last executing test programs: 8m42.948445642s ago: executing program 32 (id=126): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000005e44f954c6b311a854a7ce673b46342911d1f0619eb513229688763fe15f0d4aa096c02e25cced2fcbf03a1058b204cd4e661b715479c92805e4805e1a6a5d8a1eef6226761d487dae961904dfa2", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000002c0), 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r1, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x80}}, 0x0) r2 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r5, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r6 = socket$unix(0x1, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4d2f02, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="120000000400000004000000"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r8, &(0x7f0000000340), &(0x7f00000002c0)=@tcp6=r7}, 0x20) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x40000002, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x7}, {0x7, 0xffffffffffffff5c}}}]}]}]}}]}, 0x54}}, 0x0) write(r2, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r0}, 0x38) 5m21.815071141s ago: executing program 3 (id=1596): socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x20}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x6, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 5m20.761514472s ago: executing program 3 (id=1609): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f00000003c0)=@req={0x28, &(0x7f00000001c0)={'veth1_to_bridge\x00', @ifru_names='team0\x00'}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)}], 0x1, 0x0, 0x0, 0x4002}, 0x4000004) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000440)=[{}, {}, {}], 0x3, &(0x7f0000000480)={0x0, 0x3938700}, &(0x7f00000004c0)={[0x800]}, 0x8) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x400) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x40) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) sendmsg(0xffffffffffffffff, 0x0, 0x4255c3da3914ee25) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x0, 0x6, 0x1, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$vim2m(0x0, 0x4, 0x2) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f00000000c0)={0x4, 0x1d, 0x40, 0x0, 0x12}) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000000280)={0x1, r6, 0x1, 0x1, 0xa, 0x1ff, 0x1}) 5m18.886278203s ago: executing program 3 (id=1622): socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1a, 0x4, 0xa, &(0x7f0000000080)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000101010100000000000000000200000004000180180002801400018008000100b04c94a708000a00ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) 5m18.467776387s ago: executing program 3 (id=1627): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xd, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1, 0x0, 0x1}, 0x18) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 5m18.038192023s ago: executing program 3 (id=1635): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfe}, 0x80, 0x0}, 0x20000000) 5m17.640921248s ago: executing program 3 (id=1639): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x50) 5m2.534874551s ago: executing program 33 (id=1639): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x50) 5m2.232500258s ago: executing program 5 (id=1736): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 5m2.015812752s ago: executing program 5 (id=1739): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x0) 5m0.757111916s ago: executing program 5 (id=1742): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) sendmsg$inet(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000080)='}', 0x1}], 0x1}, 0x2400c0b5) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000380)="0bdc6652", 0x4}], 0x1}, 0x41) 5m0.509776244s ago: executing program 5 (id=1745): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000280)='./file0/file0\x00', 0x3) 5m0.142261092s ago: executing program 5 (id=1748): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000580)={0xdc, 0x10, 0x509, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xb3, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce2828002828290a9423debbb86f9dba4a2dba4dbe076c02262600c446a567de243ab0de7683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d68142f8623ad72351b3c424"}, @nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4, 0x0, 0x0, 0x0, @binary}]}]}, 0xdc}], 0x1}, 0x40040) 4m59.021516925s ago: executing program 5 (id=1760): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) syz_genetlink_get_family_id$tipc2(&(0x7f0000001f00), 0xffffffffffffffff) 4m58.256320809s ago: executing program 34 (id=1760): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) syz_genetlink_get_family_id$tipc2(&(0x7f0000001f00), 0xffffffffffffffff) 3m25.336144308s ago: executing program 1 (id=2029): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x20084000}, 0x4) recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000380)=""/104, 0x68}], 0x1}, 0x100) 3m24.163764058s ago: executing program 1 (id=2030): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000002440)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e15bec7357c00000064c6", 0x15}, {&(0x7f0000000000)="17460081ba60ccbb9d000000000000", 0xf}], 0x2}}, {{&(0x7f00000000c0)={0x2, 0x4e20, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f00000013c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x30}}], 0x2, 0x4004040) 3m23.167753887s ago: executing program 1 (id=2033): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r3, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 3m22.079287793s ago: executing program 1 (id=2035): mmap$IORING_OFF_SQ_RING(&(0x7f000071c000/0xe000)=nil, 0xe000, 0x0, 0x810, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, 0x0, 0x88) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) 3m18.327850118s ago: executing program 1 (id=2045): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x3a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @remote}, {0xa, 0x4e1f, 0x0, @dev}, 0x0, {[0x1fffffff, 0x0, 0x0, 0x897, 0x0, 0x0, 0x80000000]}}, 0x5c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000280)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='syzkaller\x00'}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x80, 0x0, 0x0) syz_emit_ethernet(0x33, &(0x7f00000000c0)={@random="f1a2610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x11, 0x0, @gue={{0x2, 0x1, 0x2, 0x4, 0x0, @val=0x80}, "1e"}}}}}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)={0x28, 0x3, 0x8, 0x3, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x8f91}]}]}, 0x28}}, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000540)={0x0, 0x8}, &(0x7f0000000580)=0x8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000300)={0x0, 0xb, 0x0, 0x0, 0x7}, &(0x7f0000000340)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000400)={r5, 0x0, 0x0}, &(0x7f0000000440)=0x10) ioctl$BTRFS_IOC_SYNC(r4, 0x9408, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r3}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(r6) getsockopt(0xffffffffffffffff, 0x1, 0x4, &(0x7f0000000880)=""/174, &(0x7f0000000100)=0xae) 3m18.185825279s ago: executing program 1 (id=2046): syz_init_net_socket$rose(0xb, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 3m3.105488128s ago: executing program 35 (id=2046): syz_init_net_socket$rose(0xb, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 2m19.239663903s ago: executing program 0 (id=2194): socket$nl_netfilter(0x10, 0x3, 0xc) setreuid(0x0, 0xee01) r0 = socket$inet_sctp(0x2, 0x5, 0x84) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) mq_open(&(0x7f0000000140)='$@\x005gM\xfb\xa3\xabt\xb8\x97\xa2`\xcc\xfb&\r.\x97TM&\x93\xd3\xd2\x17[\x89}\xd2j\xd6\xee\xf4\'@\xff\x00\x00\x00\x00\x00\x00\x00\x00\xcd.,\xfb\xab\xb9\x00r\voG\x9d\xaa\x86\xe9\xff\x1b\xa20\x16\t\x05\xa4\x97\xfah\xe9u\xbb\xad~\xb3\x83\xb9\xa3\xe7\xa4\xea\xe6x\xd8H\xa9\xa89\x1a\xfeZ0+\x18\xe9\xc7\x87\\\x05\xbf`!Q\xf2\xcc\xbc4\xbc|s\xbdZY1\x02r\xac\x805\x06\x18\xb5\x88gx\xac\xd6\xc7.\xa6Z\x84X:{II>~<\xa4x\'\xd0\xdc\xf5`\x1a\x1dI:\x8b\xc6v/;U\xac\x12\xed\xed\x86W\xf4\xcb\xf4\xdd\x89w<\xd2d\xc0\x17\xf3\x9f\xdf\xd2', 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m19.040297789s ago: executing program 0 (id=2195): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc1103000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@rand_addr=0x64010102, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x28f, 0x0, 0x3, 0x3}, {0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x0, 0x0, 0xb7, 0x9}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 2m17.467203146s ago: executing program 0 (id=2196): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000), 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x20084000}, 0x4) recvmsg$can_raw(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000380)=""/104, 0x68}], 0x1}, 0x100) 2m17.203644803s ago: executing program 0 (id=2197): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(0x0, 0x3) 2m17.025307205s ago: executing program 0 (id=2198): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0xfffffffd, 0x15f}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd_index=0x5, 0x40, 0x0, 0x0, 0x4, 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2m16.363708565s ago: executing program 4 (id=2200): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$xdp(0x2c, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket(0x2c, 0x3, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000280)=0x497, 0x4) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100)) epoll_wait(r4, &(0x7f0000001e40), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r5}, 0x18) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) 2m16.336601171s ago: executing program 0 (id=2201): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000002f000000b709000000000000850000002300000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[], 0x40}}, 0x20000840) 2m14.818301996s ago: executing program 36 (id=2201): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000002f000000b709000000000000850000002300000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[], 0x40}}, 0x20000840) 2m14.802863271s ago: executing program 4 (id=2203): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc1103000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@rand_addr=0x64010102, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x28f, 0x0, 0x3, 0x3}, {0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x0, 0x0, 0xb7, 0x9}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 2m13.345968894s ago: executing program 4 (id=2204): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292", 0xc) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x20084000}, 0x4) recvmsg$can_raw(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000380)=""/104, 0x68}], 0x1}, 0x100) 2m13.075849471s ago: executing program 4 (id=2205): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(0x0, 0x3) 2m12.840412041s ago: executing program 4 (id=2206): socket$nl_route(0x10, 0x3, 0x0) socket(0x22, 0x2, 0x3) r0 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x2, 0x379}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) 2m12.060948897s ago: executing program 4 (id=2207): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 2m11.703447858s ago: executing program 37 (id=2207): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 48.604821241s ago: executing program 7 (id=2431): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)='\x00\x00\x00\x00', 0x4}], 0x1}, 0x0) close(0x4) 48.298474334s ago: executing program 7 (id=2432): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000000000004"]) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000002c0)={0x0, 0x1}) 47.453830213s ago: executing program 7 (id=2434): sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000740)={0x64, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x300}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000041}, 0x4008047) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x5, &(0x7f00000009c0)=@framed={{}, [@map_fd={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) 46.947788198s ago: executing program 7 (id=2436): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0xc, 0x7b52e4aff0f1e2e1, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 46.389851086s ago: executing program 7 (id=2440): fanotify_init(0x20, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x8080, 0x0) syz_io_uring_setup(0x171a, &(0x7f0000000140)={0x0, 0x1694, 0x2, 0x2, 0x3, 0x0, r1}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1000, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xc3ac, 0x2}, 0x0, 0x0) 36.69479467s ago: executing program 7 (id=2447): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) r5 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) sendfile(r5, r5, 0x0, 0x1000000201005) 20.398985608s ago: executing program 38 (id=2447): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) r5 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) sendfile(r5, r5, 0x0, 0x1000000201005) 9.255418157s ago: executing program 8 (id=2484): syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x81, 0xc9, 0x1c, 0x8, "dcecb87a6d64deb5"}}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x1ad841, 0x0) openat$comedi(0xffffff9c, 0x0, 0x101001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8000000000000001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x200c8080) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r5, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x190, 0x1, 0x0, 0xdd9f86, 0x3, 0x9, 0x1, 0x8, 0x8, 0x722, 0x5, 0xb, 0x8, 0x3f, 0xb763599953cb091e, {0xf56, 0x6fd8e84b}, 0x3, 0xed}}) 8.129178089s ago: executing program 6 (id=2488): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) socket$kcm(0x1e, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setrlimit(0x0, &(0x7f0000000040)={0x7}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x6d) r1 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) r2 = eventfd(0x3) sync_file_range(r2, 0xffffffffffff0700, 0xfffffffffffffffd, 0x7) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40046f41, &(0x7f0000000440)=0x1f) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000080)=0x7f) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000900)={{0x0, 0x4, 0x2, 0x0, 'syz1\x00', 0xd3}, 0x1, 0x200, 0x2, 0x0, 0x0, 0x3, 'syz1\x00', 0x0}) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000002480)=""/4110, 0x100e}], 0x1) socket$nl_route(0x10, 0x3, 0x0) setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000240)=@ng={0x4, 0x15, "34e5eb796fa19b2fb4c528a6091f34f583"}, 0x13, 0x0) 7.636150369s ago: executing program 8 (id=2493): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x24, r0, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x51}, @val={0x8, 0x3, r3}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x240040c0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000000080)={0x30, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x2a}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xe736, 0x7d}}}}}, 0x30}}, 0x0) 7.195906006s ago: executing program 9 (id=2495): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee01}, {}, {}, 0x400000}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, 0x0, 0x0) 5.970286564s ago: executing program 2 (id=2496): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$inet6(0xa, 0x3, 0xff) close_range(r0, 0xffffffffffffffff, 0x0) 5.939199706s ago: executing program 8 (id=2497): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000024c0)={0x2c, r1, 0xb97534d5fe9704cf, 0x70bd2b, 0x25dfdbfe, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x4}]}, 0x2c}}, 0x0) 5.938889071s ago: executing program 9 (id=2498): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="60000000020601080000000000000000000000001400078008001140000000000500150000000000050005000a000000050001000700000005000400000000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x60}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x78, 0x2, 0x9, 0xb04, 0x0, 0x0, {0x5}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6}}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_TUPLE={0x28, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @NFCTH_TUPLE={0x4}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFCTH_TUPLE={0xc, 0x2, [@CTA_TUPLE_ZONE={0x6}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x24040080) socket$kcm(0xa, 0x922000000003, 0x11) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x21000}, 0x8000) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001240)={0x20, 0x1, 0x4, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFULA_CFG_MODE={0xa, 0x2, {0x101, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x10040051}, 0x4000010) 5.683714519s ago: executing program 2 (id=2499): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = fsopen(&(0x7f0000000300)='jfs\x00', 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r1, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 5.587824499s ago: executing program 8 (id=2500): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x4, &(0x7f00000003c0)={0x3, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x21, 0x2, 0xa) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800, 0x8, 0x2}, 0x1c) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000000c0)=0x100, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x0, r3}, 0x10) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x1, r3, 0x8000000, r1}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="1957000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r7, &(0x7f0000000980), 0xe) ioctl$SIOCGSKNS(r4, 0x894c, &(0x7f0000000040)={'gretap0\x00', 0x200}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000005}, 0x0, 0x0) 5.550320107s ago: executing program 9 (id=2501): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000180)={0x1, @pix_mp={0x9014, 0x9, 0x41416770, 0x0, 0x4, [{0x5, 0x1ff}, {0xffff, 0x40}, {0xfa, 0xc00000}, {0x8001, 0x3}, {0x4, 0x6}, {0x8, 0x1}, {0x4}, {0x7ff, 0x7fff}], 0x9, 0x2, 0x8, 0x0, 0x4}}) 3.503944197s ago: executing program 9 (id=2502): syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x81, 0xc9, 0x1c, 0x8, "dcecb87a6d64deb5"}}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x1ad841, 0x0) openat$comedi(0xffffff9c, 0x0, 0x101001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8000000000000001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x200c8080) socket(0x10, 0x3, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r5, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x190, 0x1, 0x0, 0xdd9f86, 0x3, 0x9, 0x1, 0x8, 0x8, 0x722, 0x5, 0xb, 0x8, 0x3f, 0xb763599953cb091e, {0xf56, 0x6fd8e84b}, 0x3, 0xed}}) 3.501676228s ago: executing program 2 (id=2503): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1e, 0x0, &(0x7f00000004c0)="e7fd51a2ef3d174042a0a4418f46ac1762c3d877b96d22cd6fde1e6c9bbe", 0x0, 0x1, 0x0, 0x4}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000ffdbdf2509000000640003800800010001000000080003000400000014000200"], 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2.230577003s ago: executing program 6 (id=2504): sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x4008047) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x5, &(0x7f00000009c0)=@framed={{}, [@map_fd={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.871880975s ago: executing program 2 (id=2505): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0xd8000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.767868095s ago: executing program 6 (id=2506): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f00000000c0)) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000000000004"]) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000002c0)={0x0, 0x1}) 1.759749964s ago: executing program 8 (id=2507): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=ANY=[], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(0xffffffffffffffff, &(0x7f00000007c0)=[{{&(0x7f0000000600)=@ethernet={0x306}, 0x80, &(0x7f0000000780)=[{&(0x7f00000006c0)="9b468da99267a99aed5f6b48ad03b7c825ecb32adffc80ff47af98a3741169ea2fcaa8de0120079173a79cbc6b3e4ef87d968b9bfd711da55a06467ae7196c92aeb550695c643a2eb3d0ce6ec6c5", 0x4e}], 0x1, &(0x7f00000013c0)=[{0xc10, 0x119, 0x9, "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"}, {0x28, 0x13, 0x7, "877e97e30e80b348e3ecaa1ddfb1a3a2b6"}], 0xc38}}], 0x1, 0x404c041) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.7480233s ago: executing program 2 (id=2508): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000780)={{}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r0, 0x0, &(0x7f0000000340)={{}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) 1.594537491s ago: executing program 6 (id=2509): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000024c0)={0x2c, r1, 0xb97534d5fe9704cf, 0x70bd2b, 0x25dfdbfe, {{0x12}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x4}]}, 0x2c}}, 0x0) 1.434796838s ago: executing program 9 (id=2510): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="60000000020601080000000000000000000000001400078008001140000000000500150000000000050005000a000000050001000700000005000400000000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x60}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x78, 0x2, 0x9, 0xb04, 0x0, 0x0, {0x5}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6}}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_TUPLE={0x28, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @NFCTH_TUPLE={0x4}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFCTH_TUPLE={0xc, 0x2, [@CTA_TUPLE_ZONE={0x6}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x24040080) socket$kcm(0xa, 0x922000000003, 0x11) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x21000}, 0x8000) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001240)={0x20, 0x1, 0x4, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFULA_CFG_MODE={0xa, 0x2, {0x101, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x10040051}, 0x4000010) 1.371149767s ago: executing program 8 (id=2511): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x84}}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.327806445s ago: executing program 6 (id=2512): fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) getrlimit(0xd, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.262336089s ago: executing program 9 (id=2513): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) socket$kcm(0x1e, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setrlimit(0x0, &(0x7f0000000040)={0x7}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x6d) r1 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) r2 = eventfd(0x3) sync_file_range(r2, 0xffffffffffff0700, 0xfffffffffffffffd, 0x7) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40046f41, &(0x7f0000000440)=0x1f) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000080)=0x7f) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000900)={{0x0, 0x4, 0x2, 0x0, 'syz1\x00', 0xd3}, 0x1, 0x200, 0x2, 0x0, 0x0, 0x3, 'syz1\x00', 0x0}) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000002480)=""/4110, 0x100e}], 0x1) socket$nl_route(0x10, 0x3, 0x0) setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000240)=@ng={0x4, 0x15, "34e5eb796fa19b2fb4c528a6091f34f583"}, 0x13, 0x0) 191.628439ms ago: executing program 2 (id=2514): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1e, 0x0, &(0x7f00000004c0)="e7fd51a2ef3d174042a0a4418f46ac1762c3d877b96d22cd6fde1e6c9bbe", 0x0, 0x1, 0x0, 0x4}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000ffdbdf2509000000640003800800010001000000080003000400000014000200"], 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 0s ago: executing program 6 (id=2515): sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000740)={0x5c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x300}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000041}, 0x4008047) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x5, &(0x7f00000009c0)=@framed={{}, [@map_fd={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): d already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 326.778486][ T9438] team0: Unable to change to the same mode the team is in [ 328.071278][ T9477] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 328.071386][ T9481] team0: Unable to change to the same mode the team is in [ 328.944283][ T9515] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1392'. [ 329.160508][ T9518] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1394'. [ 329.260980][ T5823] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 329.406199][ T5823] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 329.517022][ T9519] bond0: (slave bond_slave_0): Releasing backup interface [ 329.613550][ T9519] bond_slave_0: left promiscuous mode [ 329.662091][ T9519] bond0: (slave bond_slave_1): Releasing backup interface [ 329.705138][ T9519] bond_slave_1: left promiscuous mode [ 329.776583][ T9519] team0: Port device team_slave_0 removed [ 329.885831][ T9519] team0: Port device team_slave_1 removed [ 329.888034][ T9519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.888070][ T9519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.939320][ T9519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.939364][ T9519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.989791][ T9519] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 330.014002][ T9524] team0: Mode changed to "activebackup" [ 330.845344][ T9566] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1411'. [ 331.345136][ T9581] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 331.401351][ T9581] team0: Unable to change to the same mode the team is in [ 332.652767][ T9624] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1434'. [ 332.678281][ T9629] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1439'. [ 333.179765][ T9648] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1447'. [ 333.602351][ T9658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1452'. [ 333.629585][ T9658] macvtap2: entered promiscuous mode [ 333.629609][ T9658] bond0: entered promiscuous mode [ 333.629770][ T9658] macvtap2: entered allmulticast mode [ 333.629783][ T9658] bond0: entered allmulticast mode [ 333.630165][ T9658] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 333.826278][ T9669] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1456'. [ 334.203258][ T9679] netlink: 'syz.4.1460': attribute type 1 has an invalid length. [ 334.205094][ T9679] netlink: 'syz.4.1460': attribute type 1 has an invalid length. [ 334.553078][ T9685] netlink: 4456 bytes leftover after parsing attributes in process `syz.3.1463'. [ 335.483489][ T9697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1468'. [ 335.569546][ T9701] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1469'. [ 337.858890][ T9729] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1482'. [ 338.365783][ T9743] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1489'. [ 338.776301][ T9755] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1494'. [ 339.139234][ T9764] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1496'. [ 340.078924][ T9792] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1509'. [ 341.526359][ T9829] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1523'. [ 341.639165][ T9831] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1526'. [ 342.992931][ T9866] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1539'. [ 343.976347][ T9890] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1552'. [ 345.108190][ T9925] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1570'. [ 348.350388][T10018] sch_tbf: burst 5 is lower than device veth0_to_bridge mtu (1514) ! [ 348.351162][T10017] netlink: 'syz.3.1609': attribute type 10 has an invalid length. [ 348.867956][T10017] dummy0: entered promiscuous mode [ 348.868174][T10017] dummy0: entered allmulticast mode [ 348.900290][T10017] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 349.501471][T10034] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1614'. [ 351.447434][T10098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1644'. [ 351.669101][ C0] vkms_vblank_simulate: vblank timer overrun [ 353.207008][ C0] vkms_vblank_simulate: vblank timer overrun [ 353.331492][T10148] netlink: 252 bytes leftover after parsing attributes in process `syz.1.1668'. [ 353.454721][ C0] vkms_vblank_simulate: vblank timer overrun [ 359.302855][T10223] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1697'. [ 360.156083][ T5823] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 361.336001][ T5823] usb 2-1: Using ep0 maxpacket: 8 [ 361.342295][ T5823] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 361.342327][ T5823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.342348][ T5823] usb 2-1: Product: syz [ 361.342363][ T5823] usb 2-1: Manufacturer: syz [ 361.342377][ T5823] usb 2-1: SerialNumber: syz [ 361.393120][ T5823] usb 2-1: config 0 descriptor?? [ 361.431879][ T5823] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 362.065142][T10240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1704'. [ 363.286096][ T5823] gspca_sonixj: reg_r err -71 [ 363.286222][ T5823] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 363.326081][ T5823] usb 2-1: USB disconnect, device number 3 [ 363.813694][T10260] netlink: 'syz.5.1710': attribute type 4 has an invalid length. [ 364.070743][T10270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1715'. [ 368.441674][ T5815] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 368.461167][ T5815] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 368.464397][ T5815] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 368.491602][ T5815] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 368.492918][ T5815] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 369.708682][ T5899] kernel write not supported for file /snd/seq (pid: 5899 comm: kworker/0:6) [ 370.556071][ T5815] Bluetooth: hci0: command tx timeout [ 370.954508][ T58] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.139442][T10350] chnl_net:caif_netlink_parms(): no params data found [ 372.087620][ C0] vkms_vblank_simulate: vblank timer overrun [ 372.180217][ C0] vkms_vblank_simulate: vblank timer overrun [ 372.639025][ T5815] Bluetooth: hci0: command tx timeout [ 372.677029][ T5123] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 372.701497][ T5123] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 372.704829][ T5123] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 372.725185][ T58] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.752843][ T5123] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 372.754844][ T5123] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 373.627605][T10434] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 374.473242][ T58] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.566456][T10350] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.566596][T10350] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.566938][T10350] bridge_slave_0: entered allmulticast mode [ 374.602364][T10350] bridge_slave_0: entered promiscuous mode [ 374.651484][T10350] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.651625][T10350] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.651897][T10350] bridge_slave_1: entered allmulticast mode [ 374.681770][T10350] bridge_slave_1: entered promiscuous mode [ 374.706295][ T5123] Bluetooth: hci0: command tx timeout [ 374.878761][ T5123] Bluetooth: hci1: command tx timeout [ 375.266997][T10458] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 375.501853][ T58] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.575468][T10465] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1789'. [ 375.847343][T10350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.880766][T10350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.032933][T10476] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1793'. [ 376.157024][T10480] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 376.332645][T10350] team0: Port device team_slave_0 added [ 376.377963][T10350] team0: Port device team_slave_1 added [ 376.380529][T10489] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1800'. [ 376.796012][ T5123] Bluetooth: hci0: command tx timeout [ 376.920433][T10350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.920456][T10350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 376.921726][T10350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.946111][ T5123] Bluetooth: hci1: command tx timeout [ 377.003599][T10350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.003620][T10350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.003648][T10350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.336136][ T5960] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 377.490937][ T5960] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.490995][ T5960] usb 5-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 377.491019][ T5960] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.537120][ T5960] usb 5-1: config 0 descriptor?? [ 377.724347][T10350] hsr_slave_0: entered promiscuous mode [ 377.737986][T10350] hsr_slave_1: entered promiscuous mode [ 377.739753][T10350] debugfs: 'hsr0' already exists in 'hsr' [ 377.739780][T10350] Cannot create hsr debugfs directory [ 377.783449][ T58] bond2: left allmulticast mode [ 377.783543][ T58] bond2: left promiscuous mode [ 377.794751][ T58] bridge1: port 1(bond2) entered disabled state [ 377.893070][T10510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.894796][T10510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.099224][ T5960] usbhid 5-1:0.0: can't add hid device: -71 [ 378.099384][ T5960] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 378.122321][ T5960] usb 5-1: USB disconnect, device number 3 [ 378.139905][T10512] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 379.026196][ T5123] Bluetooth: hci1: command tx timeout [ 381.106119][ T5123] Bluetooth: hci1: command tx timeout [ 381.500912][T10528] syz.4.1814: vmalloc error: size 1075838976, failed to allocated page array size 2101248, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 381.501666][T10528] CPU: 0 UID: 0 PID: 10528 Comm: syz.4.1814 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 381.501693][T10528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 381.501759][T10528] Call Trace: [ 381.501780][T10528] [ 381.501802][T10528] dump_stack_lvl+0x189/0x250 [ 381.501913][T10528] ? __pfx_dump_stack_lvl+0x10/0x10 [ 381.501954][T10528] ? __pfx__printk+0x10/0x10 [ 381.501983][T10528] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 381.502013][T10528] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 381.502041][T10528] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 381.502080][T10528] warn_alloc+0x22e/0x3b0 [ 381.502127][T10528] ? __pfx_warn_alloc+0x10/0x10 [ 381.502170][T10528] ? __get_vm_area_node+0x2bc/0x350 [ 381.502201][T10528] ? hash_netiface_create+0x354/0xf90 [ 381.502239][T10528] __vmalloc_node_range_noprof+0x690/0x12d0 [ 381.502270][T10528] ? __alloc_frozen_pages_noprof+0x9f/0x370 [ 381.502333][T10528] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 381.502369][T10528] ? rcu_is_watching+0x15/0xb0 [ 381.502396][T10528] __kvmalloc_node_noprof+0x4a3/0x920 [ 381.502429][T10528] ? hash_netiface_create+0x354/0xf90 [ 381.502454][T10528] ? __kmalloc_cache_noprof+0x1ef/0x6c0 [ 381.502483][T10528] ? hash_netiface_create+0x354/0xf90 [ 381.502518][T10528] hash_netiface_create+0x354/0xf90 [ 381.502554][T10528] ? __nla_parse+0x40/0x60 [ 381.502593][T10528] ? __pfx_hash_netiface_create+0x10/0x10 [ 381.502622][T10528] ip_set_create+0xa9c/0x1940 [ 381.502652][T10528] ? ip_set_create+0x4a7/0x1940 [ 381.502694][T10528] ? __pfx_ip_set_create+0x10/0x10 [ 381.502765][T10528] nfnetlink_rcv_msg+0xb69/0x1150 [ 381.502809][T10528] ? nfnetlink_rcv_msg+0x212/0x1150 [ 381.502877][T10528] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 381.502907][T10528] ? kasan_save_track+0x4f/0x80 [ 381.502988][T10528] ? __local_bh_enable+0x27b/0x410 [ 381.503028][T10528] netlink_rcv_skb+0x208/0x470 [ 381.503064][T10528] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 381.503099][T10528] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 381.503135][T10528] ? bpf_lsm_capable+0x9/0x20 [ 381.503160][T10528] ? security_capable+0x7e/0x2e0 [ 381.503198][T10528] nfnetlink_rcv+0x282/0x2590 [ 381.503236][T10528] ? __dev_queue_xmit+0x1d3d/0x3b70 [ 381.503277][T10528] ? __dev_queue_xmit+0x26f/0x3b70 [ 381.503320][T10528] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 381.503352][T10528] ? __pfx___dev_queue_xmit+0x10/0x10 [ 381.503396][T10528] ? ref_tracker_free+0x61e/0x7c0 [ 381.503429][T10528] ? __asan_memcpy+0x40/0x70 [ 381.503455][T10528] ? __pfx_ref_tracker_free+0x10/0x10 [ 381.503483][T10528] ? __skb_clone+0x63/0x7a0 [ 381.503516][T10528] ? __skb_clone+0x483/0x7a0 [ 381.503550][T10528] ? skb_clone+0x246/0x3a0 [ 381.503579][T10528] ? __netlink_deliver_tap+0x807/0x850 [ 381.503601][T10528] ? netlink_deliver_tap+0x2e/0x1b0 [ 381.503629][T10528] ? netlink_deliver_tap+0x2e/0x1b0 [ 381.503660][T10528] netlink_unicast+0x846/0xa10 [ 381.503705][T10528] ? __pfx_netlink_unicast+0x10/0x10 [ 381.503741][T10528] ? netlink_sendmsg+0x642/0xb30 [ 381.503761][T10528] ? skb_put+0x11b/0x210 [ 381.503788][T10528] netlink_sendmsg+0x805/0xb30 [ 381.503832][T10528] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.503865][T10528] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 381.503898][T10528] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.503922][T10528] __sock_sendmsg+0x21c/0x270 [ 381.503958][T10528] ____sys_sendmsg+0x508/0x820 [ 381.503991][T10528] ? __pfx_____sys_sendmsg+0x10/0x10 [ 381.504028][T10528] ? import_iovec+0x74/0xa0 [ 381.504065][T10528] ___sys_sendmsg+0x21f/0x2a0 [ 381.504093][T10528] ? __pfx____sys_sendmsg+0x10/0x10 [ 381.504162][T10528] ? __fget_files+0x2a/0x420 [ 381.504194][T10528] ? __fget_files+0x3a6/0x420 [ 381.504238][T10528] __x64_sys_sendmsg+0x1a1/0x260 [ 381.504267][T10528] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 381.504313][T10528] ? do_syscall_64+0xbe/0xfa0 [ 381.504351][T10528] do_syscall_64+0xfa/0xfa0 [ 381.504377][T10528] ? lockdep_hardirqs_on+0x9c/0x150 [ 381.504404][T10528] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.504428][T10528] ? clear_bhb_loop+0x60/0xb0 [ 381.504455][T10528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.504477][T10528] RIP: 0033:0x7f8258a9efc9 [ 381.504507][T10528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.504530][T10528] RSP: 002b:00007f8256cfe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 381.504557][T10528] RAX: ffffffffffffffda RBX: 00007f8258cf5fa0 RCX: 00007f8258a9efc9 [ 381.504573][T10528] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 381.504587][T10528] RBP: 00007f8258b21f91 R08: 0000000000000000 R09: 0000000000000000 [ 381.504601][T10528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 381.504614][T10528] R13: 00007f8258cf6038 R14: 00007f8258cf5fa0 R15: 00007fff86d118b8 [ 381.504653][T10528] [ 381.504688][T10528] Mem-Info: [ 381.504699][T10528] active_anon:259 inactive_anon:12398 isolated_anon:0 [ 381.504699][T10528] active_file:23651 inactive_file:36143 isolated_file:0 [ 381.504699][T10528] unevictable:768 dirty:110 writeback:0 [ 381.504699][T10528] slab_reclaimable:12393 slab_unreclaimable:105510 [ 381.504699][T10528] mapped:29203 shmem:10135 pagetables:1178 [ 381.504699][T10528] sec_pagetables:0 bounce:0 [ 381.504699][T10528] kernel_misc_reclaimable:0 [ 381.504699][T10528] free:1204727 free_pcp:2994 free_cma:0 [ 381.504779][T10528] Node 0 active_anon:1036kB inactive_anon:49592kB active_file:94400kB inactive_file:144572kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116812kB dirty:436kB writeback:0kB shmem:39004kB kernel_stack:12592kB pagetables:4476kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 381.504838][T10528] Node 1 active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB kernel_stack:48kB pagetables:236kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 381.504886][T10528] Node 0 DMA free:15356kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 381.504951][T10528] lowmem_reserve[]: 0 2515 2517 2517 2517 [ 381.504992][T10528] Node 0 DMA32 free:904012kB boost:0kB min:3944kB low:6492kB high:9040kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1036kB inactive_anon:49492kB active_file:94400kB inactive_file:144572kB unevictable:1536kB writepending:436kB zspages:0kB present:3129332kB managed:2576100kB mlocked:0kB bounce:0kB free_pcp:10840kB local_pcp:1728kB free_cma:0kB [ 381.505059][T10528] lowmem_reserve[]: 0 0 1 1 1 [ 381.505096][T10528] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 381.505157][T10528] lowmem_reserve[]: 0 0 0 0 0 [ 381.505194][T10528] Node 1 Normal free:3899540kB boost:0kB min:6360kB low:10468kB high:14576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:1136kB local_pcp:716kB free_cma:0kB [ 381.505259][T10528] lowmem_reserve[]: 0 0 0 0 0 [ 381.505296][T10528] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15356kB [ 381.505474][T10528] Node 0 DMA32: 745*4kB (UM) 402*8kB (UME) 627*16kB (UME) 1124*32kB (UME) 845*64kB (UME) 543*128kB (UM) 246*256kB (UME) 127*512kB (UM) 60*1024kB (UME) 7*2048kB (ME) 128*4096kB (M) = 903844kB [ 381.505658][T10528] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 381.505773][T10528] Node 1 Normal: 1*4kB (E) 38*8kB (UME) 14*16kB (UME) 224*32kB (UME) 102*64kB (UME) 34*128kB (UME) 10*256kB (UM) 7*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 945*4096kB (M) = 3899540kB [ 381.518113][T10528] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 381.518134][T10528] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 381.518158][T10528] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 381.518177][T10528] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 381.518194][T10528] 69876 total pagecache pages [ 381.518229][T10528] 0 pages in swap cache [ 381.518243][T10528] Free swap = 124996kB [ 381.518251][T10528] Total swap = 124996kB [ 381.518261][T10528] 2097051 pages RAM [ 381.518269][T10528] 0 pages HighMem/MovableOnly [ 381.518277][T10528] 421000 pages reserved [ 381.518285][T10528] 0 pages cma reserved [ 382.628305][ T58] bond0 (unregistering): Released all slaves [ 382.680606][ T58] bond1 (unregistering): Released all slaves [ 382.740582][ T58] bond2 (unregistering): Released all slaves [ 383.431166][T10537] Bluetooth: MGMT ver 1.23 [ 385.182843][T10414] chnl_net:caif_netlink_parms(): no params data found [ 385.811745][T10562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1825'. [ 385.924930][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 385.925002][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 387.064505][T10574] netlink: 'syz.4.1829': attribute type 10 has an invalid length. [ 387.147113][ T58] hsr_slave_0: left promiscuous mode [ 387.326198][ T58] hsr_slave_1: left promiscuous mode [ 387.640454][ T58] veth1_macvtap: left promiscuous mode [ 387.640580][ T58] veth0_macvtap: left promiscuous mode [ 387.640874][ T58] veth1_vlan: left promiscuous mode [ 387.663025][ T58] veth0_vlan: left promiscuous mode [ 388.436815][ C1] vkms_vblank_simulate: vblank timer overrun [ 388.561775][ C1] vkms_vblank_simulate: vblank timer overrun [ 388.901616][ C1] vkms_vblank_simulate: vblank timer overrun [ 389.044734][ C1] vkms_vblank_simulate: vblank timer overrun [ 389.127654][ C1] vkms_vblank_simulate: vblank timer overrun [ 389.574668][ C1] vkms_vblank_simulate: vblank timer overrun [ 389.825822][ C1] vkms_vblank_simulate: vblank timer overrun [ 390.995726][ C1] vkms_vblank_simulate: vblank timer overrun [ 391.284066][ T44] libceph: connect (1)[c::]:6789 error -101 [ 391.285283][ T44] libceph: mon0 (1)[c::]:6789 connect error [ 391.561238][ T44] libceph: connect (1)[c::]:6789 error -101 [ 391.561406][ T44] libceph: mon0 (1)[c::]:6789 connect error [ 391.763809][ C1] vkms_vblank_simulate: vblank timer overrun [ 391.876890][T10600] ceph: No mds server is up or the cluster is laggy [ 392.148594][ C1] vkms_vblank_simulate: vblank timer overrun [ 392.496807][ C1] vkms_vblank_simulate: vblank timer overrun [ 392.683840][ C1] vkms_vblank_simulate: vblank timer overrun [ 396.167612][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 397.704644][T10574] dummy0: entered promiscuous mode [ 397.705563][T10574] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 398.167797][T10414] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.167940][T10414] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.168280][T10414] bridge_slave_0: entered allmulticast mode [ 398.171449][T10414] bridge_slave_0: entered promiscuous mode [ 398.175470][T10414] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.184922][T10414] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.185170][T10414] bridge_slave_1: entered allmulticast mode [ 398.189611][T10414] bridge_slave_1: entered promiscuous mode [ 398.535088][T10646] netlink: 'syz.1.1855': attribute type 10 has an invalid length. [ 399.391455][ T5823] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 399.499020][T10646] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 399.529516][T10414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.562221][ T5823] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 399.562275][ T5823] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 399.589029][ T5823] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 399.589053][ T5823] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.589067][ T5823] usb 5-1: Product: syz [ 399.589077][ T5823] usb 5-1: Manufacturer: syz [ 399.589086][ T5823] usb 5-1: SerialNumber: syz [ 399.648505][ T5823] usb 5-1: config 0 descriptor?? [ 399.651830][T10645] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 399.651996][T10645] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 399.652410][T10414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.736656][ C1] vkms_vblank_simulate: vblank timer overrun [ 399.819237][ C1] vkms_vblank_simulate: vblank timer overrun [ 399.929476][T10645] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 399.929631][T10645] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 400.183900][T10414] team0: Port device team_slave_0 added [ 400.184645][T10350] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 400.271089][T10414] team0: Port device team_slave_1 added [ 400.273761][T10350] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 400.306243][ T5960] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 400.418032][T10350] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 400.456169][ T5960] usb 2-1: Using ep0 maxpacket: 8 [ 400.499561][ T5960] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 400.499597][ T5960] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.499618][ T5960] usb 2-1: Product: syz [ 400.499633][ T5960] usb 2-1: Manufacturer: syz [ 400.499647][ T5960] usb 2-1: SerialNumber: syz [ 400.548365][ T5960] usb 2-1: config 0 descriptor?? [ 400.572181][ T5960] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 400.649717][T10350] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 400.835810][T10414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.835832][T10414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.836244][T10414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.923304][T10414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.923327][T10414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.923400][T10414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.000351][ T5823] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 401.064578][ T5823] dm9601 5-1:0.0 eth9: register 'dm9601' at usb-dummy_hcd.4-1, Davicom DM96xx USB 10/100 Ethernet, ee:00:00:00:00:00 [ 401.079994][ T5823] usb 5-1: USB disconnect, device number 4 [ 401.083446][ T5823] dm9601 5-1:0.0 eth9: unregister 'dm9601' usb-dummy_hcd.4-1, Davicom DM96xx USB 10/100 Ethernet [ 401.304234][ C1] vkms_vblank_simulate: vblank timer overrun [ 401.822239][ C1] vkms_vblank_simulate: vblank timer overrun [ 401.959668][ C1] vkms_vblank_simulate: vblank timer overrun [ 402.090289][ C1] vkms_vblank_simulate: vblank timer overrun [ 402.348018][ T5960] gspca_sonixj: reg_w1 err -110 [ 402.414095][ T5960] sonixj 2-1:0.0: probe with driver sonixj failed with error -110 [ 402.568755][ C1] vkms_vblank_simulate: vblank timer overrun [ 402.836007][ C1] vkms_vblank_simulate: vblank timer overrun [ 403.101985][ C1] vkms_vblank_simulate: vblank timer overrun [ 404.075365][ C1] vkms_vblank_simulate: vblank timer overrun [ 404.145065][ C1] vkms_vblank_simulate: vblank timer overrun [ 404.195606][ T5960] usb 2-1: USB disconnect, device number 4 [ 404.225743][ T58] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.278368][T10687] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1867'. [ 404.318999][T10414] hsr_slave_0: entered promiscuous mode [ 404.322067][T10414] hsr_slave_1: entered promiscuous mode [ 404.323147][T10414] debugfs: 'hsr0' already exists in 'hsr' [ 404.323174][T10414] Cannot create hsr debugfs directory [ 404.717690][ T58] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.152004][ T58] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.891424][ T58] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.956775][T10724] netlink: 'syz.0.1880': attribute type 10 has an invalid length. [ 406.225500][T10724] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 406.922956][T10741] netlink: 388 bytes leftover after parsing attributes in process `syz.4.1888'. [ 407.370747][T10350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.660917][ T58] gretap1: left allmulticast mode [ 407.660954][ T58] gretap1: left promiscuous mode [ 407.661231][ T58] bridge1: port 1(gretap1) entered disabled state [ 407.728348][ T58] bond1: left allmulticast mode [ 407.728375][ T58] bond1: left promiscuous mode [ 407.728625][ T58] bridge0: port 1(bond1) entered disabled state [ 408.992033][ T5823] libceph: connect (1)[c::]:6789 error -101 [ 408.992190][ T5823] libceph: mon0 (1)[c::]:6789 connect error [ 409.014683][ T5823] libceph: connect (1)[c::]:6789 error -101 [ 409.014845][ T5823] libceph: mon0 (1)[c::]:6789 connect error [ 409.037060][ T10] libceph: connect (1)[c::]:6789 error -101 [ 409.043384][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 409.253344][T10762] ceph: No mds server is up or the cluster is laggy [ 409.254680][T10765] ceph: No mds server is up or the cluster is laggy [ 409.270333][ T10] libceph: connect (1)[c::]:6789 error -101 [ 409.270585][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 409.298813][ T10] libceph: connect (1)[c::]:6789 error -101 [ 409.299122][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 409.609697][ C1] vkms_vblank_simulate: vblank timer overrun [ 409.941075][ C1] vkms_vblank_simulate: vblank timer overrun [ 410.141928][ C1] vkms_vblank_simulate: vblank timer overrun [ 411.038233][T10792] netlink: 'syz.0.1903': attribute type 10 has an invalid length. [ 411.292024][ T5823] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 411.436201][ T5823] usb 2-1: Using ep0 maxpacket: 8 [ 411.440080][ T5823] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.440139][ T5823] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 411.440165][ T5823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 411.440191][ T5823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 411.440218][ T5823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 411.440244][ T5823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 411.440265][ T5823] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 411.443573][ T5823] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 411.443600][ T5823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.443614][ T5823] usb 2-1: Product: syz [ 411.443625][ T5823] usb 2-1: Manufacturer: syz [ 411.443636][ T5823] usb 2-1: SerialNumber: syz [ 411.453712][ T5823] usb 2-1: config 0 descriptor?? [ 411.546096][ T44] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 411.589464][T10793] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 411.616358][ T5823] ati_remote 2-1:0.0: Initializing ati_remote hardware failed. [ 411.616695][ T5823] ati_remote 2-1:0.0: probe with driver ati_remote failed with error -5 [ 411.728444][ T44] usb 5-1: config 0 has no interfaces? [ 411.730859][ T44] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 411.730890][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.730910][ T44] usb 5-1: Product: syz [ 411.730924][ T44] usb 5-1: Manufacturer: syz [ 411.730938][ T44] usb 5-1: SerialNumber: syz [ 411.780941][ T44] usb 5-1: config 0 descriptor?? [ 411.831311][ T5823] usb 2-1: USB disconnect, device number 5 [ 412.260285][ T58] bond0 (unregistering): left allmulticast mode [ 412.260313][ T58] dummy0: left allmulticast mode [ 412.260333][ T58] bond0 (unregistering): left promiscuous mode [ 412.260343][ T58] dummy0: left promiscuous mode [ 412.496692][ T58] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 412.543776][ T58] bond0 (unregistering): Released all slaves [ 412.559008][ T58] bond1 (unregistering): Released all slaves [ 412.611126][T10414] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 412.673066][T10414] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 412.748610][T10414] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 412.821977][T10414] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 412.894873][T10350] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.920053][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.920304][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.006047][ T5899] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 413.017040][ C1] vkms_vblank_simulate: vblank timer overrun [ 413.182388][ T5899] usb 1-1: Using ep0 maxpacket: 8 [ 413.213477][ T5899] usb 1-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 413.213504][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.213519][ T5899] usb 1-1: Product: syz [ 413.213529][ T5899] usb 1-1: Manufacturer: syz [ 413.213540][ T5899] usb 1-1: SerialNumber: syz [ 413.220431][ T5899] usb 1-1: config 0 descriptor?? [ 413.233456][ T5899] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 413.398483][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 413.546127][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 413.600675][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 413.600720][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 413.600739][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 413.600796][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 413.600813][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 413.603343][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 413.603365][ T10] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 413.603423][ T10] usb 2-1: Manufacturer: syz [ 413.714980][ T10] usb 2-1: config 0 descriptor?? [ 413.751366][ T1029] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.751541][ T1029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.101321][ C1] vkms_vblank_simulate: vblank timer overrun [ 414.405315][ T10] rc_core: IR keymap rc-hauppauge not found [ 414.405609][ T10] Registered IR keymap rc-empty [ 414.405783][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 414.416258][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 414.457796][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 414.461547][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input10 [ 414.496446][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 414.534127][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 414.546779][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 414.566253][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 414.596422][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 414.616220][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 414.636212][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 414.656317][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 414.677809][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 414.696324][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 414.725287][ T10] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 414.725305][ T10] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 414.768859][ T58] hsr_slave_0: left promiscuous mode [ 414.805041][ T44] usb 2-1: USB disconnect, device number 6 [ 414.836877][ T58] hsr_slave_1: left promiscuous mode [ 414.936578][ T58] veth1_macvtap: left promiscuous mode [ 414.936698][ T58] veth0_macvtap: left promiscuous mode [ 414.936978][ T58] veth1_vlan: left promiscuous mode [ 414.937214][ T58] veth0_vlan: left promiscuous mode [ 414.966283][ T5899] gspca_sonixj: i2c_w8 err -71 [ 414.986390][ T5899] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 414.994419][ T5899] usb 1-1: USB disconnect, device number 3 [ 415.024452][ T10] usb 5-1: USB disconnect, device number 5 [ 417.252831][T10835] netlink: 'syz.0.1916': attribute type 10 has an invalid length. [ 418.376004][ T44] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 418.556241][ T44] usb 5-1: Using ep0 maxpacket: 16 [ 418.618167][ T44] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 418.618223][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 418.618264][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 418.618288][ T44] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 418.618312][ T44] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 418.620011][ T44] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 418.620031][ T44] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 418.620045][ T44] usb 5-1: Manufacturer: syz [ 418.624053][ T44] usb 5-1: config 0 descriptor?? [ 418.825047][ C1] vkms_vblank_simulate: vblank timer overrun [ 418.875659][ C1] vkms_vblank_simulate: vblank timer overrun [ 419.006010][ T44] rc_core: IR keymap rc-hauppauge not found [ 419.006032][ T44] Registered IR keymap rc-empty [ 419.008639][ T44] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 419.026135][ T44] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 419.047141][ T44] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 419.049112][ T44] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input11 [ 419.065825][ T44] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 419.086065][ T44] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 419.116064][ T44] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 419.136277][ T44] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 419.156797][ T44] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 419.179731][ T44] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 419.196075][ T44] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 419.216117][ T44] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 419.242722][ C1] vkms_vblank_simulate: vblank timer overrun [ 419.256705][ T44] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 419.276315][ T44] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 419.301682][ T44] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 419.301699][ T44] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 419.461144][ T44] usb 5-1: USB disconnect, device number 6 [ 419.595773][ C1] vkms_vblank_simulate: vblank timer overrun [ 422.111794][ C1] vkms_vblank_simulate: vblank timer overrun [ 422.161646][T10414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.886752][T10414] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.945572][ C1] vkms_vblank_simulate: vblank timer overrun [ 422.994964][ T768] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.010068][ T768] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.053063][ T3529] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.074404][ T3529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.213795][T10885] netlink: 'syz.1.1933': attribute type 10 has an invalid length. [ 423.488842][T10350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.604615][ C1] vkms_vblank_simulate: vblank timer overrun [ 423.749084][ C1] vkms_vblank_simulate: vblank timer overrun [ 424.312969][ C1] vkms_vblank_simulate: vblank timer overrun [ 424.836185][ T5811] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 425.178012][ T5811] usb 2-1: Using ep0 maxpacket: 16 [ 425.219555][ T5811] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 425.246114][ T5811] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 425.246158][ T5811] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 425.246180][ T5811] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 425.246204][ T5811] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 425.248353][ T5811] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 425.248385][ T5811] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 425.248406][ T5811] usb 2-1: Manufacturer: syz [ 425.324426][ T5811] usb 2-1: config 0 descriptor?? [ 425.582818][ C1] vkms_vblank_simulate: vblank timer overrun [ 425.728484][ C1] vkms_vblank_simulate: vblank timer overrun [ 426.250167][ C1] vkms_vblank_simulate: vblank timer overrun [ 426.470078][T10414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.716156][ T5811] rc_core: IR keymap rc-hauppauge not found [ 426.716181][ T5811] Registered IR keymap rc-empty [ 426.716342][ T5811] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 426.746186][ T5811] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 426.768328][ T5811] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 426.771525][ T5811] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input12 [ 426.822238][ T5811] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 426.836319][ T5811] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 426.867885][ T5811] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 426.896130][ T5811] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 426.926118][ T5811] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 426.963594][ T5811] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 426.977415][ T5811] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 427.006520][ T5811] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 427.026492][ T5811] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 427.046119][ T5811] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 427.078120][ T5811] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 427.078149][ T5811] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 427.109682][ T5811] usb 2-1: USB disconnect, device number 7 [ 427.355078][ C1] vkms_vblank_simulate: vblank timer overrun [ 428.705212][T10932] netlink: 'syz.4.1944': attribute type 10 has an invalid length. [ 428.731336][ T5815] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 428.750136][ T5815] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 428.770149][ T5815] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 428.794950][ T5815] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 428.796451][ T5815] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 429.142969][T10945] syz.4.1948 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 429.405732][ C1] vkms_vblank_simulate: vblank timer overrun [ 429.607399][ C1] vkms_vblank_simulate: vblank timer overrun [ 429.970693][ C1] vkms_vblank_simulate: vblank timer overrun [ 430.276026][ C1] vkms_vblank_simulate: vblank timer overrun [ 430.505243][ C1] vkms_vblank_simulate: vblank timer overrun [ 430.866159][ T5815] Bluetooth: hci5: command tx timeout [ 430.945065][ C1] vkms_vblank_simulate: vblank timer overrun [ 431.631149][ C1] vkms_vblank_simulate: vblank timer overrun [ 431.755488][ T5123] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 431.769296][ T5123] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 431.772078][ T5123] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 431.773310][ T5123] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 431.774678][ T5123] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 431.858397][ C1] vkms_vblank_simulate: vblank timer overrun [ 431.946807][ C1] vkms_vblank_simulate: vblank timer overrun [ 432.041963][T10967] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1951'. [ 432.284491][ C1] vkms_vblank_simulate: vblank timer overrun [ 433.021342][ T5123] Bluetooth: hci5: command tx timeout [ 433.396284][ C1] vkms_vblank_simulate: vblank timer overrun [ 433.829766][ T5123] Bluetooth: hci0: command tx timeout [ 435.036085][ T5123] Bluetooth: hci5: command tx timeout [ 435.044443][T11000] netlink: 388 bytes leftover after parsing attributes in process `syz.4.1963'. [ 435.906318][ T5123] Bluetooth: hci0: command tx timeout [ 438.091149][ T5123] Bluetooth: hci5: command tx timeout [ 438.091199][ T5123] Bluetooth: hci0: command tx timeout [ 438.989686][ T5815] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 440.227769][ T5815] Bluetooth: hci0: command tx timeout [ 440.473594][T11038] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1975'. [ 440.842002][T11044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1977'. [ 440.842046][T11044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1977'. [ 440.910608][T10933] chnl_net:caif_netlink_parms(): no params data found [ 440.920123][ T12] bridge_slave_1: left allmulticast mode [ 440.920171][ T12] bridge_slave_1: left promiscuous mode [ 440.920487][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.876656][T11050] tty tty1: ldisc open failed (-12), clearing slot 0 [ 442.037482][ T12] bridge_slave_0: left allmulticast mode [ 442.037514][ T12] bridge_slave_0: left promiscuous mode [ 442.037778][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.946978][ T5815] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 443.947117][ T5815] Bluetooth: hci3: Injecting HCI hardware error event [ 443.953226][ T5815] Bluetooth: hci3: hardware error 0x00 [ 444.374427][T11072] netlink: 'syz.0.1987': attribute type 10 has an invalid length. [ 445.851699][ C1] vkms_vblank_simulate: vblank timer overrun [ 445.970507][ C1] vkms_vblank_simulate: vblank timer overrun [ 446.027588][ C1] vkms_vblank_simulate: vblank timer overrun [ 446.044271][T11081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1989'. [ 446.044296][T11081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1989'. [ 446.240838][ T5815] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 446.440138][ C1] vkms_vblank_simulate: vblank timer overrun [ 447.055784][ C1] vkms_vblank_simulate: vblank timer overrun [ 447.089519][ C1] vkms_vblank_simulate: vblank timer overrun [ 447.238605][ C1] vkms_vblank_simulate: vblank timer overrun [ 447.308834][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 447.357009][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 447.357073][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 447.379591][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 447.409585][ T12] bond0 (unregistering): Released all slaves [ 447.537792][ C1] vkms_vblank_simulate: vblank timer overrun [ 447.685444][ C1] vkms_vblank_simulate: vblank timer overrun [ 447.833351][ C1] vkms_vblank_simulate: vblank timer overrun [ 447.877875][T10964] chnl_net:caif_netlink_parms(): no params data found [ 447.933469][ C1] vkms_vblank_simulate: vblank timer overrun [ 448.423683][ T12] hsr_slave_0: left promiscuous mode [ 448.436078][ T12] hsr_slave_1: left promiscuous mode [ 448.437116][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 448.492383][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 448.797916][ C1] vkms_vblank_simulate: vblank timer overrun [ 449.326555][ C1] vkms_vblank_simulate: vblank timer overrun [ 449.367205][ C1] vkms_vblank_simulate: vblank timer overrun [ 449.698368][ C1] vkms_vblank_simulate: vblank timer overrun [ 449.802880][ C1] vkms_vblank_simulate: vblank timer overrun [ 450.179478][ C1] vkms_vblank_simulate: vblank timer overrun [ 452.377006][T11130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2004'. [ 452.377038][T11130] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2004'. [ 453.527051][ T12] team0 (unregistering): Port device team_slave_1 removed [ 453.830564][ T12] team0 (unregistering): Port device team_slave_0 removed [ 458.940233][T11163] netlink: 380 bytes leftover after parsing attributes in process `syz.1.2016'. [ 460.707212][T10933] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.707432][T10933] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.707768][T10933] bridge_slave_0: entered allmulticast mode [ 460.710793][T10933] bridge_slave_0: entered promiscuous mode [ 460.774270][T10933] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.774439][T10933] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.774724][T10933] bridge_slave_1: entered allmulticast mode [ 460.804910][T10933] bridge_slave_1: entered promiscuous mode [ 461.806268][ T5811] IPVS: starting estimator thread 0... [ 462.359035][T11200] netlink: 380 bytes leftover after parsing attributes in process `syz.0.2026'. [ 462.381521][T11198] IPVS: using max 7 ests per chain, 16800 per kthread [ 465.722880][T11223] input: syz1 as /devices/virtual/input/input13 [ 466.707183][T10964] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.707324][T10964] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.707827][T10964] bridge_slave_0: entered allmulticast mode [ 466.711329][T10964] bridge_slave_0: entered promiscuous mode [ 466.737039][T10933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.761134][T10964] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.784788][T10964] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.785156][T10964] bridge_slave_1: entered allmulticast mode [ 466.806106][T10964] bridge_slave_1: entered promiscuous mode [ 466.814777][T10933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.711794][T11247] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2040'. [ 469.797246][T10964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 469.848195][T10933] team0: Port device team_slave_0 added [ 469.876586][T10964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 469.889018][T10933] team0: Port device team_slave_1 added [ 470.629472][T10964] team0: Port device team_slave_0 added [ 470.643639][T10933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 470.643666][T10933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 470.643703][T10933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 470.650071][T10964] team0: Port device team_slave_1 added [ 470.659435][T10933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.659456][T10933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 470.659492][T10933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 471.959174][T10964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 471.959192][T10964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 471.959215][T10964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 471.962276][T10964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 471.962289][T10964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 471.962310][T10964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.264945][T10933] hsr_slave_0: entered promiscuous mode [ 475.266866][T10933] hsr_slave_1: entered promiscuous mode [ 475.268019][T10933] debugfs: 'hsr0' already exists in 'hsr' [ 475.268049][T10933] Cannot create hsr debugfs directory [ 478.834738][T10964] hsr_slave_0: entered promiscuous mode [ 478.862824][T10964] hsr_slave_1: entered promiscuous mode [ 478.864127][T10964] debugfs: 'hsr0' already exists in 'hsr' [ 478.864158][T10964] Cannot create hsr debugfs directory [ 481.304233][T11365] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2066'. [ 481.670202][T11370] netlink: 'syz.0.2068': attribute type 10 has an invalid length. [ 481.756584][ T5899] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 481.906378][ T5899] usb 5-1: Using ep0 maxpacket: 8 [ 481.914078][ T5899] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 481.914157][ T5899] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 481.914178][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 481.914200][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 481.914221][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 481.914240][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 481.914256][ T5899] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 482.020969][ T5899] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 482.021018][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.021039][ T5899] usb 5-1: Product: syz [ 482.021053][ T5899] usb 5-1: Manufacturer: syz [ 482.021066][ T5899] usb 5-1: SerialNumber: syz [ 482.080913][ T5899] usb 5-1: config 0 descriptor?? [ 482.082184][T11368] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 482.103091][ T5899] ati_remote 5-1:0.0: Initializing ati_remote hardware failed. [ 482.103377][ T5899] ati_remote 5-1:0.0: probe with driver ati_remote failed with error -5 [ 482.323346][ T5899] usb 5-1: USB disconnect, device number 7 [ 482.918395][ T12] bridge_slave_1: left allmulticast mode [ 482.918424][ T12] bridge_slave_1: left promiscuous mode [ 482.918619][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.007615][ T12] bridge_slave_0: left allmulticast mode [ 483.007649][ T12] bridge_slave_0: left promiscuous mode [ 483.007878][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.758646][ C0] vkms_vblank_simulate: vblank timer overrun [ 484.060586][ C0] vkms_vblank_simulate: vblank timer overrun [ 484.401724][ C0] vkms_vblank_simulate: vblank timer overrun [ 485.116227][ C0] vkms_vblank_simulate: vblank timer overrun [ 485.268020][ C0] vkms_vblank_simulate: vblank timer overrun [ 485.712863][ C0] vkms_vblank_simulate: vblank timer overrun [ 486.014542][ C0] vkms_vblank_simulate: vblank timer overrun [ 486.610312][ T5123] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 486.627191][ T5123] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 486.628545][ T5123] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 486.631255][ T5123] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 486.633161][ T5123] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 487.289643][ T5815] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 487.294595][ T5815] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 487.300982][ T5815] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 487.313380][ T5815] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 487.314488][ T5815] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 488.209549][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 488.285376][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 488.342856][ T12] bond0 (unregistering): Released all slaves [ 488.724457][ T5815] Bluetooth: hci1: command tx timeout [ 489.056071][ T12] hsr_slave_0: left promiscuous mode [ 489.289380][ T12] hsr_slave_1: left promiscuous mode [ 489.291566][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 489.357599][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 489.381997][ T5815] Bluetooth: hci6: command tx timeout [ 490.813774][ T5815] Bluetooth: hci1: command tx timeout [ 491.432497][ T5815] Bluetooth: hci6: command tx timeout [ 491.656501][ T5123] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 491.688299][ T5123] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 491.690563][ T5123] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 491.693646][ T5123] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 491.694558][ T5123] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 492.007147][ T12] team0 (unregistering): Port device team_slave_1 removed [ 492.250550][ T12] team0 (unregistering): Port device team_slave_0 removed [ 492.874492][ T5815] Bluetooth: hci1: command tx timeout [ 493.526246][ T5815] Bluetooth: hci6: command tx timeout [ 493.826370][ T5815] Bluetooth: hci7: command tx timeout [ 494.946736][ T5815] Bluetooth: hci1: command tx timeout [ 495.586152][ T5815] Bluetooth: hci6: command tx timeout [ 495.940170][ T5123] Bluetooth: hci7: command tx timeout [ 497.986775][ T5815] Bluetooth: hci7: command tx timeout [ 499.075488][T11473] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 500.068272][ T5815] Bluetooth: hci7: command tx timeout [ 500.682372][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.793247][T11406] chnl_net:caif_netlink_parms(): no params data found [ 500.824471][T11404] chnl_net:caif_netlink_parms(): no params data found [ 501.154266][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.885555][T11331] Bluetooth: Error in BCSP hdr checksum [ 502.453802][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.058532][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.316799][T11437] chnl_net:caif_netlink_parms(): no params data found [ 504.083497][ T5123] Bluetooth: hci4: command 0x1003 tx timeout [ 504.083977][ T5815] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 504.972397][T11406] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.016047][T11406] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.604424][T11406] bridge_slave_0: entered allmulticast mode [ 505.618199][T11406] bridge_slave_0: entered promiscuous mode [ 505.620073][T11404] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.620221][T11404] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.620415][T11404] bridge_slave_0: entered allmulticast mode [ 505.654228][T11404] bridge_slave_0: entered promiscuous mode [ 505.777227][T11406] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.777332][T11406] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.777490][T11406] bridge_slave_1: entered allmulticast mode [ 505.779334][T11406] bridge_slave_1: entered promiscuous mode [ 505.785050][T11404] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.785176][T11404] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.785462][T11404] bridge_slave_1: entered allmulticast mode [ 505.848012][T11404] bridge_slave_1: entered promiscuous mode [ 507.821913][T11406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 507.907223][T11404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 508.582368][T11406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 508.595753][T11404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 508.792138][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 508.792224][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 509.991300][T11437] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.991425][T11437] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.991724][T11437] bridge_slave_0: entered allmulticast mode [ 509.997024][T11437] bridge_slave_0: entered promiscuous mode [ 511.042516][T11437] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.042659][T11437] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.042931][T11437] bridge_slave_1: entered allmulticast mode [ 511.046223][T11437] bridge_slave_1: entered promiscuous mode [ 511.102024][T11406] team0: Port device team_slave_0 added [ 511.113416][T11404] team0: Port device team_slave_0 added [ 512.266732][T11404] team0: Port device team_slave_1 added [ 512.269968][T11406] team0: Port device team_slave_1 added [ 513.249649][T11437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 513.600834][T11437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 513.601135][ T12] bridge_slave_1: left allmulticast mode [ 513.601159][ T12] bridge_slave_1: left promiscuous mode [ 513.601386][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.698547][ T12] bridge_slave_0: left allmulticast mode [ 513.698584][ T12] bridge_slave_0: left promiscuous mode [ 513.698885][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.771006][ T12] bond2: left allmulticast mode [ 513.771035][ T12] bond2: left promiscuous mode [ 513.772123][ T12] bridge1: port 1(bond2) entered disabled state [ 513.776060][ T5823] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 513.850621][ T12] bond3: left allmulticast mode [ 513.850667][ T12] bond3: left promiscuous mode [ 513.850941][ T12] bridge2: port 1(bond3) entered disabled state [ 513.936113][ T5823] usb 5-1: Using ep0 maxpacket: 8 [ 513.941672][ T5823] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 513.941766][ T5823] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 513.941793][ T5823] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 513.941818][ T5823] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 513.941844][ T5823] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 513.944500][ T5823] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 513.944527][ T5823] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.944545][ T5823] usb 5-1: Product: syz [ 513.944554][ T5823] usb 5-1: Manufacturer: syz [ 513.944564][ T5823] usb 5-1: SerialNumber: syz [ 513.950236][ T5823] usb 5-1: config 0 descriptor?? [ 513.951597][T11624] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 513.956917][ T5823] ati_remote 5-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 514.159555][ T5823] usb 5-1: USB disconnect, device number 8 [ 514.456680][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 514.547261][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 514.608844][ T12] bond0 (unregistering): Released all slaves [ 515.618146][ T12] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 515.633396][ T12] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 515.782330][T11649] netlink: 'syz.4.2165': attribute type 10 has an invalid length. [ 517.276856][ T12] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 517.318112][ T12] bond0 (unregistering): Released all slaves [ 518.161958][ T12] bond1 (unregistering): Released all slaves [ 518.182294][ T12] bond2 (unregistering): Released all slaves [ 518.213147][ T12] bond3 (unregistering): Released all slaves [ 518.267614][T11404] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 518.267631][T11404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 518.267653][T11404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 518.270751][T11406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 518.270766][T11406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 518.270786][T11406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 518.820836][T11649] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 518.821367][T11649] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 518.822690][T11404] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 518.822703][T11404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 518.822725][T11404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 518.827694][T11406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 518.827712][T11406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 518.827750][T11406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 519.059576][ T12] rxrpc: Call ffff8880337a6040 still in use (1,Complete,1409,0)! [ 519.368764][T11437] team0: Port device team_slave_0 added [ 519.410070][T11437] team0: Port device team_slave_1 added [ 520.081289][T11404] hsr_slave_0: entered promiscuous mode [ 520.082436][T11404] hsr_slave_1: entered promiscuous mode [ 520.083222][T11404] debugfs: 'hsr0' already exists in 'hsr' [ 520.083249][T11404] Cannot create hsr debugfs directory [ 520.093142][T11406] hsr_slave_0: entered promiscuous mode [ 520.094940][T11406] hsr_slave_1: entered promiscuous mode [ 520.096560][T11406] debugfs: 'hsr0' already exists in 'hsr' [ 520.096593][T11406] Cannot create hsr debugfs directory [ 520.098915][T11437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 520.098943][T11437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.098977][T11437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 520.106658][T11437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 520.106672][T11437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.106709][T11437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 520.692545][T11437] hsr_slave_0: entered promiscuous mode [ 520.693771][T11437] hsr_slave_1: entered promiscuous mode [ 520.694559][T11437] debugfs: 'hsr0' already exists in 'hsr' [ 520.694591][T11437] Cannot create hsr debugfs directory [ 522.274414][T11404] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 522.329502][T11404] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 522.427056][T11404] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 522.536787][T11404] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 522.887537][T11437] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 522.938917][T11437] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 522.989547][T11437] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 523.198773][T11437] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 523.862997][T11406] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 523.913299][T11406] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 524.066214][T11406] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 524.122484][T11406] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 524.410722][T11404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.530696][T11404] 8021q: adding VLAN 0 to HW filter on device team0 [ 524.569436][ T1449] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.570411][ T1449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.593812][ T1449] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.603327][ T1449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.619242][T11437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.774647][T11437] 8021q: adding VLAN 0 to HW filter on device team0 [ 524.843319][T11331] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.843471][T11331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 525.686874][T11406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 525.802291][T11343] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.802513][T11343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 525.891820][T11406] 8021q: adding VLAN 0 to HW filter on device team0 [ 527.136841][ T1449] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.137024][ T1449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 527.286270][T11770] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.286418][T11770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 528.389848][T11779] vxfs: WRONG superblock magic 00000000 at 1 [ 528.428123][T11779] vxfs: WRONG superblock magic 00000000 at 8 [ 528.428201][T11779] vxfs: can't find superblock. [ 528.601963][T11778] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 529.518704][T11437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 529.573784][T11404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 529.605670][T11406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 533.655070][T11406] veth0_vlan: entered promiscuous mode [ 533.663004][T11404] veth0_vlan: entered promiscuous mode [ 533.664900][T11437] veth0_vlan: entered promiscuous mode [ 533.766855][T11406] veth1_vlan: entered promiscuous mode [ 533.775410][T11404] veth1_vlan: entered promiscuous mode [ 533.784605][T11437] veth1_vlan: entered promiscuous mode [ 533.936651][T11406] veth0_macvtap: entered promiscuous mode [ 533.952498][T11437] veth0_macvtap: entered promiscuous mode [ 533.967080][T11404] veth0_macvtap: entered promiscuous mode [ 533.973396][T11406] veth1_macvtap: entered promiscuous mode [ 534.155157][T11437] veth1_macvtap: entered promiscuous mode [ 534.275044][T11404] veth1_macvtap: entered promiscuous mode [ 535.018043][T11406] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 535.069237][T11437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 535.077762][T11406] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 535.118754][T11404] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 535.140851][T11437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 535.415706][T11404] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 535.509089][T11337] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.527796][T11337] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.558128][T11340] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.593283][T11340] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.610626][T11340] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.647228][ T5123] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 535.656383][T11340] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.673264][ T5123] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 535.686261][ T5123] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 535.690638][ T5123] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 535.712544][ T5123] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 535.817402][T11340] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.938561][ T1449] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.129684][ T1431] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.156616][ T1431] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.213318][ T1431] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.364742][ T1431] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.923840][T11335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 536.923862][T11335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.036281][ T768] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.036302][ T768] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.154195][T11335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.154223][T11335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.368230][ T1406] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.368255][ T1406] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.516996][ T5123] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 537.521993][ T5123] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 537.543967][ T5123] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 537.548140][ T5123] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 537.548879][ T5123] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 537.595711][ T1406] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.595735][ T1406] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.689034][ T1406] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.689057][ T1406] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.695621][T11896] chnl_net:caif_netlink_parms(): no params data found [ 537.826110][ T5123] Bluetooth: hci0: command tx timeout [ 538.058129][T11915] netlink: 'syz.8.2078': attribute type 10 has an invalid length. [ 538.288131][T11915] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 538.386442][T11922] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2209'. [ 538.475203][T11896] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.475384][T11896] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.475596][T11896] bridge_slave_0: entered allmulticast mode [ 538.488648][T11896] bridge_slave_0: entered promiscuous mode [ 538.519312][T11896] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.519929][T11896] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.520160][T11896] bridge_slave_1: entered allmulticast mode [ 538.523072][T11896] bridge_slave_1: entered promiscuous mode [ 538.790095][ C1] vkms_vblank_simulate: vblank timer overrun [ 539.053477][ C1] vkms_vblank_simulate: vblank timer overrun [ 539.188597][ C1] vkms_vblank_simulate: vblank timer overrun [ 539.448620][ C1] vkms_vblank_simulate: vblank timer overrun [ 539.616028][ T5123] Bluetooth: hci2: command tx timeout [ 539.902825][ C1] vkms_vblank_simulate: vblank timer overrun [ 539.910347][ T5123] Bluetooth: hci0: command tx timeout [ 540.214186][T11896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 540.526501][ C1] vkms_vblank_simulate: vblank timer overrun [ 540.546335][T11896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 540.596084][ T5960] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 541.054914][ C1] vkms_vblank_simulate: vblank timer overrun [ 541.371757][ C1] vkms_vblank_simulate: vblank timer overrun [ 541.395413][ T5960] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 541.395449][ T5960] usb 8-1: config 0 has no interfaces? [ 541.426689][ T5960] usb 8-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=4c.b3 [ 541.426725][ T5960] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.426746][ T5960] usb 8-1: Product: syz [ 541.426761][ T5960] usb 8-1: Manufacturer: syz [ 541.426775][ T5960] usb 8-1: SerialNumber: syz [ 541.462690][ T5960] usb 8-1: config 0 descriptor?? [ 541.775937][ C1] vkms_vblank_simulate: vblank timer overrun [ 541.777629][ T5123] Bluetooth: hci2: command tx timeout [ 541.996110][ T5123] Bluetooth: hci0: command tx timeout [ 542.533294][T11976] netlink: 'syz.8.2218': attribute type 10 has an invalid length. [ 542.535127][T11896] team0: Port device team_slave_0 added [ 542.574394][T11896] team0: Port device team_slave_1 added [ 543.352382][ C1] vkms_vblank_simulate: vblank timer overrun [ 543.435427][T11896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 543.435452][T11896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.435473][T11896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 543.720300][T11896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 543.720323][T11896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.720355][T11896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 543.826209][ T5123] Bluetooth: hci2: command tx timeout [ 544.066172][ T5123] Bluetooth: hci0: command tx timeout [ 544.320444][ T5811] usb 8-1: USB disconnect, device number 2 [ 544.419062][T11896] hsr_slave_0: entered promiscuous mode [ 544.423688][T11896] hsr_slave_1: entered promiscuous mode [ 544.424880][T11896] debugfs: 'hsr0' already exists in 'hsr' [ 544.424906][T11896] Cannot create hsr debugfs directory [ 544.466199][T11904] chnl_net:caif_netlink_parms(): no params data found [ 545.005824][ C1] vkms_vblank_simulate: vblank timer overrun [ 545.145338][ C1] vkms_vblank_simulate: vblank timer overrun [ 545.759804][ C1] vkms_vblank_simulate: vblank timer overrun [ 545.906316][ T5123] Bluetooth: hci2: command tx timeout [ 546.056062][ C1] vkms_vblank_simulate: vblank timer overrun [ 548.466968][ T38] audit: type=1326 audit(547.968:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12034 comm="syz.6.2228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb590c9efc9 code=0x7ffc0000 [ 548.467058][ T38] audit: type=1326 audit(547.968:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12034 comm="syz.6.2228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb590c9efc9 code=0x7ffc0000 [ 548.467107][ T38] audit: type=1326 audit(547.968:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12034 comm="syz.6.2228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7fb590c9efc9 code=0x7ffc0000 [ 548.467154][ T38] audit: type=1326 audit(547.968:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12034 comm="syz.6.2228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb590c9efc9 code=0x7ffc0000 [ 548.467211][ T38] audit: type=1326 audit(547.968:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12034 comm="syz.6.2228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb590c9efc9 code=0x7ffc0000 [ 548.467259][ T38] audit: type=1326 audit(547.968:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12034 comm="syz.6.2228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb590c9efc9 code=0x7ffc0000 [ 548.467304][ T38] audit: type=1326 audit(547.968:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12034 comm="syz.6.2228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb590c9efc9 code=0x7ffc0000 [ 548.467351][ T38] audit: type=1326 audit(547.968:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12034 comm="syz.6.2228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb590c9efc9 code=0x7ffc0000 [ 548.467507][ T38] audit: type=1326 audit(547.968:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12034 comm="syz.6.2228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb590c9efc9 code=0x7ffc0000 [ 548.467557][ T38] audit: type=1326 audit(547.968:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12034 comm="syz.6.2228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb590c9efc9 code=0x7ffc0000 [ 550.237023][T11904] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.237172][T11904] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.237483][T11904] bridge_slave_0: entered allmulticast mode [ 550.240661][T11904] bridge_slave_0: entered promiscuous mode [ 550.285429][T11904] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.285659][T11904] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.300459][T11904] bridge_slave_1: entered allmulticast mode [ 550.303709][T11904] bridge_slave_1: entered promiscuous mode [ 552.197407][T12059] netlink: 'syz.8.2236': attribute type 10 has an invalid length. [ 552.434734][T11904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 552.483497][T11904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 552.836512][ T5899] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 552.843453][T11904] team0: Port device team_slave_0 added [ 552.934243][T11904] team0: Port device team_slave_1 added [ 553.047709][ T5899] usb 9-1: config index 0 descriptor too short (expected 45, got 36) [ 553.047780][ T5899] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 553.047807][ T5899] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 553.047835][ T5899] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 553.047863][ T5899] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 553.047907][ T5899] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 553.047929][ T5899] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.171048][ T5899] usb 9-1: config 0 descriptor?? [ 553.171987][T12067] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 553.644755][ T5899] plantronics 0003:047F:FFFF.0005: reserved main item tag 0xd [ 553.692920][T11904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 553.692936][T11904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 553.692955][T11904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 553.839046][ T5899] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 553.942135][T11904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 553.942157][T11904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 553.942184][T11904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 553.947900][T10919] usb 9-1: USB disconnect, device number 2 [ 554.404278][T11896] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 554.574425][T11904] hsr_slave_0: entered promiscuous mode [ 554.578353][T11904] hsr_slave_1: entered promiscuous mode [ 554.579643][T11904] debugfs: 'hsr0' already exists in 'hsr' [ 554.579674][T11904] Cannot create hsr debugfs directory [ 554.582953][T11896] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 554.674107][T11896] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 557.749028][T11896] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 558.084815][T12099] netlink: 'syz.8.2247': attribute type 10 has an invalid length. [ 558.535771][T12112] erspan0: entered promiscuous mode [ 558.846641][ C1] vkms_vblank_simulate: vblank timer overrun [ 559.906592][ C1] vkms_vblank_simulate: vblank timer overrun [ 560.111204][ C1] vkms_vblank_simulate: vblank timer overrun [ 560.594640][ C1] vkms_vblank_simulate: vblank timer overrun [ 560.651050][ C1] vkms_vblank_simulate: vblank timer overrun [ 560.922164][ C1] vkms_vblank_simulate: vblank timer overrun [ 563.112890][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 563.754495][T12149] netlink: 'syz.6.2264': attribute type 3 has an invalid length. [ 563.754534][T12149] netlink: 'syz.6.2264': attribute type 1 has an invalid length. [ 563.754548][T12149] netlink: 60387 bytes leftover after parsing attributes in process `syz.6.2264'. [ 565.146087][ T10] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 565.304403][ T10] usb 8-1: config 0 has an invalid interface number: 244 but max is 0 [ 565.304441][ T10] usb 8-1: config 0 has no interface number 0 [ 565.323345][ T10] usb 8-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=92.c2 [ 565.323382][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.323404][ T10] usb 8-1: Product: syz [ 565.323420][ T10] usb 8-1: Manufacturer: syz [ 565.323437][ T10] usb 8-1: SerialNumber: syz [ 565.367051][ T10] usb 8-1: config 0 descriptor?? [ 565.371634][ T10] usbserial_generic 8-1:0.244: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 565.371666][ T10] usbserial_generic 8-1:0.244: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 565.371719][ T10] usbserial_generic 8-1:0.244: device has no bulk endpoints [ 565.372844][ T10] safe_serial 8-1:0.244: safe_serial converter detected [ 565.373064][ T10] safe_serial 8-1:0.244: probe with driver safe_serial failed with error -22 [ 566.096873][ T10] usb 8-1: USB disconnect, device number 3 [ 566.273434][T12175] netlink: 'syz.8.2273': attribute type 3 has an invalid length. [ 566.273463][T12175] netlink: 'syz.8.2273': attribute type 1 has an invalid length. [ 566.273478][T12175] netlink: 60387 bytes leftover after parsing attributes in process `syz.8.2273'. [ 567.711994][T12195] netlink: 'syz.7.2282': attribute type 3 has an invalid length. [ 567.712025][T12195] netlink: 'syz.7.2282': attribute type 1 has an invalid length. [ 567.712041][T12195] netlink: 60387 bytes leftover after parsing attributes in process `syz.7.2282'. [ 567.716631][T11896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 568.053744][T11896] 8021q: adding VLAN 0 to HW filter on device team0 [ 568.215505][ T3618] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.215721][ T3618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 568.294804][T11333] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.294949][T11333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 568.317445][T11904] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 568.432699][T11904] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 568.515637][T11904] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 568.593125][T11904] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 569.505371][T11904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 569.598332][T11904] 8021q: adding VLAN 0 to HW filter on device team0 [ 569.623264][T11340] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.638182][T11340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 569.673304][ T3618] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.701547][ T3618] bridge0: port 2(bridge_slave_1) entered forwarding state [ 570.569148][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 570.569765][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 571.101809][T11896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 571.337645][T12238] netlink: 'syz.6.2293': attribute type 3 has an invalid length. [ 571.337671][T12238] netlink: 'syz.6.2293': attribute type 1 has an invalid length. [ 571.337684][T12238] netlink: 60387 bytes leftover after parsing attributes in process `syz.6.2293'. [ 571.636200][T11904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 571.904254][T11904] veth0_vlan: entered promiscuous mode [ 571.939448][T11904] veth1_vlan: entered promiscuous mode [ 572.152853][T11904] veth0_macvtap: entered promiscuous mode [ 572.211224][T11904] veth1_macvtap: entered promiscuous mode [ 572.250347][T11896] veth0_vlan: entered promiscuous mode [ 572.330192][T11896] veth1_vlan: entered promiscuous mode [ 572.411633][T11904] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 572.456335][T11904] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 572.532044][T11337] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.540086][T12262] netlink: 'syz.8.2303': attribute type 3 has an invalid length. [ 572.540117][T12262] netlink: 'syz.8.2303': attribute type 1 has an invalid length. [ 572.540133][T12262] netlink: 60387 bytes leftover after parsing attributes in process `syz.8.2303'. [ 572.578960][T11337] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.787129][T11337] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.887762][T11337] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.930777][ T44] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 574.070006][T11896] veth0_macvtap: entered promiscuous mode [ 574.332743][T11896] veth1_macvtap: entered promiscuous mode [ 574.386297][ T44] usb 8-1: Using ep0 maxpacket: 16 [ 574.399939][ T44] usb 8-1: config 0 has an invalid interface number: 237 but max is 0 [ 574.399984][ T44] usb 8-1: config 0 has no interface number 0 [ 574.400026][ T44] usb 8-1: config 0 interface 237 has no altsetting 0 [ 574.403459][ T44] usb 8-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [ 574.403497][ T44] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.403540][ T44] usb 8-1: Product: syz [ 574.403559][ T44] usb 8-1: Manufacturer: syz [ 574.403579][ T44] usb 8-1: SerialNumber: syz [ 574.483290][T12273] snd_dummy snd_dummy.0: control 4:2:0:syz1:211 is already present [ 574.570186][ T44] usb 8-1: config 0 descriptor?? [ 574.674159][ T44] snd_usb_podhd 8-1:0.237: Line 6 POD HD300 found [ 574.818323][ T44] snd_usb_podhd 8-1:0.237: cannot get proper max packet size [ 574.875296][ T44] snd_usb_podhd 8-1:0.237: Line 6 POD HD300 now disconnected [ 574.904729][ T44] snd_usb_podhd 8-1:0.237: probe with driver snd_usb_podhd failed with error -22 [ 574.928187][ T819] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.928215][ T819] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.985324][T11896] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 575.019198][ T5811] usb 8-1: USB disconnect, device number 4 [ 575.207336][T11896] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 575.238292][ T3618] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.238319][ T3618] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.298671][ T3618] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.299495][ T3618] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.300608][ T3618] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.302388][ T3618] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.018029][T11337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 576.018059][T11337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.729309][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.729336][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 581.083494][T12294] netlink: 'syz.8.2312': attribute type 3 has an invalid length. [ 581.083527][T12294] netlink: 'syz.8.2312': attribute type 1 has an invalid length. [ 581.083542][T12294] netlink: 60387 bytes leftover after parsing attributes in process `syz.8.2312'. [ 587.174345][T12329] netlink: 'syz.8.2323': attribute type 3 has an invalid length. [ 587.174372][T12329] netlink: 'syz.8.2323': attribute type 1 has an invalid length. [ 587.174387][T12329] netlink: 60387 bytes leftover after parsing attributes in process `syz.8.2323'. [ 590.177241][T12359] snd_dummy snd_dummy.0: control 4:2:0:syz1:211 is already present [ 590.244771][T12364] netlink: 'syz.7.2336': attribute type 3 has an invalid length. [ 590.244799][T12364] netlink: 'syz.7.2336': attribute type 1 has an invalid length. [ 590.244815][T12364] netlink: 60387 bytes leftover after parsing attributes in process `syz.7.2336'. [ 591.456028][ T5960] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 591.636566][ T5960] usb 8-1: Using ep0 maxpacket: 16 [ 591.646445][ T5960] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 591.646517][ T5960] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 591.646548][ T5960] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 591.646571][ T5960] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 591.646597][ T5960] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 591.716594][ T5960] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 591.716619][ T5960] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 591.716643][ T5960] usb 8-1: Manufacturer: syz [ 591.764049][ T5960] usb 8-1: config 0 descriptor?? [ 592.605993][ T5960] rc_core: IR keymap rc-hauppauge not found [ 592.606024][ T5960] Registered IR keymap rc-empty [ 592.606173][ T5960] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 592.628861][ T5960] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 592.658786][ T5960] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 592.661805][ T5960] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input16 [ 592.784522][ T5960] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 592.822815][ T5960] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 592.836656][ T5960] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 592.856400][ T5960] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 592.915382][ T5960] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 592.926608][ T5960] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 592.946339][ T5960] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 592.996130][ T5960] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 593.039335][ T5960] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 593.056749][ T5960] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 593.082875][ T5960] mceusb 8-1:0.0: Registered with mce emulator interface version 1 [ 593.082902][ T5960] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 593.128458][ T5960] usb 8-1: USB disconnect, device number 5 [ 594.950174][T12406] netlink: 'syz.9.2349': attribute type 3 has an invalid length. [ 594.950222][T12406] netlink: 'syz.9.2349': attribute type 1 has an invalid length. [ 594.950237][T12406] netlink: 60387 bytes leftover after parsing attributes in process `syz.9.2349'. [ 596.481010][T12418] snd_dummy snd_dummy.0: control 4:2:0:syz1:211 is already present [ 598.255978][ T5960] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 598.426259][ T5960] usb 7-1: Using ep0 maxpacket: 16 [ 598.443832][ T5960] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 598.443887][ T5960] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 598.443907][ T5960] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 598.443925][ T5960] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 598.443941][ T5960] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 598.449656][ T5960] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 598.449678][ T5960] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 598.449693][ T5960] usb 7-1: Manufacturer: syz [ 598.549829][ T5960] usb 7-1: config 0 descriptor?? [ 600.116133][ T5960] rc_core: IR keymap rc-hauppauge not found [ 600.116195][ T5960] Registered IR keymap rc-empty [ 600.116361][ T5960] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 600.136258][ T5960] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 600.158314][ T5960] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 600.160268][ T5960] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input17 [ 600.226465][ T5960] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 600.247708][ T5960] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 600.291019][ T5960] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 600.306229][ T5960] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 600.336222][ T5960] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 600.367750][ T5960] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 600.396249][ T5960] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 600.416035][ T5960] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 600.436157][ T5960] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 600.456037][ T5960] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 600.459335][T12457] netlink: 'syz.2.2365': attribute type 3 has an invalid length. [ 600.459360][T12457] netlink: 'syz.2.2365': attribute type 1 has an invalid length. [ 600.459376][T12457] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.2365'. [ 600.508875][ T5960] mceusb 7-1:0.0: Registered with mce emulator interface version 1 [ 600.508895][ T5960] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 600.731109][ T1232] usb 7-1: USB disconnect, device number 3 [ 601.174850][ T38] kauditd_printk_skb: 1 callbacks suppressed [ 601.174886][ T38] audit: type=1326 audit(600.778:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12461 comm="syz.8.2367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cf17efc9 code=0x7ffc0000 [ 601.260430][ T38] audit: type=1326 audit(600.818:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12461 comm="syz.8.2367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cf17efc9 code=0x7ffc0000 [ 601.260502][ T38] audit: type=1326 audit(600.838:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12461 comm="syz.8.2367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9cf17efc9 code=0x7ffc0000 [ 601.260548][ T38] audit: type=1326 audit(600.838:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12461 comm="syz.8.2367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cf17efc9 code=0x7ffc0000 [ 601.260591][ T38] audit: type=1326 audit(600.838:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12461 comm="syz.8.2367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cf17efc9 code=0x7ffc0000 [ 601.260632][ T38] audit: type=1326 audit(600.838:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12461 comm="syz.8.2367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fa9cf17efc9 code=0x7ffc0000 [ 601.260674][ T38] audit: type=1326 audit(600.838:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12461 comm="syz.8.2367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cf17efc9 code=0x7ffc0000 [ 601.260718][ T38] audit: type=1326 audit(600.838:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12461 comm="syz.8.2367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fa9cf17efc9 code=0x7ffc0000 [ 601.260763][ T38] audit: type=1326 audit(600.838:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12461 comm="syz.8.2367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cf17efc9 code=0x7ffc0000 [ 601.260809][ T38] audit: type=1326 audit(600.838:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12461 comm="syz.8.2367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cf17efc9 code=0x7ffc0000 [ 603.666105][ T1232] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 603.841059][ T1232] usb 8-1: config index 0 descriptor too short (expected 45, got 36) [ 603.841108][ T1232] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 603.841127][ T1232] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 603.841145][ T1232] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 603.841163][ T1232] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 603.841193][ T1232] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 603.841209][ T1232] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.845135][ T1232] usb 8-1: config 0 descriptor?? [ 603.846391][T12481] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 604.015965][T10919] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 604.177322][ T10] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 604.193780][T10919] usb 10-1: Using ep0 maxpacket: 32 [ 604.229656][T10919] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 604.229698][T10919] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 604.229744][T10919] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 604.229770][T10919] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.287455][T10919] usb 10-1: config 0 descriptor?? [ 604.295200][T10919] hub 10-1:0.0: USB hub found [ 604.298054][ T1232] plantronics 0003:047F:FFFF.0006: reserved main item tag 0xd [ 604.380310][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 604.380374][ T10] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 604.380413][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 604.492696][ T10] usb 7-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 604.492736][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.492759][ T10] usb 7-1: Product: syz [ 604.492776][ T10] usb 7-1: Manufacturer: syz [ 604.492792][ T10] usb 7-1: SerialNumber: syz [ 604.554938][T10919] hub 10-1:0.0: 1 port detected [ 604.570715][ T10] usb 7-1: config 0 descriptor?? [ 604.634788][ T1232] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 604.662754][ T10] dm9601 7-1:0.0: probe with driver dm9601 failed with error -22 [ 604.759148][ C1] raw-gadget.1 gadget.9: ignoring, device is not running [ 604.764991][ C1] raw-gadget.1 gadget.9: ignoring, device is not running [ 604.765376][ C1] raw-gadget.1 gadget.9: ignoring, device is not running [ 604.789095][T10919] hub 10-1:0.0: hub_hub_status failed (err = -71) [ 604.789151][T10919] hub 10-1:0.0: config failed, can't get hub status (err -71) [ 604.815226][T10919] usbhid 10-1:0.0: can't add hid device: -71 [ 604.815363][T10919] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 604.880024][T10919] usb 10-1: USB disconnect, device number 2 [ 604.910033][ T1232] usb 8-1: USB disconnect, device number 6 [ 605.526062][ T1232] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 605.694553][ T1232] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 605.694628][ T1232] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 605.694656][ T1232] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.731522][ T1232] usb 9-1: config 0 descriptor?? [ 605.761007][ T1232] pwc: Askey VC010 type 2 USB webcam detected. [ 606.202887][ T1232] pwc: recv_control_msg error -32 req 02 val 2b00 [ 606.204967][ T1232] pwc: recv_control_msg error -32 req 02 val 2700 [ 606.219219][ T1232] pwc: recv_control_msg error -32 req 02 val 2c00 [ 606.219917][ T1232] pwc: recv_control_msg error -32 req 04 val 1000 [ 606.220676][ T1232] pwc: recv_control_msg error -32 req 04 val 1300 [ 606.221439][ T1232] pwc: recv_control_msg error -32 req 04 val 1400 [ 606.222322][ T1232] pwc: recv_control_msg error -32 req 02 val 2000 [ 606.235994][ T1232] pwc: recv_control_msg error -32 req 02 val 2100 [ 606.261882][ T1232] pwc: recv_control_msg error -32 req 04 val 1500 [ 606.468664][ T1232] pwc: recv_control_msg error -71 req 02 val 2400 [ 606.469200][ T1232] pwc: recv_control_msg error -71 req 02 val 2600 [ 606.469699][ T1232] pwc: recv_control_msg error -71 req 02 val 2900 [ 606.470370][ T1232] pwc: recv_control_msg error -71 req 02 val 2800 [ 606.471036][ T1232] pwc: recv_control_msg error -71 req 04 val 1100 [ 606.471500][ T1232] pwc: recv_control_msg error -71 req 04 val 1200 [ 606.545147][ T1232] pwc: Registered as video103. [ 606.553899][ T1232] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input19 [ 606.572984][ T1232] usb 9-1: USB disconnect, device number 3 [ 606.909545][T11408] usb 7-1: USB disconnect, device number 4 [ 607.079703][ T10] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 607.295984][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 607.327564][ T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 607.327671][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 607.327699][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 607.327714][ T10] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 607.327731][ T10] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 607.412145][ T10] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 607.412174][ T10] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 607.412189][ T10] usb 8-1: Manufacturer: syz [ 607.465251][ T10] usb 8-1: config 0 descriptor?? [ 607.466136][ T5960] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 607.639077][ T5960] usb 9-1: config index 0 descriptor too short (expected 45, got 36) [ 607.639148][ T5960] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 607.639179][ T5960] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 607.639206][ T5960] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 607.639233][ T5960] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 607.639267][ T5960] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 607.639290][ T5960] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.732813][ T5960] usb 9-1: config 0 descriptor?? [ 607.872658][T12532] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 608.245987][ T10] rc_core: IR keymap rc-hauppauge not found [ 608.246009][ T10] Registered IR keymap rc-empty [ 608.246170][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 608.266031][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 608.287335][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 608.340706][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input20 [ 608.476938][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 608.485577][ T5960] plantronics 0003:047F:FFFF.0007: reserved main item tag 0xd [ 608.496402][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 608.516097][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 608.536050][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 608.557505][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 608.576116][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 608.596027][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 608.616034][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 608.638461][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 608.639931][ T5960] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 608.665557][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 608.690927][ T10] mceusb 8-1:0.0: Registered with mce emulator interface version 1 [ 608.691323][ T10] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 608.777613][ T5960] usb 9-1: USB disconnect, device number 4 [ 608.991918][ T44] usb 8-1: USB disconnect, device number 7 [ 609.595640][ T38] kauditd_printk_skb: 9 callbacks suppressed [ 609.595663][ T38] audit: type=1326 audit(609.198:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12557 comm="syz.9.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b017cefc9 code=0x7ffc0000 [ 609.616257][ T38] audit: type=1326 audit(609.208:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12557 comm="syz.9.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b017cefc9 code=0x7ffc0000 [ 609.617785][ T38] audit: type=1326 audit(609.228:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12557 comm="syz.9.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f0b017cefc9 code=0x7ffc0000 [ 609.617847][ T38] audit: type=1326 audit(609.228:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12557 comm="syz.9.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b017cefc9 code=0x7ffc0000 [ 609.617900][ T38] audit: type=1326 audit(609.228:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12557 comm="syz.9.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b017cefc9 code=0x7ffc0000 [ 609.617969][ T38] audit: type=1326 audit(609.228:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12557 comm="syz.9.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f0b017cefc9 code=0x7ffc0000 [ 609.625942][ T38] audit: type=1326 audit(609.228:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12557 comm="syz.9.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b017cefc9 code=0x7ffc0000 [ 609.625997][ T38] audit: type=1326 audit(609.228:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12557 comm="syz.9.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0b017cefc9 code=0x7ffc0000 [ 609.626377][ T38] audit: type=1326 audit(609.238:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12557 comm="syz.9.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b017cefc9 code=0x7ffc0000 [ 609.635482][ T38] audit: type=1326 audit(609.238:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12557 comm="syz.9.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0b017cefc9 code=0x7ffc0000 [ 612.980325][T12592] befs: (nullb0): invalid magic header [ 613.657879][T12566] Bluetooth: hci1: command 0x0406 tx timeout [ 613.657936][T12566] Bluetooth: hci6: command 0x0406 tx timeout [ 615.046011][ T5811] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 615.316092][ T5811] usb 9-1: Using ep0 maxpacket: 16 [ 615.366649][ T5811] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 615.366708][ T5811] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 615.366729][ T5811] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 615.366745][ T5811] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 615.366762][ T5811] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 615.466091][ T5811] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 615.466128][ T5811] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 615.466150][ T5811] usb 9-1: Manufacturer: syz [ 615.489110][ T5811] usb 9-1: config 0 descriptor?? [ 616.186000][ T5811] rc_core: IR keymap rc-hauppauge not found [ 616.186031][ T5811] Registered IR keymap rc-empty [ 616.211624][ T5811] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 616.227327][ T5811] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 616.258184][ T5811] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 616.260325][ T5811] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input22 [ 616.308821][ T5811] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 616.336423][ T5811] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 616.366381][ T5811] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 616.386307][ T5811] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 616.504337][ T5811] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 616.542510][ T5811] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 616.556471][ T5811] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 616.627004][T12632] tipc: Started in network mode [ 616.627038][T12632] tipc: Node identity ac1414aa, cluster identity 4711 [ 616.649850][ T5811] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 616.666142][ T5811] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 616.696601][ T5811] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 616.702447][T12632] tipc: Enabled bearer , priority 10 [ 616.879245][T12632] tipc: Enabled bearer , priority 0 [ 617.047247][ T5811] mceusb 9-1:0.0: Registered with mce emulator interface version 1 [ 617.047317][ T5811] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 617.357028][ T5811] usb 9-1: USB disconnect, device number 5 [ 617.950892][T11408] tipc: Node number set to 2886997162 [ 618.389405][ T5815] Bluetooth: hci7: command 0x0406 tx timeout [ 631.746105][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 631.746208][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 633.381785][ T5899] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 634.019247][ T5899] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 634.019324][ T5899] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 634.019356][ T5899] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 634.019386][ T5899] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 634.019416][ T5899] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 634.019464][ T5899] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 634.019490][ T5899] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.100664][ T5899] usb 7-1: config 0 descriptor?? [ 634.102169][T12707] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 634.586901][ T5899] plantronics 0003:047F:FFFF.0008: reserved main item tag 0xd [ 634.621534][ T5899] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 642.069909][ T5899] usb 7-1: USB disconnect, device number 5 [ 644.427644][T12748] snd_dummy snd_dummy.0: control 4:2:0:syz1:211 is already present [ 644.742544][T12751] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2467'. [ 644.742598][T12751] IPVS: Unknown mcast interface: [ 649.115984][T11408] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 649.290006][T11408] usb 10-1: config index 0 descriptor too short (expected 45, got 36) [ 649.290057][T11408] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 649.290077][T11408] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 649.290096][T11408] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 649.290116][T11408] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 649.290148][T11408] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 649.290165][T11408] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.379513][T11408] usb 10-1: config 0 descriptor?? [ 649.391388][T12762] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 649.860571][T11408] plantronics 0003:047F:FFFF.0009: reserved main item tag 0xd [ 657.105061][ T5815] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 657.198435][ T5815] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 657.202328][ T5815] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 657.349989][T11408] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 657.405086][T11408] usb 10-1: USB disconnect, device number 3 [ 657.527816][ T5815] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 657.550161][ T5815] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 658.936978][T12794] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2480'. [ 659.010454][T12794] IPVS: Unknown mcast interface: [ 659.371797][ T5815] Bluetooth: hci0: command 0x0406 tx timeout [ 659.465093][T12802] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2483'. [ 659.621086][T12806] input: syz1 as /devices/virtual/input/input25 [ 659.644098][T12770] chnl_net:caif_netlink_parms(): no params data found [ 659.676206][T11897] Bluetooth: hci3: command tx timeout [ 660.882862][T12825] snd_dummy snd_dummy.0: control 4:2:0:syz1:211 is already present [ 661.252825][T12833] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2492'. [ 661.302386][T12833] IPVS: Unknown mcast interface: [ 661.616219][T12770] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.616382][T12770] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.616749][T12770] bridge_slave_0: entered allmulticast mode [ 661.619854][T12770] bridge_slave_0: entered promiscuous mode [ 661.624078][T12770] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.624603][T12770] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.624842][T12770] bridge_slave_1: entered allmulticast mode [ 661.631476][T12770] bridge_slave_1: entered promiscuous mode [ 661.746244][T11897] Bluetooth: hci3: command tx timeout [ 663.079297][T12770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 663.084619][T12770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 664.472385][T11897] Bluetooth: hci3: command tx timeout [ 664.633145][T11897] Bluetooth: hci2: command 0x0406 tx timeout [ 665.625192][T12867] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2503'. [ 666.492911][T12862] team_slave_0: entered promiscuous mode [ 666.492980][T12862] team_slave_1: entered promiscuous mode [ 666.493300][T12862] macsec1: entered promiscuous mode [ 666.493312][T12862] team0: entered promiscuous mode [ 666.493882][T12862] macsec1: entered allmulticast mode [ 666.493893][T12862] team0: entered allmulticast mode [ 666.493903][T12862] team_slave_0: entered allmulticast mode [ 666.493916][T12862] team_slave_1: entered allmulticast mode [ 666.508472][T12862] team0: Device macsec1 is already an upper device of the team interface [ 666.545898][ T5815] Bluetooth: hci3: command tx timeout [ 666.587417][T12862] team0: left allmulticast mode [ 666.587443][T12862] team_slave_0: left allmulticast mode [ 666.587457][T12862] team_slave_1: left allmulticast mode [ 666.587486][T12862] team0: left promiscuous mode [ 666.588147][T12862] team_slave_0: left promiscuous mode [ 666.588198][T12862] team_slave_1: left promiscuous mode [ 666.789418][T12770] team0: Port device team_slave_0 added [ 666.790072][T12867] IPVS: Unknown mcast interface: [ 666.818935][T12770] team0: Port device team_slave_1 added [ 667.208616][T12770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 667.208651][T12770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 667.213340][T12770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 667.241823][T12770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 667.241851][T12770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 667.241889][T12770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 667.751069][T12897] snd_dummy snd_dummy.0: control 4:2:0:syz1:211 is already present [ 668.583829][T12903] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2514'. [ 668.796550][ T39] INFO: task kworker/u8:0:12 blocked for more than 146 seconds. [ 668.796582][ T39] Not tainted syzkaller #0 [ 668.796593][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 668.796605][ T39] task:kworker/u8:0 state:D stack:21048 pid:12 tgid:12 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 668.796691][ T39] Workqueue: netns cleanup_net [ 668.796730][ T39] Call Trace: [ 668.796739][ T39] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 668.796755][ T39] __schedule+0x16f3/0x4c20 [ 668.796815][ T39] ? __lock_acquire+0xab9/0xd20 [ 668.796859][ T39] ? __lock_acquire+0xab9/0xd20 [ 668.796886][ T39] ? __pfx___schedule+0x10/0x10 [ 668.796926][ T39] ? schedule+0x91/0x360 [ 668.796954][ T39] schedule+0x165/0x360 [ 668.796981][ T39] rxrpc_destroy_all_calls+0x564/0x660 [ 668.797028][ T39] ? __pfx_rxrpc_destroy_all_calls+0x10/0x10 [ 668.797064][ T39] ? __pfx_var_wake_function+0x10/0x10 [ 668.797093][ T39] ? rxrpc_net+0x23/0x240 [ 668.797132][ T39] rxrpc_exit_net+0x6f/0xc0 [ 668.797164][ T39] ops_undo_list+0x49a/0x990 [ 668.797193][ T39] ? __pfx_ops_undo_list+0x10/0x10 [ 668.797211][ T39] ? rt_spin_unlock+0x150/0x200 [ 668.797240][ T39] ? rt_spin_unlock+0x161/0x200 [ 668.797264][ T39] cleanup_net+0x4de/0x820 [ 668.797288][ T39] ? __pfx_cleanup_net+0x10/0x10 [ 668.797312][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 668.797340][ T39] ? process_scheduled_works+0x9ef/0x17b0 [ 668.797368][ T39] ? process_scheduled_works+0x9ef/0x17b0 [ 668.797396][ T39] process_scheduled_works+0xae1/0x17b0 [ 668.797455][ T39] ? __pfx_process_scheduled_works+0x10/0x10 [ 668.797501][ T39] worker_thread+0x8a0/0xda0 [ 668.797557][ T39] kthread+0x711/0x8a0 [ 668.797593][ T39] ? __pfx_worker_thread+0x10/0x10 [ 668.797619][ T39] ? __pfx_kthread+0x10/0x10 [ 668.797664][ T39] ? rt_spin_unlock+0x150/0x200 [ 668.797691][ T39] ? rt_spin_unlock+0x161/0x200 [ 668.797710][ T39] ? __pfx_kthread+0x10/0x10 [ 668.797742][ T39] ret_from_fork+0x4bc/0x870 [ 668.797774][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 668.797815][ T39] ? __switch_to_asm+0x39/0x70 [ 668.797841][ T39] ? __switch_to_asm+0x33/0x70 [ 668.797862][ T39] ? __pfx_kthread+0x10/0x10 [ 668.797895][ T39] ret_from_fork_asm+0x1a/0x30 [ 668.797937][ T39] [ 668.798525][ T39] [ 668.798525][ T39] Showing all locks held in the system: [ 668.798554][ T39] 3 locks held by kworker/u8:0/12: [ 668.798574][ T39] #0: ffff888019ad4938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 668.798646][ T39] #1: ffffc90000117ba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 668.798701][ T39] #2: ffffffff8e855fa0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820 [ 668.798755][ T39] 3 locks held by rcuc/1/28: [ 668.798769][ T39] 1 lock held by khungtaskd/39: [ 668.798781][ T39] #0: ffffffff8d5aa4c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 668.798895][ T39] 2 locks held by getty/5566: [ 668.798907][ T39] #0: ffff88823bf808a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 668.798964][ T39] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1400 [ 668.799029][ T39] 4 locks held by kworker/u8:20/11335: [ 668.799046][ T39] 3 locks held by kworker/u8:22/11339: [ 668.799059][ T39] #0: ffff88813ff69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 668.799120][ T39] #1: ffffc90004377ba0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 668.799175][ T39] #2: ffffffff8e862eb8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 668.799236][ T39] 2 locks held by syz-executor/12770: [ 668.799248][ T39] #0: ffffffff8dfecfa0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 668.799302][ T39] #1: ffffffff8e862eb8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 668.799362][ T39] 1 lock held by syz.8.2511/12889: [ 668.799374][ T39] #0: ffffffff8e866238 (bpf_dispatcher_xdp.mutex){+.+.}-{4:4}, at: bpf_dispatcher_change_prog+0x9c/0xc90 [ 668.799432][ T39] 5 locks held by syz.9.2513/12895: [ 668.799445][ T39] 3 locks held by syz.2.2514/12903: [ 668.799457][ T39] #0: ffffffff8e8c9460 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 668.799514][ T39] #1: ffffffff8e8c9258 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 668.799567][ T39] #2: ffffffff8e862eb8 (rtnl_mutex){+.+.}-{4:4}, at: start_sync_thread+0xd7/0x28d0 [ 668.799618][ T39] [ 668.799629][ T39] ============================================= [ 668.799629][ T39] [ 668.799641][ T39] NMI backtrace for cpu 0 [ 668.799658][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 668.799681][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 668.799694][ T39] Call Trace: [ 668.799704][ T39] [ 668.799713][ T39] dump_stack_lvl+0x189/0x250 [ 668.799752][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 668.799785][ T39] ? __pfx__printk+0x10/0x10 [ 668.799851][ T39] nmi_cpu_backtrace+0x39e/0x3d0 [ 668.799878][ T39] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 668.799901][ T39] ? __pfx__printk+0x10/0x10 [ 668.799933][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 668.799961][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 668.799985][ T39] watchdog+0xf60/0xfa0 [ 668.800025][ T39] ? watchdog+0x1e2/0xfa0 [ 668.800061][ T39] kthread+0x711/0x8a0 [ 668.800095][ T39] ? __pfx_watchdog+0x10/0x10 [ 668.800124][ T39] ? __pfx_kthread+0x10/0x10 [ 668.800150][ T39] ? rt_spin_unlock+0x150/0x200 [ 668.800176][ T39] ? rt_spin_unlock+0x161/0x200 [ 668.800195][ T39] ? __pfx_kthread+0x10/0x10 [ 668.800228][ T39] ret_from_fork+0x4bc/0x870 [ 668.800255][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 668.800287][ T39] ? __switch_to_asm+0x39/0x70 [ 668.800306][ T39] ? __switch_to_asm+0x33/0x70 [ 668.800325][ T39] ? __pfx_kthread+0x10/0x10 [ 668.800357][ T39] ret_from_fork_asm+0x1a/0x30 [ 668.800399][ T39] [ 668.800407][ T39] Sending NMI from CPU 0 to CPUs 1: [ 668.800453][ C1] NMI backtrace for cpu 1 [ 668.800471][ C1] CPU: 1 UID: 0 PID: 10915 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 668.800500][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 668.800513][ C1] Workqueue: events delayed_vfree_work [ 668.800551][ C1] RIP: 0010:__lock_acquire+0x5e7/0xd20 [ 668.800581][ C1] Code: 00 00 0f 8c fc fe ff ff 44 89 e0 41 38 c5 76 1a e8 4e 01 da 02 48 8b 3c 24 85 c0 74 0d 83 3d e3 42 3a 0d 00 0f 84 1a 05 00 00 <83> 7c 24 0c 00 0f 84 a9 00 00 00 41 8b 46 20 66 85 c0 0f 88 8d 00 [ 668.800599][ C1] RSP: 0018:ffffc90003c97428 EFLAGS: 00000097 [ 668.800614][ C1] RAX: 00000000ffffff05 RBX: 0000000000000002 RCX: 0000000000000002 [ 668.800626][ C1] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ffff88802e4e3c00 [ 668.800638][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff81737cf5 [ 668.800650][ C1] R10: ffffc90003c97678 R11: ffffffff81aadaf0 R12: 00000000ffffff05 [ 668.800664][ C1] R13: 0000000000000001 R14: ffff88802e4e47b0 R15: ffff88802e4e47d0 [ 668.800678][ C1] FS: 0000000000000000(0000) GS:ffff888126efc000(0000) knlGS:0000000000000000 [ 668.800694][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 668.800706][ C1] CR2: 00007fb590cc6d60 CR3: 000000003abb6000 CR4: 00000000003526f0 [ 668.800723][ C1] Call Trace: [ 668.800730][ C1] [ 668.800741][ C1] ? unwind_next_frame+0xa5/0x2390 [ 668.800766][ C1] lock_acquire+0x120/0x360 [ 668.800789][ C1] ? unwind_next_frame+0xa5/0x2390 [ 668.800819][ C1] ? unwind_next_frame+0xa5/0x2390 [ 668.800843][ C1] ? __free_frozen_pages+0xfb6/0x1140 [ 668.800869][ C1] ? unwind_next_frame+0xa5/0x2390 [ 668.800892][ C1] unwind_next_frame+0xc2/0x2390 [ 668.800916][ C1] ? unwind_next_frame+0xa5/0x2390 [ 668.800943][ C1] ? unwind_next_frame+0xa5/0x2390 [ 668.800968][ C1] ? __reset_page_owner+0x71/0x1f0 [ 668.800996][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 668.801024][ C1] arch_stack_walk+0x11c/0x150 [ 668.801072][ C1] ? __free_frozen_pages+0xfb6/0x1140 [ 668.801098][ C1] stack_trace_save+0x9c/0xe0 [ 668.801116][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 668.801135][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 668.801163][ C1] save_stack+0xf7/0x1f0 [ 668.801185][ C1] ? __pfx_save_stack+0x10/0x10 [ 668.801206][ C1] ? __free_frozen_pages+0xfb6/0x1140 [ 668.801237][ C1] ? page_ext_put+0x97/0xc0 [ 668.801261][ C1] __reset_page_owner+0x71/0x1f0 [ 668.801284][ C1] __free_frozen_pages+0xfb6/0x1140 [ 668.801313][ C1] ? __pfx___free_frozen_pages+0x10/0x10 [ 668.801338][ C1] ? mod_memcg_page_state+0x28/0x5c0 [ 668.801364][ C1] ? ___free_pages+0xb2/0x230 [ 668.801380][ C1] vfree+0x2ad/0x470 [ 668.801403][ C1] delayed_vfree_work+0x55/0x80 [ 668.801427][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 668.801448][ C1] process_scheduled_works+0xae1/0x17b0 [ 668.801483][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 668.801512][ C1] worker_thread+0x8a0/0xda0 [ 668.801540][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 668.801567][ C1] ? __kthread_parkme+0x7b/0x200 [ 668.801595][ C1] kthread+0x711/0x8a0 [ 668.801622][ C1] ? __pfx_worker_thread+0x10/0x10 [ 668.801643][ C1] ? __pfx_kthread+0x10/0x10 [ 668.801667][ C1] ? rt_spin_unlock+0x150/0x200 [ 668.801687][ C1] ? rt_spin_unlock+0x161/0x200 [ 668.801702][ C1] ? __pfx_kthread+0x10/0x10 [ 668.801729][ C1] ret_from_fork+0x4bc/0x870 [ 668.801750][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 668.801774][ C1] ? __switch_to_asm+0x39/0x70 [ 668.801791][ C1] ? __switch_to_asm+0x33/0x70 [ 668.801808][ C1] ? __pfx_kthread+0x10/0x10 [ 668.801834][ C1] ret_from_fork_asm+0x1a/0x30 [ 668.801860][ C1] [ 668.814859][T12903] IPVS: Unknown mcast interface: [ 668.909510][T12770] hsr_slave_0: entered promiscuous mode [ 668.911382][T12770] hsr_slave_1: entered promiscuous mode [ 668.912698][T12770] debugfs: 'hsr0' already exists in 'hsr' [ 668.912732][T12770] Cannot create hsr debugfs directory [ 672.632224][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!