T16870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1094.493404][T17037] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3369'. [ 1094.559202][T16870] 8021q: adding VLAN 0 to HW filter on device team0 [ 1094.643297][ T6141] bridge0: port 1(bridge_slave_0) entered blocking state [ 1094.650583][ T6141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1094.689157][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 1094.696348][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1094.953512][T17043] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 1095.831424][T16870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1095.846537][ T1909] usb 8-1: USB disconnect, device number 17 [ 1096.394691][ T5893] usb 10-1: USB disconnect, device number 21 [ 1096.445894][T16870] veth0_vlan: entered promiscuous mode [ 1096.468301][T16870] veth1_vlan: entered promiscuous mode [ 1096.529664][T16870] veth0_macvtap: entered promiscuous mode [ 1096.559969][T16870] veth1_macvtap: entered promiscuous mode [ 1096.605758][T16870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1096.624676][T16870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1096.640352][T16870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1096.660338][T16870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1096.670173][T16870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1096.703442][T16870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1096.716318][T16870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1096.727062][T16870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1096.738047][T16870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1096.748642][T16870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1096.758934][T16870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1096.769808][T16870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1096.779670][T16870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1096.791148][T16870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1096.801326][T16870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1096.811860][T16870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1096.821771][T16870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1096.832307][T16870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1096.842226][T16870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1096.852764][T16870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1096.865197][T16870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1096.955453][T17065] netlink: 'syz.6.3376': attribute type 10 has an invalid length. [ 1097.015667][T17064] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3376'. [ 1097.209332][T17070] fuse: Unknown parameter 'fd0x0000000000000003' [ 1097.324138][T16870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1097.342315][T16870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1097.373460][T16870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1097.436059][T16870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1097.490402][T16870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1097.668480][T16870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1097.713251][T16870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1097.863484][T16870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1098.081043][T16870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1098.120657][T16870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1098.173024][T16870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1098.214856][T16870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1098.225143][T16870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1098.235843][T16870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1098.245744][T16870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1098.256467][T16870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1098.267158][T16870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1098.277856][T16870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1098.293782][T16870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1098.304908][T16870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1098.319786][T16870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1098.386355][T17065] 8021q: adding VLAN 0 to HW filter on device team0 [ 1098.422669][T17065] bond0: (slave team0): Enslaving as an active interface with an up link [ 1098.443416][T17075] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3378'. [ 1098.550628][T17074] team0: No ports can be present during mode change [ 1098.672096][T17086] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3382'. [ 1098.724224][T16870] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.733517][T16870] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.742486][T16870] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.751301][T16870] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.262432][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1099.274454][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1100.019651][ T6894] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1100.039384][ T6894] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1100.140883][T17108] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3392'. [ 1100.321993][T17110] fuse: Unknown parameter 'fd0x0000000000000003' [ 1100.496361][ T5979] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1100.719280][ T5979] usb 7-1: Using ep0 maxpacket: 32 [ 1100.796397][T17126] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3393'. [ 1101.341673][T17130] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3398'. [ 1101.570384][ T5979] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1101.641820][ T5979] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1101.690450][ T5979] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.698500][ T5979] usb 7-1: Product: syz [ 1101.703086][ T5979] usb 7-1: Manufacturer: syz [ 1101.707709][ T5979] usb 7-1: SerialNumber: syz [ 1101.763152][ T5979] usb 7-1: config 0 descriptor?? [ 1101.849417][T17145] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3405'. [ 1101.861120][ T5979] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1102.208366][T17099] netlink: 11 bytes leftover after parsing attributes in process `syz.6.3387'. [ 1102.219636][ T52] usb 7-1: Failed to submit usb control message: -71 [ 1102.221439][T11931] usb 7-1: USB disconnect, device number 16 [ 1102.227054][ T52] usb 7-1: unable to send the bmi data to the device: -71 [ 1102.239977][ T52] usb 7-1: unable to get target info from device [ 1102.246643][ T52] usb 7-1: could not get target info (-71) [ 1102.260304][ T52] usb 7-1: could not probe fw (-71) [ 1102.500148][T17156] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3408'. [ 1103.574550][T17168] input: syz0 as /devices/virtual/input/input51 [ 1103.702783][T17172] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3414'. [ 1104.491297][ T5845] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 1104.499992][ T5845] Bluetooth: hci6: Injecting HCI hardware error event [ 1104.508675][ T5845] Bluetooth: hci6: hardware error 0x00 [ 1104.935413][T17188] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3421'. [ 1105.190359][T17191] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3421'. [ 1105.930463][ T9803] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1105.987074][T17194] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1105.988452][T17188] netlink: 39 bytes leftover after parsing attributes in process `syz.9.3421'. [ 1106.021866][T17188] netlink: 39 bytes leftover after parsing attributes in process `syz.9.3421'. [ 1106.037026][T17191] Bluetooth: hci0: Opcode 0x0c20 failed: -112 [ 1106.140511][ T9803] usb 1-1: Using ep0 maxpacket: 32 [ 1106.147578][ T9803] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1106.236237][ T9803] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1106.246963][ T9803] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.255563][ T9803] usb 1-1: Product: syz [ 1106.259970][ T9803] usb 1-1: Manufacturer: syz [ 1106.270164][ T9803] usb 1-1: SerialNumber: syz [ 1106.291861][ T9803] usb 1-1: config 0 descriptor?? [ 1106.305966][T17209] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3427'. [ 1106.330801][ T9803] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1106.360725][T17216] input: syz0 as /devices/virtual/input/input52 [ 1106.839419][T17193] netlink: 11 bytes leftover after parsing attributes in process `syz.0.3422'. [ 1106.874892][ T5845] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 1106.881898][ T6894] usb 1-1: Failed to submit usb control message: -71 [ 1106.889051][ T6894] usb 1-1: unable to send the bmi data to the device: -71 [ 1106.898269][ T6894] usb 1-1: unable to get target info from device [ 1106.904956][ T6894] usb 1-1: could not get target info (-71) [ 1106.911188][ T6894] usb 1-1: could not probe fw (-71) [ 1107.302069][ T9803] usb 1-1: USB disconnect, device number 29 [ 1107.584833][ T5845] Bluetooth: hci0: command 0x040f tx timeout [ 1107.620686][ T5844] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1107.728010][T17227] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3435'. [ 1109.311236][T17248] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1109.530075][T17257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3444'. [ 1109.674794][ T5844] Bluetooth: hci0: command 0x040f tx timeout [ 1110.217864][ T5893] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1110.837380][T17277] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3448'. [ 1110.850450][ T5893] usb 8-1: Using ep0 maxpacket: 32 [ 1110.866574][ T5893] usb 8-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1110.912043][ T5893] usb 8-1: config 1 interface 0 has no altsetting 0 [ 1110.945828][ T5893] usb 8-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 1110.975605][ T5893] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.022481][ T5893] usb 8-1: Product: syz [ 1111.045538][ T5893] usb 8-1: Manufacturer: syz [ 1111.100777][T11931] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1111.110377][ T5893] usb 8-1: SerialNumber: syz [ 1111.122110][T17279] netlink: 'syz.0.3449': attribute type 4 has an invalid length. [ 1111.406047][T11931] usb 9-1: Using ep0 maxpacket: 32 [ 1111.431688][T11931] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1111.446777][T11931] usb 9-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1111.471488][T11931] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.511382][T11931] usb 9-1: Product: syz [ 1111.525864][T11931] usb 9-1: Manufacturer: syz [ 1111.546060][T11931] usb 9-1: SerialNumber: syz [ 1111.614310][T11931] usb 9-1: config 0 descriptor?? [ 1111.903504][ T5844] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1112.127184][ T5844] Bluetooth: hci2: Injecting HCI hardware error event [ 1112.137152][ T5845] Bluetooth: hci2: hardware error 0x00 [ 1112.145305][T17271] netlink: 11 bytes leftover after parsing attributes in process `syz.8.3443'. [ 1112.481547][T17296] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1112.547322][T11931] usb 9-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1112.569290][ T1896] usb 9-1: Failed to submit usb control message: -71 [ 1112.580481][ T1896] usb 9-1: unable to send the bmi data to the device: -71 [ 1112.587730][ T1896] usb 9-1: unable to get target info from device [ 1112.595186][ T1896] usb 9-1: could not get target info (-71) [ 1112.638811][ T5893] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/input/input53 [ 1112.649142][ T5186] bcm5974 8-1:1.0: could not read from device [ 1112.770346][ T1896] usb 9-1: could not probe fw (-71) [ 1112.861504][T11931] usb 9-1: USB disconnect, device number 19 [ 1113.034859][T17309] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3457'. [ 1113.087323][ T5893] usb 8-1: USB disconnect, device number 18 [ 1115.616043][ T5845] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1115.623264][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.629798][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.986645][ T5845] Bluetooth: hci4: unexpected event for opcode 0x0036 [ 1117.411203][T11931] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1117.446659][T17370] vlan2: entered promiscuous mode [ 1117.452079][T17370] vlan2: entered allmulticast mode [ 1117.458162][T17370] vlan0: entered allmulticast mode [ 1117.463743][T17370] veth0_vlan: entered allmulticast mode [ 1117.469388][T17370] vlan0: entered promiscuous mode [ 1117.485614][T17370] team0: Port device vlan2 added [ 1117.579092][T11931] usb 10-1: Using ep0 maxpacket: 32 [ 1117.594762][T11931] usb 10-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1117.634184][T11931] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1117.657637][T11931] usb 10-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 1118.694615][T11931] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.702987][T11931] usb 10-1: Product: syz [ 1118.707491][T11931] usb 10-1: Manufacturer: syz [ 1118.712592][T11931] usb 10-1: SerialNumber: syz [ 1119.035380][T17343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1119.049280][T17343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1120.195755][T11931] input: bcm5974 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/input/input54 [ 1120.232268][ T5186] bcm5974 10-1:1.0: could not read from device [ 1120.258136][T11931] usb 10-1: USB disconnect, device number 22 [ 1120.265530][ T5186] bcm5974 10-1:1.0: could not read from device [ 1121.630822][ T5845] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1121.640386][ T5845] Bluetooth: hci4: Injecting HCI hardware error event [ 1121.646649][T17412] vlan2: entered promiscuous mode [ 1121.650587][ T5845] Bluetooth: hci4: hardware error 0x00 [ 1121.678248][T17412] vlan2: entered allmulticast mode [ 1121.824253][T17412] vlan0: entered allmulticast mode [ 1121.851338][T17412] veth0_vlan: entered allmulticast mode [ 1121.869726][T17412] vlan0: entered promiscuous mode [ 1121.929796][T17427] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3494'. [ 1122.020870][T17412] team0: Port device vlan2 added [ 1122.691249][ T5889] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1123.755073][ T5845] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1123.790848][T17459] batadv_slave_1: entered promiscuous mode [ 1123.800487][ T1909] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1123.830713][ T5889] usb 1-1: Using ep0 maxpacket: 32 [ 1123.832238][T17459] batadv_slave_1: left promiscuous mode [ 1123.838020][ T5889] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1123.875942][ T5889] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1123.893022][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.909560][ T5889] usb 1-1: Product: syz [ 1123.919637][ T5889] usb 1-1: Manufacturer: syz [ 1123.930391][ T5889] usb 1-1: SerialNumber: syz [ 1123.942600][ T5889] usb 1-1: config 0 descriptor?? [ 1124.095616][ T5889] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1124.193330][T17437] netlink: 11 bytes leftover after parsing attributes in process `syz.0.3499'. [ 1124.206207][ T6141] usb 1-1: Failed to submit usb control message: -71 [ 1124.207371][ T1909] usb 10-1: Using ep0 maxpacket: 32 [ 1124.216852][ T5889] usb 1-1: USB disconnect, device number 30 [ 1124.221997][ T1909] usb 10-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1124.230497][ T6141] usb 1-1: unable to send the bmi data to the device: -71 [ 1124.240989][ T1909] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1124.256820][ T1909] usb 10-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 1124.261765][T17470] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3510'. [ 1124.276919][ T6141] usb 1-1: unable to get target info from device [ 1124.296416][ T6141] usb 1-1: could not get target info (-71) [ 1124.323746][ T6141] usb 1-1: could not probe fw (-71) [ 1124.615801][ T1909] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1124.662093][ T1909] usb 10-1: Product: syz [ 1124.678523][ T1909] usb 10-1: Manufacturer: syz [ 1124.710135][ T1909] usb 10-1: SerialNumber: syz [ 1125.499838][ T1909] input: bcm5974 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/input/input55 [ 1125.519084][ T5186] bcm5974 10-1:1.0: could not read from device [ 1125.551699][ T1909] usb 10-1: USB disconnect, device number 23 [ 1125.568459][ T5186] bcm5974 10-1:1.0: could not read from device [ 1125.613276][T17485] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3516'. [ 1126.595477][T17485] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3516'. [ 1126.686388][T17492] bond2: entered allmulticast mode [ 1128.446674][T17523] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3526'. [ 1128.978113][ T5893] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1129.122265][T17540] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3531'. [ 1129.181936][ T5893] usb 4-1: Using ep0 maxpacket: 32 [ 1129.189002][ T5893] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1129.214234][ T5893] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1129.230228][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.249175][ T5893] usb 4-1: Product: syz [ 1129.355734][ T5893] usb 4-1: Manufacturer: syz [ 1129.360595][ T5893] usb 4-1: SerialNumber: syz [ 1129.368896][T17540] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.381861][ T5893] usb 4-1: config 0 descriptor?? [ 1129.401641][ T5893] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1130.278423][ T9803] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1130.298162][T17554] vlan2: entered promiscuous mode [ 1130.303845][T17554] vlan2: entered allmulticast mode [ 1130.309984][T17554] vlan0: entered allmulticast mode [ 1130.315989][T17554] veth0_vlan: entered allmulticast mode [ 1130.321997][T17554] vlan0: entered promiscuous mode [ 1130.332159][T17554] team0: Port device vlan2 added [ 1130.351702][T17520] netlink: 11 bytes leftover after parsing attributes in process `syz.3.3525'. [ 1130.370739][ T1087] usb 4-1: Failed to submit usb control message: -71 [ 1130.378136][ T1087] usb 4-1: unable to send the bmi data to the device: -71 [ 1130.385566][ T1087] usb 4-1: unable to get target info from device [ 1130.392101][ T1087] usb 4-1: could not get target info (-71) [ 1130.397976][ T1087] usb 4-1: could not probe fw (-71) [ 1130.401776][T17558] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3535'. [ 1130.405287][ T1909] usb 4-1: USB disconnect, device number 21 [ 1130.512387][T17540] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1130.547361][T17564] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3535'. [ 1130.565432][ T9803] usb 9-1: Using ep0 maxpacket: 32 [ 1130.587273][ T9803] usb 9-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1130.600207][ T9803] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1130.612503][ T9803] usb 9-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 1130.621884][ T9803] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.629961][ T9803] usb 9-1: Product: syz [ 1130.634070][T17560] bond3: entered allmulticast mode [ 1130.634978][ T9803] usb 9-1: Manufacturer: syz [ 1130.644115][ T9803] usb 9-1: SerialNumber: syz [ 1130.743343][T17540] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1130.862382][T17538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1130.881104][T17538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1130.955927][T17540] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.245704][T17540] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.312318][T17540] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.456835][T17540] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.552682][T17540] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.703673][ T9803] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/input/input56 [ 1133.087673][ T9803] usb 9-1: USB disconnect, device number 20 [ 1133.594725][ T5979] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1133.900640][ T5979] usb 1-1: Using ep0 maxpacket: 32 [ 1133.909722][ T5979] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1134.601598][ T5979] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1134.620397][ T5979] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.628527][ T5979] usb 1-1: Product: syz [ 1134.633533][ T5979] usb 1-1: Manufacturer: syz [ 1134.638252][ T5979] usb 1-1: SerialNumber: syz [ 1134.646274][ T5979] usb 1-1: config 0 descriptor?? [ 1134.672674][ T5979] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1134.720491][T17623] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1135.477043][T17639] netlink: 11 bytes leftover after parsing attributes in process `syz.0.3552'. [ 1136.237487][T14094] usb 1-1: Failed to submit usb control message: -110 [ 1136.255975][T14094] usb 1-1: unable to send the bmi data to the device: -110 [ 1136.280807][T14094] usb 1-1: unable to get target info from device [ 1136.298020][T14094] usb 1-1: could not get target info (-110) [ 1136.310465][T14094] usb 1-1: could not probe fw (-110) [ 1137.255239][ T5845] Bluetooth: hci0: command 0x040f tx timeout [ 1137.280537][ T9] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1137.451236][T17649] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1137.590891][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 1137.623979][ T9] usb 7-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1137.667494][ T9] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1137.689435][ T9] usb 7-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 1137.709607][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1137.761634][ T9] usb 7-1: Product: syz [ 1137.765855][ T9] usb 7-1: Manufacturer: syz [ 1137.790686][ T9] usb 7-1: SerialNumber: syz [ 1138.037809][T17640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1138.047328][T17640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1138.569862][ T5979] usb 1-1: USB disconnect, device number 31 [ 1138.814758][T17688] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3579'. [ 1140.223475][ T9] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input57 [ 1140.315642][ T5186] bcm5974 7-1:1.0: could not read from device [ 1140.362681][ T5186] bcm5974 7-1:1.0: could not read from device [ 1140.374015][ T5186] bcm5974 7-1:1.0: could not read from device [ 1140.375410][ T9] usb 7-1: USB disconnect, device number 17 [ 1140.414044][ T5186] bcm5974 7-1:1.0: could not read from device [ 1140.813616][T17714] batadv0: entered promiscuous mode [ 1140.819258][T17714] macsec1: entered promiscuous mode [ 1140.867158][T17714] macsec1: entered allmulticast mode [ 1140.873932][T17714] batadv0: entered allmulticast mode [ 1141.251209][ T5979] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1141.450812][ T5979] usb 1-1: Using ep0 maxpacket: 32 [ 1141.490421][ T5979] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1141.603385][ T5979] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1141.613078][ T5979] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.621367][ T5979] usb 1-1: Product: syz [ 1141.625571][ T5979] usb 1-1: Manufacturer: syz [ 1141.630411][ T5979] usb 1-1: SerialNumber: syz [ 1141.651269][ T5979] usb 1-1: config 0 descriptor?? [ 1141.750833][T17730] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 1141.813896][ T5979] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1142.460873][T17758] xt_hashlimit: invalid interval [ 1142.515011][T17756] netlink: 11 bytes leftover after parsing attributes in process `syz.0.3589'. [ 1142.697721][ T1909] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1142.861397][T14094] usb 1-1: Failed to submit usb control message: -110 [ 1142.868839][T14094] usb 1-1: unable to send the bmi data to the device: -110 [ 1142.876694][ T1909] usb 10-1: Using ep0 maxpacket: 32 [ 1142.892981][ T1909] usb 10-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1142.917091][T14094] usb 1-1: unable to get target info from device [ 1142.956538][T14094] usb 1-1: could not get target info (-110) [ 1142.964986][ T1909] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1142.983224][T14094] usb 1-1: could not probe fw (-110) [ 1143.003015][ T1909] usb 10-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 1143.029818][ T1909] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.099818][ T1909] usb 10-1: Product: syz [ 1143.134239][ T1909] usb 10-1: Manufacturer: syz [ 1143.138976][ T1909] usb 10-1: SerialNumber: syz [ 1143.386212][T17740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1143.429274][T17740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1144.894517][ T1909] input: bcm5974 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/input/input58 [ 1144.946417][ T5186] bcm5974 10-1:1.0: could not read from device [ 1144.952543][ T1909] usb 10-1: USB disconnect, device number 24 [ 1144.977353][T17790] vlan2: entered promiscuous mode [ 1145.000330][T17790] vlan2: entered allmulticast mode [ 1145.006359][T17790] vlan0: entered allmulticast mode [ 1145.067334][T17790] veth0_vlan: entered allmulticast mode [ 1145.243949][T17790] vlan0: entered promiscuous mode [ 1145.258826][T17790] team0: Port device vlan2 added [ 1147.212722][ T9803] usb 1-1: USB disconnect, device number 32 [ 1148.130697][T17842] sctp: [Deprecated]: syz.8.3631 (pid 17842) Use of int in max_burst socket option. [ 1148.130697][T17842] Use struct sctp_assoc_value instead [ 1148.146721][T17842] tipc: Failed to remove unknown binding: 66,1,1/0:3803898463/3803898465 [ 1149.149835][T17847] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1149.770360][ T5979] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1149.943310][ T5979] usb 7-1: Using ep0 maxpacket: 32 [ 1149.958737][ T5979] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1150.106241][ T5979] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1150.180940][ T5979] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1150.217106][ T5979] usb 7-1: Product: syz [ 1150.278500][ T5979] usb 7-1: Manufacturer: syz [ 1150.283551][ T5979] usb 7-1: SerialNumber: syz [ 1150.316680][ T5979] usb 7-1: config 0 descriptor?? [ 1150.853299][ T5845] Bluetooth: hci0: command 0x040f tx timeout [ 1151.817608][ T5979] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1151.853852][T17894] netlink: 11 bytes leftover after parsing attributes in process `syz.6.3635'. [ 1152.613906][T17893] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1152.862938][ T1087] usb 7-1: Failed to submit usb control message: -110 [ 1152.870081][ T1087] usb 7-1: unable to send the bmi data to the device: -110 [ 1152.879488][ T1087] usb 7-1: unable to get target info from device [ 1152.886329][ T1087] usb 7-1: could not get target info (-110) [ 1152.898654][ T1087] usb 7-1: could not probe fw (-110) [ 1153.165597][T17915] netlink: 'syz.0.3658': attribute type 4 has an invalid length. [ 1153.288158][T17919] netlink: zone id is out of range [ 1153.293499][T17919] netlink: zone id is out of range [ 1153.298889][T17919] netlink: zone id is out of range [ 1153.304346][T17919] netlink: zone id is out of range [ 1153.309578][T17919] netlink: zone id is out of range [ 1153.320474][T17919] netlink: zone id is out of range [ 1153.325608][T17919] netlink: zone id is out of range [ 1153.330986][T17919] netlink: zone id is out of range [ 1153.336112][T17919] netlink: zone id is out of range [ 1153.341676][T17919] netlink: zone id is out of range [ 1154.443651][ T5845] Bluetooth: hci0: command 0x040f tx timeout [ 1154.846659][ T1909] usb 7-1: USB disconnect, device number 18 [ 1154.907968][T17932] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1156.804908][T17977] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1157.806530][T18005] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1159.295541][T18039] Invalid logical block size (524288) [ 1159.537552][T18031] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1160.981098][T18070] net_ratelimit: 6 callbacks suppressed [ 1160.981116][T18070] netlink: zone id is out of range [ 1160.993332][T18070] netlink: zone id is out of range [ 1160.998608][T18070] netlink: zone id is out of range [ 1161.005735][T18070] netlink: zone id is out of range [ 1161.011030][T18070] netlink: zone id is out of range [ 1161.016342][T18070] netlink: zone id is out of range [ 1161.021768][T18070] netlink: zone id is out of range [ 1161.027976][T18070] netlink: zone id is out of range [ 1161.033783][T18070] netlink: zone id is out of range [ 1161.039381][T18070] netlink: zone id is out of range [ 1161.090709][T18066] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1162.001308][ T29] audit: type=1800 audit(2000000831.319:148): pid=18083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3722" name="bus" dev="overlay" ino=1776 res=0 errno=0 [ 1162.242066][T18076] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1162.506269][T18085] Invalid logical block size (524288) [ 1163.316334][T18101] gre0: entered promiscuous mode [ 1164.111021][ T5845] Bluetooth: hci0: command 0x040f tx timeout [ 1164.709142][T18119] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1165.394561][ T29] audit: type=1800 audit(2000000834.769:149): pid=18141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3741" name="bus" dev="overlay" ino=1806 res=0 errno=0 [ 1166.866040][ T5845] Bluetooth: hci0: command 0x040f tx timeout [ 1167.192798][T18163] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1168.142626][T18168] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1168.914663][T18182] team0 (unregistering): Port device team_slave_0 removed [ 1169.085716][T18182] team0 (unregistering): Port device team_slave_1 removed [ 1169.269380][T18182] vlan0: left allmulticast mode [ 1169.276451][T18182] veth0_vlan: left allmulticast mode [ 1169.289488][T18182] vlan0: left promiscuous mode [ 1169.305435][T18182] team0 (unregistering): Port device vlan2 removed [ 1169.389639][T18189] vlan2: entered promiscuous mode [ 1169.395327][T18189] vlan2: entered allmulticast mode [ 1169.415313][T18189] vlan0: entered allmulticast mode [ 1169.447335][T18189] vlan0: entered promiscuous mode [ 1169.459757][T18189] team0: Port device vlan2 added [ 1169.815742][T18213] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1169.908972][T18212] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1169.971364][T18224] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3778'. [ 1170.302822][T18244] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3789'. [ 1170.733947][T18254] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3791'. [ 1171.086322][T18257] vlan2: entered promiscuous mode [ 1171.099833][T18257] vlan2: entered allmulticast mode [ 1171.131545][T18257] vlan0: entered allmulticast mode [ 1171.313999][T18257] veth0_vlan: entered allmulticast mode [ 1171.329316][T18257] vlan0: entered promiscuous mode [ 1171.356568][T18257] team0: Port device vlan2 added [ 1171.663849][ T5845] Bluetooth: hci0: command 0x040f tx timeout [ 1172.117027][T18287] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1172.293040][T18275] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1174.355796][ T5844] Bluetooth: hci0: command 0x040f tx timeout [ 1174.768458][T18320] netlink: 'syz.9.3811': attribute type 1 has an invalid length. [ 1175.198286][T18331] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3819'. [ 1176.007538][T18336] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1176.784900][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.791501][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.301038][ T5979] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1177.450396][ T5979] usb 8-1: Using ep0 maxpacket: 32 [ 1177.613937][ T5979] usb 8-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1177.921325][T18380] pimreg: entered allmulticast mode [ 1177.953013][ T5845] Bluetooth: hci0: command 0x040f tx timeout [ 1178.346250][ T5979] usb 8-1: config 1 interface 0 has no altsetting 0 [ 1178.780909][ T5979] usb 8-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 1178.790007][ T5979] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.820619][ T5979] usb 8-1: Product: syz [ 1178.824832][ T5979] usb 8-1: Manufacturer: syz [ 1178.829442][ T5979] usb 8-1: SerialNumber: syz [ 1179.312036][T18359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1179.338037][T18359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1179.429965][T18447] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3843'. [ 1179.848420][T18460] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1179.930820][T18460] netlink: 'syz.6.3846': attribute type 2 has an invalid length. [ 1180.011284][T18460] netlink: 'syz.6.3846': attribute type 8 has an invalid length. [ 1180.074014][T18469] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3849'. [ 1180.102092][T18460] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3846'. [ 1180.124928][T18469] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3849'. [ 1180.573693][ T5979] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/input/input59 [ 1180.590901][ T5186] bcm5974 8-1:1.0: could not read from device [ 1180.639283][ T5979] usb 8-1: USB disconnect, device number 19 [ 1180.648861][ T5186] bcm5974 8-1:1.0: could not read from device [ 1180.787308][T18483] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3855'. [ 1181.516472][T18500] netlink: 96 bytes leftover after parsing attributes in process `syz.8.3862'. [ 1183.360405][ T5979] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1183.540425][ T5979] usb 4-1: Using ep0 maxpacket: 32 [ 1183.559656][ T5979] usb 4-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1183.607755][ T5979] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1183.624162][ T5979] usb 4-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 1183.635486][ T5979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1183.648219][ T5979] usb 4-1: Product: syz [ 1183.665713][ T5979] usb 4-1: Manufacturer: syz [ 1183.683145][ T5979] usb 4-1: SerialNumber: syz [ 1185.671019][T18516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1185.679608][T18516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1185.820718][ T5979] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input60 [ 1185.822842][T18550] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3878'. [ 1185.833354][ T5979] usb 4-1: USB disconnect, device number 22 [ 1185.839980][ T5186] bcm5974 4-1:1.0: could not read from device [ 1186.108856][T18553] bond3: entered allmulticast mode [ 1186.196110][T18556] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3882'. [ 1186.247292][T18553] bond3 (unregistering): Released all slaves [ 1186.275819][T18561] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1186.431152][T18561] netlink: 'syz.7.3881': attribute type 2 has an invalid length. [ 1186.506229][T18561] netlink: 'syz.7.3881': attribute type 8 has an invalid length. [ 1186.529991][T18561] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3881'. [ 1188.111854][T18602] bond3: entered allmulticast mode [ 1188.148825][T18602] bond3 (unregistering): Released all slaves [ 1188.201761][T18599] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3900'. [ 1190.043580][T18621] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1191.611744][T18657] bond4: entered allmulticast mode [ 1191.619492][T18657] bond4 (unregistering): Released all slaves [ 1191.652567][T18661] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3920'. [ 1191.681135][T18663] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3921'. [ 1192.376400][ T5845] Bluetooth: hci0: command 0x040f tx timeout [ 1193.351165][T18681] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1193.952481][T18691] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3929'. [ 1194.291376][T18703] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3936'. [ 1194.381930][T18712] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3938'. [ 1194.392204][T18709] bond3: entered allmulticast mode [ 1194.459191][T18709] bond3 (unregistering): Released all slaves [ 1195.554802][ T5844] Bluetooth: hci0: command 0x040f tx timeout [ 1196.611633][T18725] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1196.700300][ C1] hrtimer: interrupt took 90710 ns [ 1198.146554][T18741] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3949'. [ 1198.170482][T18746] tipc: Enabling of bearer rejected, failed to enable media [ 1199.219840][ T5844] Bluetooth: hci0: command 0x040f tx timeout [ 1199.951790][ T9] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1200.070732][T18792] netlink: 11 bytes leftover after parsing attributes in process `syz.0.3963'. [ 1200.745586][ T9] usb 10-1: Using ep0 maxpacket: 32 [ 1200.772194][ T9] usb 10-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1200.822345][ T9] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1200.842650][T18797] net_ratelimit: 6 callbacks suppressed [ 1200.842670][T18797] netlink: zone id is out of range [ 1200.880903][ T9] usb 10-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 1200.920659][T18797] netlink: zone id is out of range [ 1200.922781][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.927280][T18797] netlink: zone id is out of range [ 1200.957977][ T9] usb 10-1: Product: syz [ 1200.970933][T18797] netlink: del zone limit has 4 unknown bytes [ 1200.972449][ T9] usb 10-1: Manufacturer: syz [ 1200.990430][ T9] usb 10-1: SerialNumber: syz [ 1201.160370][T18806] netlink: 256 bytes leftover after parsing attributes in process `syz.7.3973'. [ 1201.498142][T18785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1201.507885][T18785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1203.824326][ T9] input: bcm5974 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/input/input61 [ 1204.029728][ T5186] bcm5974 10-1:1.0: could not read from device [ 1204.069295][ T9] usb 10-1: USB disconnect, device number 25 [ 1204.087338][ T5186] bcm5974 10-1:1.0: could not read from device [ 1204.540148][T18844] netlink: 11 bytes leftover after parsing attributes in process `syz.9.3980'. [ 1209.026113][T18863] netlink: 256 bytes leftover after parsing attributes in process `syz.9.3991'. [ 1210.540803][ T5979] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1211.620646][ T5979] usb 1-1: Using ep0 maxpacket: 32 [ 1211.634225][ T5979] usb 1-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1211.651006][ T5979] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1211.664251][ T5979] usb 1-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 1211.675273][ T5979] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1211.842203][T18900] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1211.967007][ T5979] usb 1-1: Product: syz [ 1211.972805][ T5979] usb 1-1: Manufacturer: syz [ 1211.978579][ T5979] usb 1-1: SerialNumber: syz [ 1212.407252][T18878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1212.417408][T18911] netlink: 256 bytes leftover after parsing attributes in process `syz.9.4008'. [ 1213.437848][T18878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1213.832294][T18914] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1215.984572][ T5979] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input62 [ 1215.997830][ T5186] bcm5974 1-1:1.0: could not read from device [ 1216.012428][ T5979] usb 1-1: USB disconnect, device number 33 [ 1216.111362][ T5845] Bluetooth: hci0: command 0x040f tx timeout [ 1216.635476][T18965] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4027'. [ 1217.712226][T18969] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1218.210502][ T9] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1218.617747][ T9] usb 10-1: Using ep0 maxpacket: 32 [ 1218.634420][ T9] usb 10-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1218.648282][ T9] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1218.662952][ T9] usb 10-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 1218.680369][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1218.699476][ T9] usb 10-1: Product: syz [ 1218.710836][ T9] usb 10-1: Manufacturer: syz [ 1218.828117][ T9] usb 10-1: SerialNumber: syz [ 1219.341554][T18975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1219.373481][T18975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1219.820539][ T5844] Bluetooth: hci0: command 0x040f tx timeout [ 1221.212948][T19014] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1221.314802][ T9] input: bcm5974 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/input/input63 [ 1221.494529][ T9] usb 10-1: USB disconnect, device number 26 [ 1221.921155][T19021] gre0: entered promiscuous mode [ 1221.952277][T19021] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4050'. [ 1222.372200][T19026] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1224.141199][ T5844] Bluetooth: hci0: command 0x040f tx timeout [ 1225.083500][T19066] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1225.267233][T19078] gre0: entered promiscuous mode [ 1225.318255][T19078] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4067'. [ 1225.511255][T19083] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4068'. [ 1226.535905][T19091] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1227.739354][T19120] gre0: entered promiscuous mode [ 1227.803582][T19120] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4085'. [ 1227.829595][T19122] netlink: 'syz.0.4081': attribute type 1 has an invalid length. [ 1227.948940][T19122] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1227.957674][T19122] IPv6: NLM_F_CREATE should be set when creating new route [ 1228.008795][T19123] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1228.251242][ T5844] Bluetooth: hci0: command 0x040f tx timeout [ 1235.732283][T19261] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1235.863931][T19267] netlink: 96 bytes leftover after parsing attributes in process `syz.6.4141'. [ 1235.925187][T19269] bond4: entered allmulticast mode [ 1235.988122][T19269] bond4 (unregistering): Released all slaves [ 1235.995767][T19274] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4140'. [ 1236.190433][T11931] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1236.340626][T11931] usb 10-1: Using ep0 maxpacket: 32 [ 1236.358129][T11931] usb 10-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1236.403146][T11931] usb 10-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1236.431245][T11931] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.470070][T11931] usb 10-1: Product: syz [ 1236.480168][T11931] usb 10-1: Manufacturer: syz [ 1236.505462][T11931] usb 10-1: SerialNumber: syz [ 1236.531717][T11931] usb 10-1: config 0 descriptor?? [ 1236.565559][T11931] usb 10-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1237.588936][ T6141] usb 10-1: Failed to submit usb control message: -110 [ 1237.630155][ T6141] usb 10-1: unable to send the bmi data to the device: -110 [ 1237.637600][ T6141] usb 10-1: unable to get target info from device [ 1237.690552][ T6141] usb 10-1: could not get target info (-110) [ 1237.702721][ T6141] usb 10-1: could not probe fw (-110) [ 1237.840502][ T5844] Bluetooth: hci0: command 0x040f tx timeout [ 1238.084890][T19307] netlink: 11 bytes leftover after parsing attributes in process `syz.9.4143'. [ 1238.271249][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.278669][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.521132][T19321] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1240.919702][T16745] usb 10-1: USB disconnect, device number 27 [ 1241.112236][T19326] bond1: entered allmulticast mode [ 1241.220968][T19328] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4160'. [ 1241.379008][T19326] bond1 (unregistering): Released all slaves [ 1243.149864][ T5845] Bluetooth: hci0: command 0x040f tx timeout [ 1243.426375][T19354] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1244.276632][T19375] bond3: entered allmulticast mode [ 1244.356845][T19380] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4178'. [ 1244.428447][T19375] bond3 (unregistering): Released all slaves [ 1244.572534][T19382] gre0: entered promiscuous mode [ 1245.661884][ T5845] Bluetooth: hci0: command 0x040f tx timeout [ 1246.145028][T19400] netlink: 'syz.3.4186': attribute type 12 has an invalid length. [ 1246.756829][T19418] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4194'. [ 1246.887550][T19425] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4194'. [ 1246.970104][T19423] bond1: entered allmulticast mode [ 1247.025247][T19423] bond1 (unregistering): Released all slaves [ 1247.068298][T19427] ieee802154 phy0 wpan0: encryption failed: -90 [ 1247.097421][T19427] xt_TCPMSS: Only works on TCP SYN packets [ 1247.128254][T19427] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4196'. [ 1248.611375][T19436] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1250.651151][ T5845] Bluetooth: hci0: command 0x040f tx timeout [ 1253.574766][T19496] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1254.040878][T19500] IPVS: persistence engine module ip_vs_pe_ not found [ 1255.609003][T19550] Cannot find add_set index 0 as target [ 1255.616598][ T5845] Bluetooth: hci0: command 0x040f tx timeout [ 1255.979499][T19554] pimreg: entered allmulticast mode [ 1256.251411][T19543] pimreg: left allmulticast mode [ 1256.420855][T19558] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4241'. [ 1257.021759][ T6141] bridge0: port 2(bridge_slave_1) entered disabled state [ 1258.007849][T19597] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4257'. [ 1259.643985][T19613] pimreg: entered allmulticast mode [ 1259.783303][T19606] pimreg: left allmulticast mode [ 1259.905466][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1259.956949][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1259.979996][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1260.019201][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1260.041749][ T5836] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1260.055075][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1260.745015][T19629] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4265'. [ 1261.070663][T19641] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4270'. [ 1261.306985][T19615] chnl_net:caif_netlink_parms(): no params data found [ 1261.536326][T19651] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4273'. [ 1261.730142][T19615] bridge0: port 1(bridge_slave_0) entered blocking state [ 1261.752567][T19615] bridge0: port 1(bridge_slave_0) entered disabled state [ 1261.777907][T19615] bridge_slave_0: entered allmulticast mode [ 1261.802353][T19615] bridge_slave_0: entered promiscuous mode [ 1261.812444][T19658] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4275'. [ 1261.840428][T19615] bridge0: port 2(bridge_slave_1) entered blocking state [ 1261.870417][T19615] bridge0: port 2(bridge_slave_1) entered disabled state [ 1261.898141][T19615] bridge_slave_1: entered allmulticast mode [ 1261.931825][T19615] bridge_slave_1: entered promiscuous mode [ 1262.181119][ T5845] Bluetooth: hci1: command tx timeout [ 1262.534945][T19615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1262.630007][T19615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1262.951372][T19615] team0: Port device team_slave_0 added [ 1262.958706][T19686] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4283'. [ 1263.004899][ T3429] bridge0: port 2(bridge_slave_1) entered disabled state [ 1263.038233][T19687] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4284'. [ 1263.073978][T19615] team0: Port device team_slave_1 added [ 1263.123002][T19686] bond0: entered promiscuous mode [ 1263.161471][T19686] bond_slave_0: entered promiscuous mode [ 1263.198402][T19686] bond_slave_1: entered promiscuous mode [ 1263.226883][T19686] mac80211_hwsim hwsim31 wlan1: entered promiscuous mode [ 1263.280971][T19686] team0: entered promiscuous mode [ 1263.319940][T19686] team_slave_0: entered promiscuous mode [ 1263.363453][T19686] team_slave_1: entered promiscuous mode [ 1263.434581][T19686] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1263.491880][T19700] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4290'. [ 1263.531442][T19686] bond0: left promiscuous mode [ 1263.537714][T19686] bond_slave_0: left promiscuous mode [ 1263.561651][T19686] bond_slave_1: left promiscuous mode [ 1263.576407][T19686] mac80211_hwsim hwsim31 wlan1: left promiscuous mode [ 1263.602043][T19686] team0: left promiscuous mode [ 1263.607143][T19686] team_slave_0: left promiscuous mode [ 1263.628834][T19686] team_slave_1: left promiscuous mode [ 1263.943791][T19615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1263.969473][T19615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1264.024381][T19615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1264.077144][T19615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1264.100547][T19615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1264.190633][T19615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1264.220835][ T5845] Bluetooth: hci1: command tx timeout [ 1264.236561][ T1909] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1264.459365][T19615] hsr_slave_0: entered promiscuous mode [ 1264.527890][T19615] hsr_slave_1: entered promiscuous mode [ 1264.560931][T19615] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1264.578414][T19615] Cannot create hsr debugfs directory [ 1264.591143][ T1909] usb 4-1: Using ep0 maxpacket: 32 [ 1264.598672][ T1909] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1264.616369][ T1909] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1264.649153][ T1909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1264.683576][ T1909] usb 4-1: Product: syz [ 1264.705156][ T1909] usb 4-1: Manufacturer: syz [ 1264.723948][ T1909] usb 4-1: SerialNumber: syz [ 1264.746117][ T1909] usb 4-1: config 0 descriptor?? [ 1264.826661][ T1909] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1265.022347][T19731] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4298'. [ 1265.063124][T19732] netlink: 'syz.8.4299': attribute type 12 has an invalid length. [ 1265.110025][T19615] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1265.295540][T19615] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1265.423437][T19615] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1265.599242][T19615] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1265.900687][ T6358] usb 4-1: Failed to submit usb control message: -110 [ 1265.932905][ T6358] usb 4-1: unable to send the bmi data to the device: -110 [ 1265.980552][ T6358] usb 4-1: unable to get target info from device [ 1265.997010][ T6358] usb 4-1: could not get target info (-110) [ 1266.035473][ T6358] usb 4-1: could not probe fw (-110) [ 1266.088294][T19615] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1266.137886][T19615] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1266.180090][T19615] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1266.236934][T19615] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1266.936872][ T5845] Bluetooth: hci1: command tx timeout [ 1266.960894][T19753] netlink: 11 bytes leftover after parsing attributes in process `syz.3.4292'. [ 1267.061835][T19751] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1267.069185][T19751] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1267.076598][T19751] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1267.094508][T19751] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1267.312070][T19615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1267.377560][T19615] 8021q: adding VLAN 0 to HW filter on device team0 [ 1267.393865][ T6358] bridge0: port 1(bridge_slave_0) entered blocking state [ 1267.401136][ T6358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1267.466479][T19760] batadv0: entered promiscuous mode [ 1267.476086][T19760] macsec1: entered promiscuous mode [ 1267.483884][T19760] macsec1: entered allmulticast mode [ 1267.491747][T19760] batadv0: entered allmulticast mode [ 1267.536282][ T6358] bridge0: port 2(bridge_slave_1) entered blocking state [ 1267.543775][ T6358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1267.840817][T19765] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4310'. [ 1268.230774][T19770] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4312'. [ 1268.734608][T19615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1269.101976][ T5845] Bluetooth: hci1: command 0x0c1a tx timeout [ 1269.108203][ T5845] Bluetooth: hci0: command 0x040f tx timeout [ 1269.674021][T19794] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4318'. [ 1269.818968][T19799] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4318'. [ 1269.828884][T19796] bond3: entered allmulticast mode [ 1269.861548][ T9803] usb 4-1: USB disconnect, device number 23 [ 1270.228482][T19796] bond3 (unregistering): Released all slaves [ 1271.180734][ T5845] Bluetooth: hci1: command 0x0c1a tx timeout [ 1271.189916][T19813] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4323'. [ 1271.221398][T19807] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1271.228784][T19807] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1271.230926][T19615] veth0_vlan: entered promiscuous mode [ 1271.285470][T19615] veth1_vlan: entered promiscuous mode [ 1271.441876][T19615] veth0_macvtap: entered promiscuous mode [ 1271.479694][T19615] veth1_macvtap: entered promiscuous mode [ 1271.524714][T19817] netlink: 'syz.6.4324': attribute type 12 has an invalid length. [ 1271.530499][T19615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1271.556398][T19615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1271.583062][T19615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1271.596828][T19615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1271.614325][T19615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1271.627241][T19615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1271.648000][T19615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1271.661519][T19615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1271.674264][T19615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1271.687128][T19615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1271.699673][T19615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1271.712759][T19615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1271.724949][T19615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1271.737651][T19615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1271.750535][T19615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1271.763823][T19615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1271.776354][T19615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1271.789293][T19615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1271.822797][T19615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1271.843703][T19615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1271.856610][T19615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1271.869913][T19615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1271.885959][T19615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1271.942142][T19615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1272.013789][T19615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1272.046028][T19615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1272.066089][T19615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1272.078302][T19615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1272.091477][T19615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1272.121165][T19615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1272.138391][T19615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1272.151058][T19615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1272.163927][T19615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1272.177847][T19615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1272.201955][T19615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1272.215582][T19615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1272.228445][T19615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1272.240545][T19615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1272.255291][T19615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1272.267518][T19615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1272.280970][T19615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1272.293678][T19615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1272.322331][T19615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1272.334382][T19615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1272.347976][T19615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1272.367506][T19615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1272.419175][T19824] netlink: 'syz.7.4328': attribute type 1 has an invalid length. [ 1272.428721][T19824] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1272.437435][T19824] IPv6: NLM_F_CREATE should be set when creating new route [ 1272.504978][T19615] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.529907][T19615] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.564245][T19615] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.599349][T19615] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.932044][ T6895] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1272.972075][ T6895] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1273.148678][T14094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1273.182765][T14094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1273.221931][T19854] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4335'. [ 1273.331670][T19856] bond1: entered allmulticast mode [ 1273.349624][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 1273.356621][ T5845] Bluetooth: hci0: command 0x040f tx timeout [ 1273.453978][T19856] bond1 (unregistering): Released all slaves [ 1273.464278][T19860] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4335'. [ 1273.566210][T19859] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4336'. [ 1274.675318][T19873] netlink: 'syz.6.4342': attribute type 12 has an invalid length. [ 1274.894478][T19869] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1274.901922][T19869] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1275.216031][T19889] netlink: 'syz.9.4343': attribute type 13 has an invalid length. [ 1275.264826][T19889] netlink: 24859 bytes leftover after parsing attributes in process `syz.9.4343'. [ 1275.583145][T19892] syz.6.4345 (19892) used obsolete PPPIOCDETACH ioctl [ 1276.608682][T19908] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4351'. [ 1276.733703][T19910] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4352'. [ 1276.801358][T19914] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4352'. [ 1276.865853][T19910] bond1: entered allmulticast mode [ 1276.903306][T19910] bond1 (unregistering): Released all slaves [ 1276.941217][ T5845] Bluetooth: hci1: command 0x0c1a tx timeout [ 1276.956132][ T5845] Bluetooth: hci0: command 0x040f tx timeout [ 1278.319690][T19957] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4368'. [ 1278.364262][T19961] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4370'. [ 1279.179880][T19921] Bluetooth: hci1: command 0x0c1a tx timeout [ 1280.285182][T19977] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1280.293117][T19977] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1280.910248][T20009] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4386'. [ 1281.027732][T20012] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4387'. [ 1282.383485][ T5844] Bluetooth: hci1: command 0x0c1a tx timeout [ 1282.389601][T19921] Bluetooth: hci0: command 0x040f tx timeout [ 1283.391401][T20040] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1283.398971][T20040] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1283.849013][T20065] bond4: entered allmulticast mode [ 1283.942110][T20068] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4403'. [ 1284.009584][T20065] bond4 (unregistering): Released all slaves [ 1285.605478][ T5844] Bluetooth: hci1: command 0x0c1a tx timeout [ 1285.613982][ T5844] Bluetooth: hci0: command 0x040f tx timeout [ 1286.162441][T20104] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1286.169555][T20104] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1287.024491][T20134] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4423'. [ 1287.069964][T20132] bond1: entered allmulticast mode [ 1287.142626][T20132] bond1 (unregistering): Released all slaves [ 1287.517511][ T9] IPVS: starting estimator thread 0... [ 1287.671095][T20137] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1287.679057][T20142] IPVS: using max 19 ests per chain, 45600 per kthread [ 1288.221877][T19921] Bluetooth: hci1: command 0x0c1a tx timeout [ 1288.228476][ T5836] Bluetooth: hci0: command 0x040f tx timeout [ 1289.208273][T20169] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1289.215745][T20169] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1289.566740][T20182] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4439'. [ 1289.698512][T20175] bond1: entered allmulticast mode [ 1289.785688][ T5893] IPVS: starting estimator thread 0... [ 1289.821887][T20175] bond1 (unregistering): Released all slaves [ 1289.889564][T20189] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4444'. [ 1289.900937][T20191] IPVS: using max 19 ests per chain, 45600 per kthread [ 1289.938608][T20185] veth0_to_batadv: entered promiscuous mode [ 1291.092580][T14093] bridge0: port 2(bridge_slave_1) entered disabled state [ 1291.791978][T19921] Bluetooth: hci1: command 0x0c1a tx timeout [ 1291.799769][T19921] Bluetooth: hci0: command 0x040f tx timeout [ 1291.882858][T20221] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1291.890105][T20221] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1292.223217][T20229] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4459'. [ 1292.325942][T20234] bond1: entered allmulticast mode [ 1292.484609][T20234] bond1 (unregistering): Released all slaves [ 1292.919021][T20257] netlink: 'syz.3.4468': attribute type 12 has an invalid length. [ 1293.912460][T19921] Bluetooth: hci1: command 0x0c1a tx timeout [ 1293.918951][T19921] Bluetooth: hci0: command 0x040f tx timeout [ 1293.994824][T20289] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4481'. [ 1294.331895][T20288] bond1: entered allmulticast mode [ 1294.399781][T20288] bond1 (unregistering): Released all slaves [ 1296.890391][T20339] netlink: 256 bytes leftover after parsing attributes in process `syz.6.4501'. [ 1297.620908][T20346] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4503'. [ 1298.199303][T20345] bond4: entered allmulticast mode [ 1298.245787][T20345] bond4 (unregistering): Released all slaves [ 1298.275468][T20354] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4505'. [ 1299.669712][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.677895][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.477669][T20390] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1300.636703][T20390] netlink: 'syz.9.4516': attribute type 2 has an invalid length. [ 1300.689390][T20390] netlink: 'syz.9.4516': attribute type 8 has an invalid length. [ 1300.705580][T20390] netlink: 132 bytes leftover after parsing attributes in process `syz.9.4516'. [ 1300.769172][T20394] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4520'. [ 1302.364404][T20407] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4525'. [ 1302.468308][T20407] bond4: entered allmulticast mode [ 1302.475993][ T9] IPVS: starting estimator thread 0... [ 1302.551724][T20412] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4525'. [ 1302.611808][T20411] IPVS: using max 19 ests per chain, 45600 per kthread [ 1302.672574][T20407] bond4 (unregistering): Released all slaves [ 1302.853081][T20424] netlink: 'syz.6.4529': attribute type 39 has an invalid length. [ 1303.834838][T20440] netlink: 256 bytes leftover after parsing attributes in process `syz.6.4536'. [ 1305.701608][T20463] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4545'. [ 1305.803968][T20466] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4545'. [ 1305.883162][T20463] bond1: entered allmulticast mode [ 1306.651464][T20463] bond1 (unregistering): Released all slaves [ 1307.330792][T20487] netlink: 256 bytes leftover after parsing attributes in process `syz.6.4552'. [ 1308.384769][T20498] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4555'. [ 1308.492021][T20499] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1308.607578][T20499] netlink: 'syz.9.4554': attribute type 2 has an invalid length. [ 1308.815146][T20499] netlink: 'syz.9.4554': attribute type 8 has an invalid length. [ 1308.937532][T20499] netlink: 132 bytes leftover after parsing attributes in process `syz.9.4554'. [ 1309.106753][T20515] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4561'. [ 1309.164895][T20519] netlink: 'syz.6.4562': attribute type 12 has an invalid length. [ 1309.462263][T20524] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4564'. [ 1309.529068][T20527] netlink: 10 bytes leftover after parsing attributes in process `syz.7.4565'. [ 1309.969120][T20535] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4569'. [ 1310.093707][T20539] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4570'. [ 1311.000464][ T9803] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1311.430305][T20555] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4577'. [ 1311.484359][ T3429] bridge0: port 2(bridge_slave_1) entered disabled state [ 1311.890561][ T9803] usb 1-1: Using ep0 maxpacket: 32 [ 1312.333491][ T9803] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1312.356903][ T9803] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1312.367818][ T9803] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.389180][ T9803] usb 1-1: Product: syz [ 1312.402092][ T9803] usb 1-1: Manufacturer: syz [ 1312.418381][ T9803] usb 1-1: SerialNumber: syz [ 1312.436077][ T9803] usb 1-1: config 0 descriptor?? [ 1312.492407][ T9803] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1315.640470][T19921] Bluetooth: hci1: command 0x0c1a tx timeout [ 1316.840917][ T6358] usb 1-1: Failed to submit usb control message: -110 [ 1316.848376][ T6358] usb 1-1: unable to send the bmi data to the device: -110 [ 1316.870763][ T6358] usb 1-1: unable to get target info from device [ 1316.877122][ T6358] usb 1-1: could not get target info (-110) [ 1316.890233][ T6358] usb 1-1: could not probe fw (-110) [ 1317.112523][T16745] usb 1-1: USB disconnect, device number 34 [ 1317.181273][T20584] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4585'. [ 1317.367828][T20591] netlink: 11 bytes leftover after parsing attributes in process `syz.7.4587'. [ 1317.412988][T20590] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1317.702380][T20590] netlink: 'syz.0.4589': attribute type 2 has an invalid length. [ 1317.767527][T20590] netlink: 'syz.0.4589': attribute type 8 has an invalid length. [ 1317.883700][ T6141] bridge0: port 2(bridge_slave_1) entered disabled state [ 1317.942600][T20602] netlink: 'syz.6.4593': attribute type 1 has an invalid length. [ 1317.962689][T20590] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4589'. [ 1317.980892][T20602] netlink: 224 bytes leftover after parsing attributes in process `syz.6.4593'. [ 1318.923537][T20627] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4603'. [ 1319.002302][ T5979] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1319.182053][ T5979] usb 7-1: Using ep0 maxpacket: 32 [ 1319.194614][ T5979] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1319.216532][ T5979] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1319.228243][ T5979] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1319.302264][ T5979] usb 7-1: Product: syz [ 1319.337831][ T5979] usb 7-1: Manufacturer: syz [ 1319.396475][ T5979] usb 7-1: SerialNumber: syz [ 1319.533034][ T5979] usb 7-1: config 0 descriptor?? [ 1320.044724][T20641] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4607'. [ 1320.134699][ T5979] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1321.230664][ T6141] usb 7-1: Failed to submit usb control message: -110 [ 1321.251389][ T6141] usb 7-1: unable to send the bmi data to the device: -110 [ 1321.258644][ T6141] usb 7-1: unable to get target info from device [ 1321.268649][T20651] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4611'. [ 1321.290607][ T6141] usb 7-1: could not get target info (-110) [ 1321.296545][ T6141] usb 7-1: could not probe fw (-110) [ 1321.942021][ T5979] usb 7-1: USB disconnect, device number 19 [ 1322.834916][T20674] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4619'. [ 1323.251669][T20678] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4622'. [ 1323.791839][T20691] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4628'. [ 1323.911629][T20699] netlink: 'syz.0.4631': attribute type 12 has an invalid length. [ 1324.663569][T20717] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1324.807091][T20717] netlink: 'syz.0.4638': attribute type 2 has an invalid length. [ 1324.851682][T20717] netlink: 'syz.0.4638': attribute type 8 has an invalid length. [ 1324.906418][T20717] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4638'. [ 1325.494998][T20731] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4642'. [ 1327.710959][T20753] netlink: 10 bytes leftover after parsing attributes in process `syz.3.4655'. [ 1328.070586][T20764] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4661'. [ 1329.362949][T20787] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4668'. [ 1329.721204][T20793] netlink: 'syz.8.4669': attribute type 2 has an invalid length. [ 1329.799505][T20792] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1331.000740][T20793] netlink: 'syz.8.4669': attribute type 8 has an invalid length. [ 1331.008627][T20793] netlink: 132 bytes leftover after parsing attributes in process `syz.8.4669'. [ 1331.162597][T20809] netlink: 44 bytes leftover after parsing attributes in process `syz.9.4675'. [ 1331.835586][T20819] netlink: 11 bytes leftover after parsing attributes in process `syz.9.4679'. [ 1333.406550][T20829] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4684'. [ 1334.508124][T20840] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4690'. [ 1335.122493][T20863] netlink: 240 bytes leftover after parsing attributes in process `syz.3.4698'. [ 1335.327276][T20869] netlink: 'syz.0.4701': attribute type 12 has an invalid length. [ 1336.147128][T20884] netlink: 11 bytes leftover after parsing attributes in process `syz.3.4704'. [ 1337.214492][T20895] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4711'. [ 1337.985208][T20914] pimreg: entered allmulticast mode [ 1339.088904][T20906] pimreg: left allmulticast mode [ 1343.784017][T21007] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4756'. [ 1345.064887][T21014] netlink: 96 bytes leftover after parsing attributes in process `syz.6.4759'. [ 1345.794118][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807bd51400: rx timeout, send abort [ 1345.805127][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807bd50000: rx timeout, send abort [ 1345.813899][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807bd51400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1345.829301][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807bd50000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1347.240354][T21035] netlink: 'syz.7.4767': attribute type 12 has an invalid length. [ 1347.457043][T21041] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4768'. [ 1350.904238][T21088] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4782'. [ 1351.308402][T21101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1351.333100][T21101] batadv_slave_1: entered promiscuous mode [ 1351.361422][T21101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4785'. [ 1351.391378][T21104] netlink: 'syz.7.4787': attribute type 12 has an invalid length. [ 1353.540292][T21133] tipc: Started in network mode [ 1353.550341][T21133] tipc: Node identity 7, cluster identity 1 [ 1353.556268][T21133] tipc: Node number set to 7 [ 1353.967441][T21143] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4799'. [ 1354.863938][T21157] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4803'. [ 1355.157140][T21163] netlink: 'syz.9.4806': attribute type 12 has an invalid length. [ 1355.290934][T21166] netlink: 56 bytes leftover after parsing attributes in process `syz.7.4807'. [ 1356.399376][T21175] netlink: 432 bytes leftover after parsing attributes in process `syz.8.4809'. [ 1356.821451][T21187] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4814'. [ 1357.481825][T21191] pimreg: entered allmulticast mode [ 1357.613112][T21172] pimreg: left allmulticast mode [ 1357.698155][T21199] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4819'. [ 1358.103432][T21202] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4815'. [ 1358.481016][T21214] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4824'. [ 1360.330314][T21229] macvlan0: entered promiscuous mode [ 1360.379731][T21229] batadv_slave_0: entered promiscuous mode [ 1360.452103][T21229] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 1360.471373][T21229] Cannot create hsr debugfs directory [ 1360.487691][T21229] hsr1: entered promiscuous mode [ 1360.511297][T21231] netlink: 'syz.0.4830': attribute type 12 has an invalid length. [ 1360.603015][T21233] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4831'. [ 1361.141224][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.147707][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1365.956245][T21265] pimreg: entered allmulticast mode [ 1366.150551][T21242] pimreg: left allmulticast mode [ 1367.147386][T21278] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4843'. [ 1367.671094][T21286] netlink: 'syz.8.4847': attribute type 12 has an invalid length. [ 1367.694438][T21288] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4848'. [ 1368.134206][T21291] netlink: 'syz.3.4849': attribute type 12 has an invalid length. [ 1369.445116][T21304] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4853'. [ 1369.603256][T21310] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4857'. [ 1369.643118][T21312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4858'. [ 1369.769571][T21304] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4853'. [ 1369.859644][T21304] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1370.281961][ C0] vkms_vblank_simulate: vblank timer overrun [ 1370.333887][ C0] vkms_vblank_simulate: vblank timer overrun [ 1370.506997][ C0] vkms_vblank_simulate: vblank timer overrun [ 1370.734776][ C0] vkms_vblank_simulate: vblank timer overrun [ 1371.049708][ C0] vkms_vblank_simulate: vblank timer overrun [ 1371.569225][ C0] vkms_vblank_simulate: vblank timer overrun [ 1372.233950][ C0] vkms_vblank_simulate: vblank timer overrun [ 1373.089648][ C0] vkms_vblank_simulate: vblank timer overrun [ 1374.297042][ C0] vkms_vblank_simulate: vblank timer overrun [ 1375.813176][ C0] vkms_vblank_simulate: vblank timer overrun [ 1377.696903][ C0] vkms_vblank_simulate: vblank timer overrun [ 1398.731723][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1398.981072][ T5845] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1398.992472][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1399.290530][ T5845] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1399.302213][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1399.562712][ T5845] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1400.150621][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1400.470504][ T5845] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1400.758772][ T5845] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1401.050541][ T5845] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1401.060788][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1401.330600][ T5845] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1403.669395][T21354] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1403.693163][T21354] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1403.710888][T21354] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1403.760896][T21356] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1403.784217][T21356] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1403.796181][T21356] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1403.841466][T21356] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1403.853163][T21356] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1403.865980][T21356] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1403.931159][T21356] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1403.941759][T21356] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1403.952562][T21356] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1404.021328][T21356] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 1404.036468][T21356] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1404.047251][T21356] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1404.070554][T21356] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1404.080917][T21356] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1404.091863][T21356] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1411.970427][T19921] Bluetooth: hci2: command tx timeout [ 1411.979936][T19921] Bluetooth: hci7: command tx timeout [ 1411.988963][T19921] Bluetooth: hci9: command tx timeout [ 1411.997689][T19921] Bluetooth: hci10: command tx timeout [ 1412.006483][T19921] Bluetooth: hci8: command tx timeout [ 1452.533600][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1452.539938][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1452.707153][ T5836] Bluetooth: hci8: command tx timeout [ 1452.715039][ T5836] Bluetooth: hci10: command tx timeout [ 1452.723106][ T5836] Bluetooth: hci9: command tx timeout [ 1452.731493][ T5836] Bluetooth: hci7: command tx timeout [ 1452.739917][ T5836] Bluetooth: hci2: command tx timeout [ 1529.244533][T19921] Bluetooth: hci2: command tx timeout [ 1529.250222][T19921] Bluetooth: hci7: command tx timeout [ 1529.255643][T19921] Bluetooth: hci9: command tx timeout [ 1529.261058][T19921] Bluetooth: hci10: command tx timeout [ 1529.266558][T19921] Bluetooth: hci8: command tx timeout [ 1634.300039][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1634.307035][ C1] rcu: 0-...!: (3 ticks this GP) idle=2694/1/0x4000000000000000 softirq=79977/79977 fqs=0 [ 1634.318729][ C1] rcu: (detected by 1, t=10502 jiffies, g=76849, q=269 ncpus=2) [ 1634.326472][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1634.326508][ C0] NMI backtrace for cpu 0 [ 1634.326521][ C0] CPU: 0 UID: 0 PID: 17 Comm: rcu_preempt Not tainted 6.13.0-rc2-syzkaller-00382-gdccbe2047a5b #0 [ 1634.326546][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1634.326559][ C0] RIP: 0010:mark_lock+0xa2/0x360 [ 1634.326595][ C0] Code: 00 8b 1b 81 e3 ff 1f 00 00 48 89 d8 48 c1 e8 06 48 8d 3c c5 80 18 2a 94 be 08 00 00 00 e8 b6 b7 8a 00 48 0f a3 1d 1e f1 ae 12 <73> 10 48 69 c3 c8 00 00 00 48 8d 98 40 97 c1 93 eb 68 48 c7 c0 c0 [ 1634.326614][ C0] RSP: 0018:ffffc900000079c8 EFLAGS: 00000057 [ 1634.326635][ C0] RAX: 0000000000000001 RBX: 0000000000000dca RCX: ffffffff817b275a [ 1634.326651][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff942a1a38 [ 1634.326668][ C0] RBP: 0000000000000000 R08: ffffffff942a1a3f R09: 1ffffffff2854347 [ 1634.326685][ C0] R10: dffffc0000000000 R11: fffffbfff2854348 R12: ffff88801ce90ac4 [ 1634.326703][ C0] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff88801ce90ae0 [ 1634.326724][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1634.326745][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1634.326762][ C0] CR2: 00007f471f9a16c0 CR3: 000000000e736000 CR4: 0000000000350ef0 [ 1634.326782][ C0] Call Trace: [ 1634.326792][ C0] [ 1634.326805][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1634.326835][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1634.326864][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1634.326902][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1634.326926][ C0] ? nmi_handle+0x151/0x5a0 [ 1634.326955][ C0] ? nmi_handle+0x2a/0x5a0 [ 1634.326985][ C0] ? mark_lock+0xa2/0x360 [ 1634.327019][ C0] ? default_do_nmi+0x63/0x160 [ 1634.327046][ C0] ? exc_nmi+0x123/0x1f0 [ 1634.327071][ C0] ? end_repeat_nmi+0xf/0x53 [ 1634.327097][ C0] ? mark_lock+0x9a/0x360 [ 1634.327127][ C0] ? mark_lock+0xa2/0x360 [ 1634.327157][ C0] ? mark_lock+0xa2/0x360 [ 1634.327188][ C0] ? mark_lock+0xa2/0x360 [ 1634.327217][ C0] [ 1634.327226][ C0] [ 1634.327237][ C0] __lock_acquire+0xbc3/0x2100 [ 1634.327275][ C0] lock_acquire+0x1ed/0x550 [ 1634.327301][ C0] ? advance_sched+0xab/0xca0 [ 1634.327334][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1634.327363][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1634.327395][ C0] ? __hrtimer_run_queues+0x477/0xd30 [ 1634.327429][ C0] ? __pfx_lock_release+0x10/0x10 [ 1634.327461][ C0] ? __pfx_advance_sched+0x10/0x10 [ 1634.327488][ C0] _raw_spin_lock+0x2e/0x40 [ 1634.327515][ C0] ? advance_sched+0xab/0xca0 [ 1634.327542][ C0] advance_sched+0xab/0xca0 [ 1634.327569][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1634.327593][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1634.327623][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1634.327658][ C0] ? __pfx_advance_sched+0x10/0x10 [ 1634.327686][ C0] __hrtimer_run_queues+0x59d/0xd30 [ 1634.327730][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1634.327766][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1634.327790][ C0] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 1634.327822][ C0] hrtimer_interrupt+0x403/0xa40 [ 1634.327869][ C0] __sysvec_apic_timer_interrupt+0x112/0x420 [ 1634.327900][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1634.327932][ C0] [ 1634.327941][ C0] [ 1634.327950][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1634.327986][ C0] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 1634.328022][ C0] Code: 90 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 6a aa af f5 48 89 df e8 a2 f1 b0 f5 e8 2d 12 dc f5 fb bf 01 00 00 00 b2 56 a2 f5 65 8b 05 53 aa 38 74 85 c0 74 06 5b e9 4c 15 25 00 [ 1634.328042][ C0] RSP: 0018:ffffc90000167cd0 EFLAGS: 00000286 [ 1634.328062][ C0] RAX: 616dc030ceb39c00 RBX: ffffffff8e93c880 RCX: ffffffff9a3a8903 [ 1634.328081][ C0] RDX: dffffc0000000000 RSI: ffffffff8c0a9760 RDI: 0000000000000001 [ 1634.328098][ C0] RBP: ffffc90000167df0 R08: ffffffff90197977 R09: 1ffffffff2032f2e [ 1634.328117][ C0] R10: dffffc0000000000 R11: fffffbfff2032f2f R12: 0000000000000000 [ 1634.328134][ C0] R13: dffffc0000000000 R14: ffffffff8e93c8c0 R15: ffffffff8e93c880 [ 1634.328162][ C0] rcu_gp_init+0x118c/0x1630 [ 1634.328196][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1634.328226][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1634.328259][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1634.328291][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1634.328315][ C0] ? finish_swait+0xd4/0x1e0 [ 1634.328342][ C0] rcu_gp_kthread+0x187/0x3b0 [ 1634.328374][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1634.328403][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1634.328435][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1634.328458][ C0] ? __kthread_parkme+0x169/0x1d0 [ 1634.328486][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1634.328516][ C0] kthread+0x2f2/0x390 [ 1634.328545][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1634.328574][ C0] ? __pfx_kthread+0x10/0x10 [ 1634.328603][ C0] ret_from_fork+0x4d/0x80 [ 1634.328627][ C0] ? __pfx_kthread+0x10/0x10 [ 1634.328656][ C0] ret_from_fork_asm+0x1a/0x30 [ 1634.328687][ C0] [ 1634.329500][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g76849 f0x0 RCU_GP_INIT(4) ->state=0x0 ->cpu=0 [ 1634.835393][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1634.845375][ C1] rcu: RCU grace-period kthread stack dump: [ 1634.851268][ C1] task:rcu_preempt state:R running task stack:26264 pid:17 tgid:17 ppid:2 flags:0x00004008 [ 1634.863070][ C1] Call Trace: [ 1634.866361][ C1] [ 1634.869309][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1634.874963][ C1] ? mark_lock+0x9a/0x360 [ 1634.879328][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1634.884977][ C1] ? __lock_acquire+0x1397/0x2100 [ 1634.890034][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1634.895687][ C1] ? mark_lock+0x9a/0x360 [ 1634.900051][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1634.905709][ C1] ? __lock_acquire+0x1397/0x2100 [ 1634.910771][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1634.916428][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1634.922079][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1634.927832][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1634.933492][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1634.939145][ C1] ? rcu_is_watching+0x15/0xb0 [ 1634.943938][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1634.949592][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1634.955240][ C1] ? sysvec_apic_timer_interrupt+0x86/0xc0 [ 1634.961072][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1634.967270][ C1] ? _raw_spin_unlock_irq+0x29/0x50 [ 1634.972504][ C1] ? rcu_gp_init+0x118c/0x1630 [ 1634.977311][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 1634.982281][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1634.988463][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1634.994387][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1635.000041][ C1] ? finish_swait+0xd4/0x1e0 [ 1635.004655][ C1] ? rcu_gp_kthread+0x187/0x3b0 [ 1635.009540][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1635.014760][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1635.020686][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1635.026338][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1635.031389][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1635.036616][ C1] ? kthread+0x2f2/0x390 [ 1635.040886][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1635.046107][ C1] ? __pfx_kthread+0x10/0x10 [ 1635.050724][ C1] ? ret_from_fork+0x4d/0x80 [ 1635.055340][ C1] ? __pfx_kthread+0x10/0x10 [ 1635.059954][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 1635.064925][ C1]