last executing test programs: 10m53.804256126s ago: executing program 0 (id=7): r0 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010020000000000000000100000004000180100002800c00018008000100"], 0x28}}, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x8) r1 = inotify_init1(0x800) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r5 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8003}, 0x0, 0x0) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x11, r6, 0x0, 0x0, 0x0, 0x1, 0x1, {0x3}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000280)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(r6, 0xd0009412, &(0x7f0000000500)={r7, 0x21f}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000000a40)={{r7, 0x4, 0xc, 0x5, 0x7, 0x0, 0xff, 0xfffffff9, 0x9, 0xffff, 0x6f, 0x7, 0x4, 0x0, 0x9}}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) r9 = inotify_init1(0x0) inotify_add_watch(r9, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000280)='./control\x00') syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000575c820490d00702f260102030109021200010000008309040000000e01"], 0x0) 10m51.160655041s ago: executing program 3 (id=8): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) syz_usb_connect$printer(0x2, 0x0, 0x0, 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x2940) ioctl$BLKCRYPTOGENERATEKEY(r3, 0xc030128a, &(0x7f00000001c0)={&(0x7f0000000140)=""/106, 0x6a}) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = gettid() r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x262200, 0x0) close(r6) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0xd) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x3) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000480)='\xf5\xfc\xd2\xec]\x95zx8*\xa2d\x11\xb5\xb1\x01\x00\x00\x00\xe49{\x8a{\x81s\xea$\xdfg\xb1\x03DY!\x97\xadM\xd7\xff\x8a\xcd[>\x12e\xc3]d8\xba\x8ec\x00\x00\x00\x00\x00\x00\x00\xa0\xe2\xd5y\xec\x90\x00\x98Y\x91\x19\x16\x89\xd0\x1a\xad\xcd\xd6\xd0\xc6\xb9\xeb\x95\xd3\x9cl\x9cu#\xb4\xee\xe5\x9d\t\fV\xd4\xda\xfc`2?\x15P\xba\x14b\x1c\xcc\xd5\xb9jA$s\xb9g3\x15[\xc7\xec\xa9;\xee\x01\xc9\xc4\x1f\xc3\xe4\xfa\xd3fU\x0e\x86\xc8\xa7\xaf\xaf\x04P\xa3\x8bb\xbf\\\xdb\x83\x00\x96sy\x14\x1eo\xcc9&\x946\xf9\xf5v\xee\xb5m$;\x01\xb8\xeau\x00\xd1S=\x920H\xc2z\xb5\xbe\x95\xef\xeb\xd1\xc8\xa1\xba\xach\xbef\xa8\x86\xc2\x18\x9cC\x15\x9c^\xcf\xe9\xbcp\xb4Ff\x00\x9d>p\"\x19\xd8}|\x92\x13\x874\xe3\x01\xfd-?\xba\xf2\x8e\xa5y\\\xf0\fkd??-\x983\xf3\x19\xc7\xc0/\xe9\x1a\x80=\xa72)\xd2\x00'/272, &(0x7f0000000240)='/\t\x00\x00\x00\x98', 0x0) tkill(r5, 0xb) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 10m44.949392416s ago: executing program 0 (id=9): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x1c57, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r3}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r8 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) setrlimit(0x7, &(0x7f0000000400)) keyctl$KEYCTL_WATCH_KEY(0x20, r8, r7, 0x0) io_uring_enter(r4, 0x2def, 0x4000, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) r9 = socket(0x200000000000011, 0x2, 0x1) bind$packet(r9, &(0x7f0000000080)={0x11, 0xd, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f00000001c0)=@ethtool_ts_info}) r11 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) 10m43.175227812s ago: executing program 3 (id=11): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0, 0x0, 0x5}, 0x18) get_robust_list(0x0, &(0x7f0000000280)=&(0x7f0000000240), 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000080)=0x80) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000080) r3 = userfaultfd(0x80001) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r5, 0x0, 0x4) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) r6 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_ENUM_FMT(r6, 0x541b, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) socket$xdp(0x2c, 0x3, 0x0) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x2}) 10m42.423069599s ago: executing program 0 (id=13): r0 = add_key$keyring(&(0x7f0000000380), &(0x7f00000004c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000340)='\x00', r0) r1 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0xd541f000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = memfd_create(&(0x7f0000000780)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\nh<\x99\xaa\xe1\xf3\xb8Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev<\x97\x1a2_\x82\xfa\x15h$\x01\xdd\xe5\xceC\x19\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xb2\xf5\x1e5.\xc1\xa1\x05\x92\x82d\x0e\xf5PMjIt\xc5u~Tw\xbeNg\xb5\xeeP\x9c\xce\xfaS\xa7\xec0\xf4\xd2\xc2+@\x12=\xaa\b\xd2&\x19k6\xc7\xa6+\x04V\xc3\xe1\xd3\fZZ\x1cJo\xa5(& \r\xf1\xa4\xb8\xc23\x16\xc3\xaejA/', 0x0) write$binfmt_elf32(r4, &(0x7f0000000f00)=ANY=[], 0x66) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0xf0, 0xa0, 0x1000, 0x1000000, 0x20, 0x0, {0x0, 0x9416, 0xfffffffe}, {0x350, 0xfffffffd}, {0xf4ef}, {0x2, 0x4, 0xffe}, 0x1, 0x100, 0x0, 0x292, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x4, 0x2, 0xb}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1}, 0x0) r6 = fcntl$getown(r1, 0x9) getpriority(0x0, r6) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x4) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x20000000000002b4, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x45, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff56, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x210000, 0x1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r7, r7, 0x0, 0x200000) 10m41.851555381s ago: executing program 3 (id=14): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(r3, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r6, 0x227b, &(0x7f00000001c0)=0x2001) r7 = fcntl$dupfd(r6, 0x0, r6) read$FUSE(r7, 0x0, 0x0) write$sndseq(r7, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @tick=0x4, {}, {}, @result={0x1, 0x2}}, {0x0, 0x0, 0xff, 0x3, @tick=0xf27, {0x1}, {}, @addr={0x2a, 0x5}}], 0x38) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, 0x0, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000300), 0x404, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="2c76657273696f6e3d3970323030302e752c6e6f6465766d61702c63616f5d8e1d7c6368653d667363616368652c6d61736b3d5e4d41591f524541442c00"]) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x734}}, 0x0) 10m38.914053051s ago: executing program 3 (id=15): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000300)="b9800000c00f3235000100000f3065660fd1a0dcaf000066ba4300ed0f01ca360f0948b870000000000000000f23d00f21f835100000020f23f867d9fd0f1a3ac74424000b000000c744240200200000c7442406000000000f011424c44105dc74e5c0", 0x63}], 0x1, 0x49, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x7, 0x100000000, 0x0, 0x79, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1c37, 0xd58, 0x0, 0xfffffffffffffffb], 0xdddd1000, 0x84a92}) ioctl$KVM_RUN(r3, 0xae80, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x16, 0x0, "61a1ed8439cde8054f2ada6f36030000009d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f0fe97f61fd27a06d6a38a700"}, 0xd8) sendto$inet6(r6, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty, 0x5}, 0x1c) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r7, 0xc018643a, &(0x7f00000000c0)={0x14000000, 0x0, 0x7fff}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x200000000000000) 10m36.937678065s ago: executing program 0 (id=17): socket$can_raw(0x1d, 0x3, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000100)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x2}, 0xffffff8f) mq_open(&(0x7f00000007c0)='\r\x00elinu\xef\xe3elinux\x00\x86\xf6\x92\n#*\xac\x02\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a|\x9en\xbd\xeb\x14\x7f\xb9\x83\xfe\nf\xc26\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]G\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8S\\\xec\xa31_\v\x8a\xf2\x18\xa6\xb1\xbb\x8b9\x1e\xff\xf8\xcdX\xf7h\b\xaf\x01\x84\xd4\x06Ml(Bw=\x13\xa1&\xd3\xec\xa9\x8ba\x86\x9d\xf4\x11\n\x89z\xa5\xac\xcbh\xc2\x1b\xeay\xbf\x06\x80\xff\xdf\x93\xef\x7f\xb1\xaf\xa0\xae', 0x80, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00'}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000280)={@local, 0x1}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000002680)={0x0, 0x1, 0x0, 0x5}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r2, 0x0) sendfile(r2, r2, 0x0, 0x40008) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x0) r3 = dup(0xffffffffffffffff) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x5) ioctl$UI_DEV_CREATE(r3, 0x5501) write$uinput_user_dev(r3, &(0x7f00000000c0)={'syz0\x00', {0xfff7, 0xc, 0x100, 0x81}, 0x1d, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x3, 0x1, 0x7, 0x9, 0x2, 0x7, 0xa, 0x3, 0x0, 0x7f, 0xd, 0x7fff, 0x6, 0x6, 0x5, 0x6, 0x6, 0x7, 0x6, 0xff, 0x2, 0xfffff5ee, 0x401, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x81, 0xfffff765, 0x2, 0x7, 0xfffffff9, 0xa, 0x2, 0x5, 0x0, 0x4, 0x6, 0x7, 0x4c, 0xfffffffd, 0x80, 0x8, 0x7, 0x9, 0x7, 0x8000101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x1, 0x6, 0x5, 0x1, 0x4], [0x8, 0x3, 0x8, 0x8, 0x0, 0x9, 0x4, 0x0, 0x25, 0x10, 0x6, 0x7, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x3, 0x3, 0x1000, 0x7, 0x1, 0x3b40, 0x4, 0x1000, 0x5, 0x7fff, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdaa, 0x5, 0x2, 0x76c4, 0xfffffffd, 0x5, 0x10, 0x10000, 0xd, 0x2, 0x9, 0x10, 0x4000e, 0x9, 0x7, 0xa, 0x9, 0x3, 0x8000008, 0x3, 0x2, 0x3a6, 0x27f8, 0xc0d, 0xfffffffd, 0x4, 0xc, 0xfffffffb], [0xa3, 0x6, 0x6, 0x9, 0x1000, 0x0, 0x80000000, 0x5, 0x7f, 0xa, 0x100, 0x1000, 0xf1, 0x6, 0xc, 0x10000, 0x72, 0xc, 0x633, 0xd, 0x7, 0x6, 0x80000000, 0x6, 0x0, 0x7, 0x8, 0x2ef3adeb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x7, 0x7ff, 0xfffffff2, 0x63, 0x0, 0x10000, 0x3, 0x3, 0x20a7fd9e, 0xfffffffd, 0x2, 0xa1, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x4, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x2, 0x8, 0x2, 0x3, 0x5], [0x4, 0x4, 0x5, 0x8000, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x4, 0x7fff, 0x5, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0x9, 0xf7df, 0x2, 0x10, 0x8, 0x2, 0xff, 0x6, 0x4, 0x4, 0x4, 0x0, 0x7, 0x4e6, 0x8, 0x6, 0x5ef, 0x8000, 0xc, 0x2, 0x401, 0x1, 0x5, 0x8, 0x9a8, 0x99f, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0x9, 0x101, 0x1ff, 0x8, 0x431, 0x6, 0x5, 0x6, 0x7b, 0x7fc, 0x9]}, 0x45c) bind$unix(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 10m36.191649322s ago: executing program 3 (id=18): syz_emit_ethernet(0x36, &(0x7f0000001b00)={@broadcast, @empty, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, '9J\t', 0x0, 0x32, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @mcast2}}}}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x6, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90a, 0x78, '\x00', @string=&(0x7f0000000040)=0x4}}) socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) syz_emit_ethernet(0x5e, &(0x7f0000001580)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaa0086dd60cb653e00283afffc000000000000000000000000000001ff020000000000000000000000000001890090780000000020010000000000000000000000000000fc010000000000000000000000000000ef8436479f638687d7acc59505e3c631a72a064582e8ee8f1c7f74796cfb7e9b6dafbc5b892bd190e4bcc8df67163308abbf965816e64845031abaefd5e8e7eaf2a6ab3e9c040024d91083a30c3e2566b94c17bec53c50051926b5fefe319c458911bd38ba20a405f09dce6681"], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x4f}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001540), 0x4) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x1, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x33, 0x20, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}]}, 0x60}, 0x1, 0x7}, 0x0) 10m33.756294299s ago: executing program 0 (id=22): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000800a20000000000a010300000000000000000100fffd0900010073796a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000002c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000140000001100010000000000000000000000000aae0fbb92faf710885509609d763c90f389d5b093350d80b3c5369d66a390df41cf06f45dde36abf7a5a3c7f5f66a7ddab2a8a67020fec6c39131b1696fdd9c3b44a95e413457c0b6699e91d8c5bce93a497f0fca988eb7c32991a37dadc1e4fd9d"], 0xc8}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0xfffffffffffffebe) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) ioctl$BLKROGET(r1, 0x125e, &(0x7f0000000000)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) r4 = socket$l2tp(0x2, 0x2, 0x73) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, 0x0, &(0x7f0000000140)) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000080)={0x83a, 0x200, 0x0, 0x9, 0x3, 0xd1d, 0x7, 0x22b1}, 0x20) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) close(r4) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x8) unshare(0x8000000) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, 0x0, 0x0) 10m29.02439444s ago: executing program 0 (id=26): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = fsopen(&(0x7f0000000000)='smb3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='source', &(0x7f0000000240)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0), 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x20040, 0x0) 10m27.162854393s ago: executing program 3 (id=28): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = fsopen(&(0x7f0000000000)='smb3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='source', &(0x7f0000000240)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0), 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x20040, 0x0) 10m13.674093959s ago: executing program 32 (id=26): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = fsopen(&(0x7f0000000000)='smb3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='source', &(0x7f0000000240)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0), 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x20040, 0x0) 10m11.011587948s ago: executing program 33 (id=28): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = fsopen(&(0x7f0000000000)='smb3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='source', &(0x7f0000000240)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0), 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x20040, 0x0) 8m41.081603879s ago: executing program 1 (id=147): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r5, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x7) getpid() sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007663616e000000000400028008000a"], 0x3c}}, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000e40)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7829}, 0x401, 0xd, 0x0, 0x0, 0x0, 0x0, 0x2}) setresuid(0x0, 0xee00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r6, 0x6, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r6, 0x0, 0xf, &(0x7f0000000100)=0x8, 0x4) r7 = syz_open_dev$vcsu(&(0x7f0000000180), 0x101, 0xb8a8e7c513bbb548) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000dc0)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0x8, '\x00', 0x0, r8, 0x1, 0x2, 0x1}, 0x50) socket$nl_route(0x10, 0x3, 0x0) 8m39.936440942s ago: executing program 1 (id=149): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x48e01) r0 = timerfd_create(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setns(0xffffffffffffffff, 0x24020000) syz_io_uring_setup(0x47a8, 0x0, &(0x7f0000000180), 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') lseek(r4, 0x10000000005, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000140), 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x2}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x0, 0x100000000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x2, 0x0, 0x2dd}}, [@tmpl={0xc4, 0x5, [{{@in=@loopback, 0x0, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in6=@empty, 0x3502, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {{@in6=@empty, 0x0, 0x2b}, 0x0, @in6=@private0, 0x0, 0x1}]}]}, 0x17c}}, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f00000000c0)=0x1) r5 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x11100, 0x3, 0x17d}, &(0x7f0000000100)=0x0, &(0x7f00000003c0)=0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x4, 0xb, &(0x7f0000000080)=""/11, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) syz_io_uring_submit(r6, r7, 0x0) kexec_load(0x5, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) io_uring_enter(r5, 0x4d10, 0x2, 0x2, 0x0, 0x0) 8m38.622662069s ago: executing program 1 (id=152): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r1, 0x2e, 0x0, @val=@netfilter={0x3, 0x1, 0x9, 0x1}}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000001040)={0x2020}, 0x2020) r6 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r7, &(0x7f0000000f40)=[{&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)) r8 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffffffffffc4, 0xe0882) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x8a880, 0xbb) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000000080)={r9, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc67be43ea6acc96e3a2503dc31c97214d58128bbad0099cebdc25f5ab60c9e69098c8b534464c516bdd8a0f350000000000000300", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) ioctl$BLKRRPART(r8, 0x125f, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/50, 0x32, 0x2, 0x1d}, @fda={0x66646185, 0x8, 0x2, 0x7}, @flat=@weak_binder={0x77622a85, 0x110a, 0x9}}, &(0x7f0000000300)={0x0, 0x28, 0x48}}}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000440)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d030100000000009500000c000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff4e53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a1574aefc97d8addaa65b925cd3ded25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d6822d133bf73b18e509402a4de1c2ea17f04537fc211576846ac629d1d93265ba474580047a9dc88de358ce795731891a2031de4e09740c64e5306f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfac2e6d4421c49fb6641cbf56914e76702f673b586c767562a90a3967093b000e3806f825f1d0da2a304e06543b56d35235d78b7a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664a44e22b72e843e7cf55f394cf75d1cd3ee79a25fb98cc45b3fde43e42e150d4a2fddd9a9767748ca3522443097c55dc97c09d38485b18ad2cff7873"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x28) 8m36.663898917s ago: executing program 1 (id=153): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$F_GET_RW_HINT(r2, 0x40b, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x2, 0x80805, 0x0) futex(&(0x7f0000000080), 0x88, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) futex(&(0x7f0000000080), 0x88, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r5) mount$cgroup(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0xa2, &(0x7f0000000500)={[{}, {@noprefix}, {@subsystem='devices'}, {@clone_children}, {@none}, {@noprefix}], [{@dont_measure}, {@subj_type={'subj_type', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, 'sched_switch\x00'}}, {@flag='sync'}, {@uid_gt={'uid>', r5}}, {@uid_lt}, {@euid_eq={'euid', 0x3d, 0xee01}}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) 8m35.233590122s ago: executing program 1 (id=155): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = fsopen(&(0x7f0000000000)='smb3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000080)='source', &(0x7f0000000240)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x80800) fsopen(0x0, 0x1) connect$llc(r4, 0x0, 0x0) r5 = syz_open_dev$video(&(0x7f0000000000), 0xf840, 0xaa02) ioctl$VIDIOC_S_CROP(r5, 0x4014563c, &(0x7f0000000040)={0x9, {0x40, 0xb, 0xff}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_MARK={0x8}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x10000}]}]}, 0x74}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r8, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0xe, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@remote, @initdev={0xac, 0x1e, 0x40, 0x0}, 0x0, 0x5}, {0x0, @broadcast, 0x8, 0x5, [0xf, 0x9]}, 0xff, 0x3}}}) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaa839aaaaaa0000000008004500001c000000000011907800000000000000000000dea2b9a7daafb3f4"], 0x0) recvmmsg(r7, &(0x7f0000005380)=[{{0x0, 0x0, 0x0}, 0xa}], 0x1, 0x10023, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r9) syz_emit_ethernet(0x3a, &(0x7f00000063c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd}}}}}}, 0x0) readv(r7, &(0x7f0000000000)=[{&(0x7f0000000080)=""/127, 0x7f}], 0x1) 8m14.267990198s ago: executing program 34 (id=160): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x80800) fsopen(0x0, 0x1) connect$llc(r4, 0x0, 0x0) r5 = syz_open_dev$video(&(0x7f0000000000), 0xf840, 0xaa02) ioctl$VIDIOC_S_CROP(r5, 0x4014563c, &(0x7f0000000040)={0x9, {0x40, 0xb, 0xff}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_MARK={0x8}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x10000}]}]}, 0x74}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r8, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0xe, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@remote, @initdev={0xac, 0x1e, 0x40, 0x0}, 0x0, 0x5}, {0x0, @broadcast, 0x8, 0x5, [0xf, 0x9]}, 0xff, 0x3}}}) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaa839aaaaaa0000000008004500001c000000000011907800000000000000000000dea2b9a7daafb3f4"], 0x0) recvmmsg(r7, &(0x7f0000005380)=[{{0x0, 0x0, 0x0}, 0xa}], 0x1, 0x10023, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r9) syz_emit_ethernet(0x3a, &(0x7f00000063c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd}}}}}}, 0x0) readv(r7, &(0x7f0000000000)=[{&(0x7f0000000080)=""/127, 0x7f}], 0x1) 4m25.366583303s ago: executing program 7 (id=405): socket$kcm(0xa, 0x3, 0x87) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x8, 0x87, 0xff, @rand_addr=' \x01\x00', @mcast2, {[@routing={0x16, 0x0, 0x2}]}}}}}, 0x0) 4m25.014777676s ago: executing program 7 (id=408): syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040fac1b736420"], 0x7) sched_setscheduler(0x0, 0x1, 0x0) 4m24.533864232s ago: executing program 7 (id=410): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000074000000060a010400000000e5000000010000004c000480240001800b00010072656a656374000014000280080001400000000005000200fc000000240001800b000100736f636b6574000014000280080002400000000a080001400000000208000b40000000000900010073797a300000000014000000110001"], 0xfc}}, 0x0) 4m23.397605801s ago: executing program 7 (id=411): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x25, &(0x7f0000000040)=0x80801001, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$vim2m(&(0x7f0000000a40), 0x10003, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000180)={0x4, 0xe, 0x3, "13ea57ffffffdfff018000000000000000000000000000088b0500", 0x30323953}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r6) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r7 = syz_open_procfs(r5, &(0x7f0000000240)='ns\x00') fchdir(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000740)='=q', 0x2}], 0x1}, 0x1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r8}, 0x4) r11 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) ppoll(&(0x7f00000000c0)=[{r11, 0x747}], 0x1, 0x0, 0x0, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_subtree(r12, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xb, 0x29, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xce, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0xd}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb60e}}, @alu={0x4, 0x1, 0xa, 0xa, 0xa, 0x80, 0x10}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r12}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x42}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(r9, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x60000021) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)=""/100, 0x64}], 0x1}, 0x20a2) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOGETCMAP(r4, 0x4604, &(0x7f0000000200)={0xcd, 0x0, 0x0, 0x0, 0x0, 0x0}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 4m19.526479185s ago: executing program 2 (id=415): syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a0524010107"], 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 4m19.221618127s ago: executing program 7 (id=416): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}, 0x80001}, 0x1c) 4m19.006790009s ago: executing program 7 (id=419): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) 4m18.588586015s ago: executing program 2 (id=423): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) getpid() getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = semget$private(0x0, 0x2, 0x2) semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000000)=[0xfff6]) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) shmctl$SHM_STAT(0x0, 0xd, 0x0) mount(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='squashfs\x00', 0x0, 0x0) 4m17.030402606s ago: executing program 2 (id=428): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x25, &(0x7f0000000040)=0x80801001, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$vim2m(&(0x7f0000000a40), 0x10003, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000180)={0x4, 0xe, 0x3, "13ea57ffffffdfff018000000000000000000000000000088b0500", 0x30323953}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r6) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r7 = syz_open_procfs(r5, &(0x7f0000000240)='ns\x00') fchdir(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000740)='=q', 0x2}], 0x1}, 0x1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r8}, 0x4) r11 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) ppoll(&(0x7f00000000c0)=[{r11, 0x747}], 0x1, 0x0, 0x0, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_subtree(r12, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xb, 0x29, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xce, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0xd}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb60e}}, @alu={0x4, 0x1, 0xa, 0xa, 0xa, 0x80, 0x10}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r12}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x42}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(r9, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x60000021) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)=""/100, 0x64}], 0x1}, 0x20a2) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 4m10.483165438s ago: executing program 2 (id=441): r0 = syz_open_dev$cec(&(0x7f0000000400), 0x0, 0x80200) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) add_key(0x0, 0x0, &(0x7f0000000240)="dfd9", 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c0003000a000000010000004d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) syz_open_dev$tty1(0xc, 0x4, 0x2) setuid(0xee01) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x21, &(0x7f0000000600)=ANY=[@ANYBLOB="1800f36adca5b8ca4b8cce096e88b4cc6d22d2eb0018110000ff61dac26edca60040e824ac108192e1913bda063e6989386a879a11576bda3a12e7552a30f387c78885ed06c62f29408281a2947e618b30c1612ade991ebc7100"/99, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000", @ANYRES32=r3], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0x5, 0x4a, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", "0400", "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", '\x00', "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000d40)={0x10000000000000, 0x60b, 0x23, 0xfffffff9, 0x5, 0x20000007, "57c1169b6664ea61326ac71ae7213059", 0x0, 0x2, 0x7, 0xbd, 0x6, 0x21, 0xff}) writev(0xffffffffffffffff, 0x0, 0x0) 4m10.077848702s ago: executing program 2 (id=446): creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_tcp(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp']) 4m8.991896663s ago: executing program 2 (id=450): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfff}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) pipe(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x8c36, 0x3c00, 0x2, 0xbfdffffa}, &(0x7f0000000000)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000380)=@keyring={'key_or_keyring:', r5}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 4m0.910201099s ago: executing program 35 (id=419): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) 3m53.175978031s ago: executing program 36 (id=450): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfff}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) pipe(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x8c36, 0x3c00, 0x2, 0xbfdffffa}, &(0x7f0000000000)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000380)=@keyring={'key_or_keyring:', r5}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 1m11.12783478s ago: executing program 5 (id=1020): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) epoll_create1(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r4, r4, 0x0, 0x2000007ff) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000140)=""/42}, 0x20) ioctl$UI_DEV_CREATE(r4, 0x5501) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000010701010000000000000000000000070c0007800800014000000008"], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) sendto$inet6(r5, &(0x7f0000000240)="d3aa4b68854c7a4b23c40ab215ec518a50d1f072aac9ae601a8ab9ac35bbb74a1feb2974ed33643891e627fb7e03d04b5d38d84c75ca800872ffa47061cdf26781dc031309155e03ccc61f873a83a14f9b3faf533a2c093f9b8d5305943072be10a71406eb7f41d14e18ec57a1f43e86f0e286578d0db26efc", 0x79, 0x4008891, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002300)="00e7a0633e8438bafa888b9b02144af32e296a0a01dc194d649b6fa26d6d5e63bac4a04baeeb8aacb22c6eec461b67db6a737737c6d2687acb00572f92e3fdb5d0cb2f11121c557a943020200755bcab77b39c406b733239e2bb1175b9322ba39dc7d67da8f77aed1714dae2e6c24c3ea96be9d151c6ab7b3c54bbe507b8b2461fb4be8dc90042184af6d48f8ace16abb5e3fc943cf61cdb75624a259bdb5f7829b9775820f85f2d1a6ee6c6c2af4fd41ab8a41ecb2612abf13cd2c6f9f3e6db505e4bbe68cc000cf5fa6d5636191a4b366ab59af52132a3f9678d4ed1bd577bacffb3b52850804005eebf3dfa4763168ff30490a11acdbbf4c3312a45f30139f6b72b1e7cdec185006bb30e0e8fa88da2cefc718cae7e9830f7ca101e4e23c6bd16bfacf4a9927fb13af4b79c86ab999beda4ad396abdda354a42fb4ef21d6749175dc21a0cf9191aa4f90d274b50370a580ad8dcd166d2b06c0d8b071973c3fde30f7e2bc371a51ca5866bf8b24eaac75bf482dd4436b214ff62d32e20df223b0b680ede28b3a49e66e330a8a3ecace0db9855d235d5ff23765e742d1a739c2ac8743f4c62664a3b347279da55a1a5b16e1e2828b584a013577d50f890e3894d9e8d6bfccdfb2b70221f12a7fac24b7a8818edce72b65f622c77bf1312771a2c0d805ec9a25c536c91868762032255be78903b77b2c1a773a03996fabba69214e76f5df6df0375b592692a2c3c86c75a3be56fe598ddaea0b9901d20db7e43e128e04e5509283f833c24c625887288459db5727210ba9a301fb8c934dd1d8dca68039fe5b2e1a8d7cdfc6d875e5851098100c3cd42544ed90bb55b58d20a501fabbc485d148c615a3b070fa0520da2ed68ee115a4411d5418b47f3d95616096f67a7a36d68f1e8df82eca8ef96fb4a96b3422fe046a37ea5f5967513a559bd770fecab7228b0692f439765c9e9c6ea4fc608e0b27f9b49064daa2bac06f83f6d87ebc61fa3a29bb5ed39641245ce8cf43770df32a84838802b0827ca5a40e2003915e2ed108a005637bb028d29bd2cfd28a1bd55e67ed1b6b7b72163c27c4b0e36d1b134d6dfdb165a66fb46498fc04bb8053b84098af5b18758631d1318d625a6fa4d3ce5a4d3a90e10c6363a26b5ae96c2d56f87ad21a6118af6847d041f88f852ddc3f250c088ef5cb31198f3ac81cff9a5bab26ed56c09f8416188974e08349f7da28fc754b98c1ac4ea0060ac1e1b1c49f7dbadbc59254b265dc418cab9ac14e2bbecc4c3103543e37984efb1f61315e10d2b422732217d3a9b0cfe4561f3765d3bda60be239e02bdc164dd631582e8c87dd8fa60d63dcf9e7f3dadc4ce5e4433a42425b8ee8cb8a2defab0bf9b6109c90b5655b79b18c06884f2670a985d454e08e54de69f645cb0cbb70620bd988ee717c310ae77b4abe81c01c6e7f47268ee20bc30b9062830917705682eba2c5ef966b877f33294aa5f8b29d3dd5ed92302087f34fa18d19a005de05f925e3e93c8c0f24507ff20cd23d9ae5452c32ff58c78ccdb1ab32c98edfaa6d2c3971934ca8f849ac360c286566eb72b0793f12cef84bd282368d533247ee750f18aeda484167f3d680e4aaa3aa0694441d4ff6a71531f1a30f87eeb71afd04c5d686e1f86f27586f4e2c8ff77c09612ba1af9b3fb93efd31af42f8e0498f35d07c662b743a08f2839cad8f95b90cbb4fc0ed2ca45dd093a549cde4c6ff08ce09a2cbc6f9f78b6f96643357f92f8f403202742057731fd3e343a87c0affe803cfdbddb8c2694ab63f2dc35da705624747e30a943000fc82c40f10e1975d2e2ec15aefd531b6dbc053606b054dc976f44d5b5a5f37e9c08532ce16cf8bca55ab6c814ceb855ab50b8b52620f8645a9dc25fcb732080d84bf39c3ebb235b4d96da527b64ec4b72f69e91d16a4efcaf76f2e1f968ca68a06f60b01ec7becc9ffd7877c0992cb0f80fb3daabc039513896bd7697843be06aba53e7761e11e075c61ef2d897d4d9f90041c14283746feeb3f0d456ba4be27843350fe43e7c1110b4439489139f6dae01c43f23ec71f08d3042663c65e059d368e4e2c6e49de45bf078d3182a1bc1208bc59379e705aa3309579947409f2a8b3d79099c8619f916e7a6fa333d2312a274247156b8c25cbcfcc59ef13339c700f56a8691dff39bd4338789001872c0d90929037dc0ad99b380a6ba73f331f73f9274f4c2bf5233d7482edf37bf6ffed4f2c0ee44a1d57cae0d644f25591dc03bf837571a82d0c31b61be7ff85a5b3843e8f96a50eaa43f5c137ecfc4e4530d08a2afa4ba02fcc50117a4ad0d5862302017639344c82749f673dbd650e49b35302d0acbab45c0973198291bb42b4cfcd3b0c272074341ea8eca19e122cd234da6d41bf5eedb706e16c17687ed8b84db67130796d26b94eac83bbcd785b603242bd6252c155711efd7dd22cc54e1eaf6d910d0f22c701f3d4da0314dd2829c6ee13bbcbd126558b47b8066bf0766c792a012315bd29bfeda8f28a2c1f4e638b701758e19a0e5bd5b4f19048b00a877d956292e345f8a3a8367892f955bcb5e50ca145ec5e2c9309e25941bd277e393aaad38f9b72a42514b27da6856223c37a1fc1327fa760551d3fdeb0b222ab180b16c9eea138cf4f327e88fdfee293c5b6b007028eb796a60772148282dcd17ffc1c90ed8b6540ede933545ed5a5301d6ff39734444ff3d85cda4ac3befa5083a4685e9e231eba4a91a35f4f7f48fd5ac2447c64c010e2a9f8e80691c95460e1995444466ec5f3cd71fe509a26ff0b7f3254bc8c3255e903834e841b37c70b267fb33deb0d1ed4ea84a869453ba508fc255b12cf847103d5195046c930ae4a75c956f22fcfe4186d547686b54bd7a534940d5d62216994eac0e8ed3bd2bd59354e6b9c6b5b10511d54a8b928040f1e1024a423b0cf519fc6e9673df5c48c0778c7edb8fa8d8ace77463a77d2d6313160e1ee72742953e433b6732ced59c93464fd91520847db238610ed0c289fc55647881a7d6257cf28090c75a6f19df079cfd35742a74a5ab270314f7c8039c20ff0f3f543d029b75a741b5dc6425241ac2ffabf1f96288e6d4ba34da09fb6049c2c8753fbd41fdb4bc68c57bf374ef4feb0df00c41319debb26afba2ff39e1799a1c2137f4e920ee5b02d93789b6b0c853e8143dae5b08ee85da2ea7c31803610ce797293ea95c16ade6dae2afb008e59d8b9505737f008b5227df5f1e4eb5d707f502698a17ead9b1f5ec09dff34248ff2fb153dc6df4812e39754a4baa42e1d8b77fbddef3ca091701ac28ae5fd422dbd8db5b122d3965383abc37a52d2fca5ce56eba974dba3d059cefe40e3c35c9daa8ae31198214303c1dcb90d58fc983ccfd504fa43925636f94b128d44e8aa5cd3ecfabd50a84062d03f7508a0575ab65ecc749d3ef566fdbc529a8139b7a7fb3a9bd784df52cddc6f2699044ba47615163fbbe19f3d88d38a8b71fe52b2611ca74341429d1cef1a7e350545be29d2caa560e60352cab074c298c44ca2c07f9795ce52f10aa3e2fcdef371f24e309b19e52218881f25a4674527edbe3b3bd0b9b536d810c6f9500c0c81bcfd9a440dd91c1d35c52758d2b2ae1a8497bb394c4f09d3947cf777727b0d1daf5ac4fe4fa3c247a791702cb84b96321b7fec81bf549d4eb5d6dafe019b26187417c68b064e4308908535a3e77b6cd3e28caaf12d726f15590b7958e40134d045a38cbb689131a7e85532f1c63dd4bac9e4d00645cd7b2b71704563f3738b92044a8153f6ba717800ab7cb238175c376d7add2c5ec38e4c856f1ab9c3ee33f6ca6d576ae908dd290e4bae23470182e253765e04e8eb02a791c4396a511ef467879a9e2818b8a4b1b0b39a6c44e816e3ebf6e3be93929dfcb38d5dad7d20b60215447674d0608b8b02331ac20e57083cb9b4449fecbb149441aea0ad82f00a82d87d743fc80d410922bc20923516885440f43c9f32beb81ce148def6140952583a7825c2d2fe012d52d30ef66d32a8a0864ac5c1737e2506228d41ff0515ee80be4cf012927dde0fd2a07cac68eff8c4437f2844d4df07936fd8753e5909f962c5c767f8719cc295bdfa8a16f3f36ff56e34d7b14b6b8c46d5af248b04a9c5396f84990e23d145670950bce5f5638e5e2cea37c371a4483729338f1305cbb32fa1c05dd9d21d2a69e5fa3abe9a2dad2237be20b4088393c04aa66cf13718de4bffac72f641a8c017a1d5568fa15a6a06e4dc833874ec95af6f115bdadf15179bfc8c4e3e64f26f1299e282c4ab397340934efc1e601afc630fe195e8ae7d8da1310568cab4f2fad085d0ec39710d8b7c812b3fd55c6f50925bcfc90fbcb35b8daa0f1e1f69d82fae2034039f7ad6921694ed48a55a68bc541e6d86f1e33c261a92d48b50eb58a03d8e31b2f6564a4ddc3ee988d0dc47b4b610a9a9dcb87571b5c1edb3362df0ec3d58872157e0f7247dfa8100b4478b705702a5620c9201010f40232327550db333e845dbecd6aadbd0a94c064862b1100b4dd45ece811b8c0275e3753e11b4bcd8bc5ed7668e72afa5bc5cc17b4c313273755f532ecfdefdf2d5c47999453a3b7c158d98332f0bd3a820cfb2c8c3bcd43197e7395a032cec6e41662079f2f654965aebc393e22b5c8516d9b8ad01e33ee481a4ac46a2df304dadeaa9e5274d340aaebe14dcea315fe1279f1a41a5c7aa8c94bf4b3d48757503171f53488e01210145e62c0de7c39737848dbdb1b207d4d33b8de180b020e8a76b1b521905e5e3ce97292f8558fb68efdee774681bfffcf1dc3eef35f660dd1659a32950de2d50e762313beee330d9c2a9fe8ce5e4e61ddd86378d3551335f6ef62053d3b248a8c33a11abdf3f3aa1975a15f4a6957a13d5b12a44d0f2b52b9a2d996e98c630c0f2abca80c7ae89efcf81ae284a0d19582cb1319d207077e5657d245533181ed6e07e0f7647123fc46c37bd75b4f4d181112b4a08acdcf445332cb9dde69a0923dd9244dd2ecd818b19588939922e3b2d8dd9d9fed95fa55b0e4564b38aca2c4d24eebc634664400177fbdeaeb278bb1d8eb11baf4be5c87d4f8d9a855bfa75df4c51fb4eec87a27c59df9a47d82523b08022a1c0fb22ff6f93c3d2cc22a4111a6ec5be428cba33617be65739c2240248f3a02d01ddf2d6aca9e537a2296b16d082d2b868504371dd5e41898885b03ebfaca73b40e8924ece83c1c80de6ce14943e1199c6f81bf359f44c3ed5ae3c6eacb730b1039f0b6555347bd566dfff45a7a2176420ab2b40916a73b66a3ad07af6e1ac5597393d203fa1ad34d4564af956a0a3e2997e27a4e5eff67dd89cce8875d995e00c1858234f149f6ad4cac2b8056966f726df57b8c4ee8f22f23097ba1471b1f1036e3a499400fccdb75b56eb13e9eca1407d5bff4b075b06d00fcbfcafc28431eb33156232e73c6577e3eca437330c494ede57b9609e1f40634918dea767338b5542197410cdc000143ace89ca0b7bf645b3267f74767d7c7fce05d2f59c137204e56bfa711f66903c511f681cf7a1b4f9fc0f42b7c438ff8957e1059375321df5b0c5c884f46d94c21686e1300582d34928bc398653118f79bfeea2e7cfbbf31a7718f4aab50fae57db94203d43e060365c9a7455241be03d82dffc3783d0f6aa170c0866eb0dad07485831526922d8348a7a16e2e9903a2ac93c58c6dce83127fab17703ec004a519ae5675baffb31bf4b52f9ca992a84017a44d68dc693abd829947342f277fdcbc87168bcc03c32b8b1e81a1915af2517c464af07d52b79d1b0e53164c82ba049f81e92ed1dc20a88fd72e9ce7aa4b22a7cc57dc5527d14f62bc29cfc9d57ed26fd523cac39ac00ba12d3a49d694709924275fc0793d56acf9558818dc9eb210749fa5307d45886b879257d627cee0542b51c2ce6ce134100efb47c92456ece5b73cdc051f570810a8d534222649eb56cf73a377162b753de6c282bcd4a25dda21dd10901bd8dfe8fd4ba8a70811c39707beded23dd60f23e2933372e3a6bce099899b07f0a4c4956fd98e956a8649622c77717de099463c0c6c9389ab4a1ae10f8ddd086d876af2943ee0b6b402ae5f89e09922e8c510ec0caa0a83e366e916400bfec88a52ab457037a35ddc6a8e2289c33684a5915c37bf5d227cbc65a737b52bdcb4fbbb7b4e7f965db116b46044d0870846c730dce12e120b1fe6dd5798ced24cad72c59a3f44de4978b8bc05a1dbeb766be6e2abf6ef46c67a58a370e54e92d89e5f44525e82b94a388d8d0cb20c3469a258c1633c9dddb6854aee255f93f59435ff317622f6899250aa185c207644275278580c5d32401741fe264a2e03b80f442ed58fd0704ebac923ac6a5abb7f0c695252f82e3fbcf2b99d721589a8fe3fad4d5926aee3d7bfafb6739e525faae3d25b12841fa2cc61dddc44d36acb9a8b72d60ecdd9c8cf04f9bac341b5e0f9bc59042db8126324888b07afe72b18cce36d61eec975b6b4ef5dc4a16ac14440cf770599bd4db630bd110eb63a03a80cd95c16d314a4de60cc5115bf0754cb7ab84a827ecefafa96069c721a5979f227fdc2467b4cd1975dafb5b28e1d6f3c1c3a2816ad831dd98c1378a03798c128f176426eaa0e361571e758d54bf4ec2c988355f016e16d6cd5cf97bb4891ab33f5623b7e796af313cc7a9e2f9510cd2bead1ea5dd080d9de1f595b2629ebccf69a0feaed3963ae8a6c89edd66fbf6e566379898185828925f8669668d6bddff961b08aaedbbe7fc196931a887ec740da6bcdab8f826a34aa2aa1e406a258558f3baf022a64222df4d6ee8726c79ba3dd6e11a19e4b4bb49b4a8cd99c189e6392f08ad731e415b65d0ccb919dca46efe9f79e21437111ab09e926d3038182044ae047bf1cc92e2d2644c528985719667a1a8abaf65d0f211172ea789b2fa016e1a88325d1ed706239da4dbb9e2079e3598b4ae5885667587ba1e0921c9ba55d7a3be4c47bc2f2f3547ce9efe32e5a22855f761bd4cbe1cd9337eda4bd7d82a918084d7e116b656104ca87e64b1b8c62323c3c296c5b5b98051feb607b872edf9f789744aff710c4b7279711182bcac6b76c05f5cd982f52f451e7e29046550e012e01d8cdd3e305427030f4247488c9136303084c12175c5c781cdd08aede5a356ea0ccdd05a460be3c7b4bfd62c3ce9ab68e285a36c1546d0b18edad71f69f5bedb340772e1bbb035514b085067259e39f59dc292a12557350c66904b253efee29a5eb7a6920f583c899dc46a1d3e2af2db3a3d1a0e8d1f98722a16c6cc1e401058d60c8c436d8f1166ba53bdde5810f9d0288528affd486c266546a864c92af3df8abd451cc1e0d6bfea534865cea9d49b3ea5e390fa823118df8a61e31022f5fbb8ceee870bf2e60890263c4d14e24d053d0fddf665ff80a66fa00a5957f8a30fe82a4b82cf2f6b4d49def98f66bfcdaa0aef13314e950ca9f3849b1edf3b82eaf74a0dbcf45c3dba9bd2d853281a78484f1efaf4150da1207ec3cb61fbcbf759f8182b7052b28d7164b73197b0a440759fe9d5ddf827f1897a174e82fb968a9a07c61bee44bc1f7f9ee5c6de04c02d57735c5fab741b36aec7c8642e56cba932a08b8e8a9d3eb066a4ee7cbf22e5abbd4346de59eca1f24ad9f7f9ff7621e5f30dd08f4cddda8e80e496908109f5212a72bab1378d1237def07bdda4178719975346c68405de15153031fb17535894e5e3c1de6fdd507333f0226b78ba7cae509cfb48d6735ede9392650bf85ac1db919b1e9fe0a823119d8253204dbb2f7a8f524be6d419f3a45c5051a7a88ef0bd41586d90c11a894d647f03895f671a6e19f1c70e32668653aba8366a3d372522f49844081a9637db080663ab02f4a8af502955d5411461b62f85308c91852f8fb9f0bdddd500b4a133791d3a2f91a82dc4b09f5ad2196a9172ab0cd3fafe7266e9f6d159110d99ca8da8a34b17be17a04ad4509a9fffab1e45e10f10e0cf9cfbd9c761ad044064c07e473fdc626289cfb88b13a11455c069b70aa02426d9119ac878a14c9483be9c0d5bcbb5fa76c8d06531f59c7cf7c26372e750e2f332418ca769e5e7fbeb3ada7bb58b573a0635e2e3ad9a53ddb809ea01086a3fa993ad57e89da6f9c5e61bd0f8ba69212a386b2aa1ae17520d7fb989dbe14021885eb50fa3048aebd42c861a09a308b660d382c0480ead8a52a1e14927c7c77957f94bb59ccfd557f8c4a7af23360a298a603d20ebc386db041d8c306b3e32b0bff541bdec5ff75c3b40950815cf9f89d48a382f67e44c409d046c01fb1262aca0df6f5238a3c3c09977261494f7361ba326815d6e23f49e4d6d4b54665081067332265fff59cf54af9da0db9d19bc611cbcb6e6f3f1e2e1ffb6cdd6253578d78d06a2ff5f9250f1994c5749e3ce49231fbd63bba28e948f9150933e3ae31299babaa41043b181a100882e613b4b4b8f49ceeb742d22f860853a9b917f5a323a8a1fb1f3363a7be4407fba44b408f259b5db79a055b92ce3d7a0649cc59f4afa2b1f69959d5c6f5eef1fa7987a47bee4491f685c52e9db1ee1a231ab5a4bae1019c97868a409dd0d57b32525394a233023c4a7ac429808bbcb57a34b41883202744c3bdebc0a637773273f19c2be6e806bef7fc1002846db762ee4e16867773808c5477987d5851d5b1641d070feabc203cb3d7943ffb206272fcac1bccb616352d85975f5a22c0f247548535ad9fb83fb2be17689453f10691143c060cd964df63c3c70e7b1cfc7e2b468015f327f9869353477bfeeed330b03ddd9e4e0a2441182244da283d7a59d2b2b20e6de3e3a47c26aeef4944c1190bba674523a6c3c4ed6bac53b9edffcb0e9fb19d8bf36949d03ef6a7e59eb903a00d9614f642d1932c766421906f5b177963c71e881453560e3ffcec792e8dc46b1832a8fcb2ab2268a9c1fb648d1c6fa1c8cbd50d5a2d8264fbc6c063e6daac5519d362da389dcd3d12c8039f991de91e728abf5bab95c3aef66dd8cc36c60e73cb10afb02eff6df20ff12c59b142b07fc48fe94612de80b8b958f78256fd7cf3c6f79a83867f3bb5f70da392957badadecefdf7b6e4ebd39ff945397c7d302ca0a5a3918d8abb893cd9cdd680916a50fe19699ff0476ad82e6ba46523f26ccc5eb65313c1df1077c8876d2b73bf86ba311862d12b0c557a92ef827197121512e87f817167d4b17c7e225a48b3f8fbbf4187438e0e9b78e905cdbeb72e80dfb37ec0104f5186b39b4ff34f0cdf4b74dc915acd3f98874cd6a67308d0ad9697121ac477550b1affe004f433705933f9647522be65cb5a7471120ec942aeb956f195be0c1783102cf7d842f2968222ae1a7fa6513f200d3fa85d71724956ed697f0673ee3b40a4d46ba4850439ec125b708ed52b52b9f72906477d520c90a9f5dd49a7a33a328137a183f439895532b78ae451a8c3db789bc862fbc37241d523027e1a008629c969380f6eb55f9cf3f0675bca6851f00df6aaf90de9f62d5c179945ef81d1073850301f97e379ea415d830e3f3751cf83e2dba541cb6cdd89e6b674f2c53e329e5f3dd418d534ada6469a5b3bca5b7cfbdfdd6df4abaf77d4520d0311e801145c91b52586a56086e663841b702f52cef9fff8cfb7b33dfa125688ba6b4fadd1dca8defaf4259ca85323b23d3bbb45933562c25af3e8d7bc6ad4a50ae974f8d207994b3bd74a6812ab6a40fcaf96bb4e17bd20d742b14c72226caef3e0f5c56c4930071e9f9a894f18650fbb785c6f707605c86b634c9722c8690cf3a954f68d7c2db3a257339ade67a41259f6f878dd0ab7876deffa77f6f00819282a8f4c4da84c6cf4f335cd0410770a2b1a1fbb3f85f4489eeceb78bbfddb2d1866c57b41f6ed179a0bc3750a486403d23473f2feef43ebc5af1018d9c20089e277d77fb9c34f425c8f8af4c49864b57572fa8c232e61ef37194251a1ddc2f73ffecd57e638751cb72bcb2c40d22540166ca1e8588f24b010c9fbd962e3a2c23a7e93f131df61b8703ce326ed80cc87912d3c6aaa27574bbe8d65bcaecd660c31cead132a44b1d0e4a53cacc0b82a263c4e7783944af0af08ea9e68e8e25ed9111cfef841f1b2fd24164f9097f70efe09b1109e5cb91fe68a2760381fd63a7fd422dd578a60661abc9ee3a5db1c2cde2fb21f2040f1ed3fc27b99e254256949d0560e8b98fa028fca50768caa951a87bf8969af498d50a9ee773c9caa7d9f7d8e1955506013f198cda316d79b177e59f233b98f727afd2494fc18642f0015adab756ea6742690c7d00f28655b915ce4eb8b3ba2e8559ba23e1ff1ccc9f79ae2df85f924459c56715dec78ef4592352eb1a850cd65ecd36e1a9121e888586b7b2fa84da920b8cf44480433e61ab076b10171c0537524bb170a4b99b0b0c437418a665b7ef909652b6483b20362e557c1480c2a2a0efa221fc59054a48122b52d38245f9bd026001635be5b155f5c766a59306fbde231fa72b4d74449a2fe8fb969496ee26af5881adaafb4189b439877ab8f78709cfd32c10ea576a010bfc137b7a4aae137ea3d29070ce3bc8dbe6655e967115ca3461ad9d28b9cf8af07441e68a54ec5e889846f3978f07ba51f7d5af5da78c5c675dc5d0c1a4a399ff4247203573a46fb903eaf7bc886e6cbd3126fa4a3fe3bb13bbdfea7da871f6563aa750f6ad7895b34b2809563dcf5ed30f1c60cef4138aa49d4f55e396534ed10cf4d857723a2b442f47d79de162c30ec6c4daf939b4c88649494e3682d1da81b4a5928d8e18a16c46707a685305e592589acb484e28e9d5af89c44b6e563d125ec97c0155410527406d94b90bc9576a662db99da1cb82b04d610d02187ce08f22ea0e8fd31919d53fa6aaf980e31ca7f8610e695a41919c24136a8406c62d5f15fca36507002b54ece17664b5247583ad60d863f283f3c288946139575dcaedc978762e85f534e56334ef0221c34ffae054ddf79339b8f08701e9699b11041df8f518dd33203363c8098fbefb01555bcc2542422777b38d8dff11b15aadb0c251ce2c5b32f8735b3cb784f2e5731b48feb5a0e791a1106abdea0f7d1f087737cbe7fdf523fa14c9be2a2987511004c5b7ac1814ef6961db16799698242452c469a07c30e4a1f73193c74a41bdd88aef50035e4648bc9dfa276951798420a45e4085932bdb9381af3cc4678bd962af616549e4020d2c9fd25e2117a6d8934fde2218273d7833d60ea492e251417a27e7fb32012a940a6b6487af4b64958bf05f1b1107732149d227eeda5ca5a43cf583dc297d66072a1acd75e93a7caefd36a0d581e21d5cb08654c4ecef46ebac5391546e0b7d2a6418548d8f816446bcf237f676e873e6bae9107234abe5ab24c53ea472ad10653cef068fd9f4e729fc0d526e489f8df13af5575f1e70e0ec22899728b0659d70fc2dd509d9df3ec170638f89e540f4d3f02aa9b1b1819f84da596e0d7b45a5818061728f8eeccd2bea0f460dd7e18cb95f2364c50e351f0690e184eb63ebbb14a0b4b2117e44f3b2b3", 0x2000, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r7 = getpid() r8 = gettid() rt_tgsigqueueinfo(r7, r8, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x3}) signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r1, &(0x7f0000000740)=""/377, 0x179) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001200)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x0, 0x0, 0xc5ca, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x2, 0xfe, 0x2, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0xff, 0x5}, 0xe) 1m9.588532841s ago: executing program 5 (id=1024): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=ANY=[@ANYBLOB="88000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="6b0033008000de00ffffffffffff080211000000505050505050000007000000000000006400824403010e0503ff4f063c040180a91c2d1a02000c0200000000000000000001000f0003030303037107fffeff"], 0x88}, 0x1, 0x0, 0x0, 0x880}, 0x0) 1m8.678996339s ago: executing program 5 (id=1025): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='lp', 0x45) sendto$inet(r0, 0x0, 0x0, 0x24040ffd, &(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10) 1m8.365735351s ago: executing program 5 (id=1028): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x19}, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@dstopts_2292={{0x12, 0x29, 0x4, {0x5e}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x5e}}}], 0x30}, 0xc4) 1m8.164658816s ago: executing program 5 (id=1031): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) getpid() getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) r4 = semget$private(0x0, 0x2, 0x2) semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000000)=[0xfff6]) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) shmctl$SHM_STAT(0x0, 0xd, 0x0) mount(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='squashfs\x00', 0x0, 0x0) ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x891d, 0x0) 1m3.614622264s ago: executing program 5 (id=1032): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x11) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 50.862846749s ago: executing program 6 (id=1048): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003200), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000003300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x34, r2, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x8020}, 0x200000c0) 50.535776936s ago: executing program 6 (id=1050): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x54, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}, @TCA_CAKE_ACK_FILTER={0x8}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) 48.367018763s ago: executing program 37 (id=1032): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x11) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 48.238501154s ago: executing program 6 (id=1052): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) 46.786822339s ago: executing program 6 (id=1054): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x23f) setuid(0xee01) removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='user.incfs.metadata\x00') 46.598610776s ago: executing program 6 (id=1055): r0 = syz_clone(0x400000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) socket$nl_netfilter(0x10, 0x3, 0xc) ptrace$cont(0x7, r0, 0x3, 0x2d) 46.312167011s ago: executing program 6 (id=1056): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000000000000200004000000000060000000000000002000040"]) 31.263273097s ago: executing program 38 (id=1056): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000000000000200004000000000060000000000000002000040"]) 21.062852083s ago: executing program 4 (id=1064): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) sendto$packet(r0, &(0x7f00000001c0)="1005000000ff8200040647", 0xb, 0x0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x1, 0x6, @broadcast}, 0x14) 16.029802531s ago: executing program 4 (id=1065): syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) close(0x3) 15.695703813s ago: executing program 4 (id=1066): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000100)={0x3c, r2, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x3c}}, 0x20000000) 15.557290382s ago: executing program 4 (id=1067): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) listen(r0, 0x5) syz_emit_ethernet(0x42, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x34, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x6071, 0x0, 0xe7, {[@exp_smc={0xfe, 0x6}, @mss={0x2, 0x4}]}}}}}}}, 0x0) 15.021092436s ago: executing program 4 (id=1068): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r0, r0, 0x0, 0x2) 15.020971056s ago: executing program 4 (id=1069): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x58, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @key_params=[@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_TYPE={0x8}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1716}], @key_params=[@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 0s ago: executing program 39 (id=1069): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x58, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @key_params=[@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_TYPE={0x8}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1716}], @key_params=[@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x40) kernel console output (not intermixed with test programs): uture, please upgrade to mdadm-4.5+ [ 307.658653][ T6830] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.659755][ T6830] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.689044][ T6830] bridge_slave_0: entered allmulticast mode [ 307.772259][ T6830] bridge_slave_0: entered promiscuous mode [ 307.878024][ T6833] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.878168][ T6833] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.878407][ T6833] bridge_slave_0: entered allmulticast mode [ 307.904209][ T6833] bridge_slave_0: entered promiscuous mode [ 307.937211][ T6830] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.937350][ T6830] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.937582][ T6830] bridge_slave_1: entered allmulticast mode [ 307.982475][ T6830] bridge_slave_1: entered promiscuous mode [ 308.343045][ T6833] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.343140][ T6833] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.343283][ T6833] bridge_slave_1: entered allmulticast mode [ 308.348619][ T6833] bridge_slave_1: entered promiscuous mode [ 309.824965][ T1416] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.066050][ T6824] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.066223][ T6824] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.066425][ T6824] bridge_slave_0: entered allmulticast mode [ 310.069237][ T6824] bridge_slave_0: entered promiscuous mode [ 310.317126][ T5832] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 310.473366][ T5832] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 310.473398][ T5832] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.473423][ T5832] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.473460][ T5832] usb 3-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 310.473482][ T5832] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.552749][ T5832] usb 3-1: config 0 descriptor?? [ 310.634760][ T6824] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.635298][ T6824] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.636284][ T6824] bridge_slave_1: entered allmulticast mode [ 310.644899][ T6824] bridge_slave_1: entered promiscuous mode [ 310.990526][ T1416] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.995997][ T5832] sony 0003:054C:024B.0001: unexpected long global item [ 310.996853][ T5832] sony 0003:054C:024B.0001: parse failed [ 310.996953][ T5832] sony 0003:054C:024B.0001: probe with driver sony failed with error -22 [ 312.195228][ T6830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.355947][ T6833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.378312][ T6830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.488202][ T6833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.809018][ T1416] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.893922][ T6824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.289120][ T9] usb 3-1: USB disconnect, device number 4 [ 313.394295][ T6824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.035124][ T6830] team0: Port device team_slave_0 added [ 317.791491][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.791568][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.171762][ T6833] team0: Port device team_slave_0 added [ 318.174916][ T6830] team0: Port device team_slave_1 added [ 318.211293][ T7093] ALSA: mixer_oss: invalid OSS volume '' [ 318.337474][ T6833] team0: Port device team_slave_1 added [ 319.729673][ T6824] team0: Port device team_slave_0 added [ 320.111359][ T7115] syz.2.232 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 321.141358][ T6824] team0: Port device team_slave_1 added [ 321.457727][ T6830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.457743][ T6830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.457766][ T6830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.796526][ T6833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.796542][ T6833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.796566][ T6833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.801650][ T6830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.801664][ T6830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.801688][ T6830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.095673][ T7123] serio: Serial port ptm0 [ 324.167114][ T7123] netlink: 'syz.4.235': attribute type 1 has an invalid length. [ 324.167134][ T7123] netlink: 'syz.4.235': attribute type 3 has an invalid length. [ 324.167146][ T7123] netlink: 224 bytes leftover after parsing attributes in process `syz.4.235'. [ 324.301959][ T6833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.301975][ T6833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.301999][ T6833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.045425][ T7136] ubi31: attaching mtd0 [ 325.120116][ T7136] ubi31: scanning is finished [ 325.120165][ T7136] ubi31: empty MTD device detected [ 326.866506][ T7136] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 327.173696][ T5159] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 327.224655][ T5159] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 327.240954][ T5159] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 327.249406][ T5159] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 327.293370][ T5159] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 329.471157][ T5845] Bluetooth: hci3: command tx timeout [ 331.094160][ T7160] CIFS: VFS: Malformed UNC in devname [ 331.551063][ T5845] Bluetooth: hci3: command tx timeout [ 331.668334][ T7169] random: crng reseeded on system resumption [ 332.821570][ T5159] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 332.829928][ T5159] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 332.855404][ T5159] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 332.881910][ T5159] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 332.895009][ T5159] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 333.007725][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 333.012632][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 333.022982][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 333.034195][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 333.044058][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 333.177348][ T1416] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.087311][ T5845] Bluetooth: hci3: command tx timeout [ 335.098736][ T5845] Bluetooth: hci1: command tx timeout [ 335.155440][ T5845] Bluetooth: hci4: command tx timeout [ 336.191037][ T5845] Bluetooth: hci3: command tx timeout [ 337.168013][ T5845] Bluetooth: hci1: command tx timeout [ 337.363320][ T5845] Bluetooth: hci4: command tx timeout [ 339.231645][ T5845] Bluetooth: hci1: command tx timeout [ 339.405939][ T5845] Bluetooth: hci4: command tx timeout [ 341.320923][ T5845] Bluetooth: hci1: command tx timeout [ 341.406715][ T1416] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.471056][ T5845] Bluetooth: hci4: command tx timeout [ 341.562884][ T7138] lo speed is unknown, defaulting to 1000 [ 342.075570][ T1416] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.607172][ T7232] vxfs: WRONG superblock magic 00000000 at 1 [ 342.615173][ T7232] vxfs: WRONG superblock magic 00000000 at 8 [ 342.615220][ T7232] vxfs: can't find superblock. [ 342.666204][ C1] vkms_vblank_simulate: vblank timer overrun [ 342.696948][ C1] vkms_vblank_simulate: vblank timer overrun [ 342.718306][ C1] vkms_vblank_simulate: vblank timer overrun [ 342.931845][ T7230] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 343.006954][ C1] vkms_vblank_simulate: vblank timer overrun [ 343.237084][ T7175] lo speed is unknown, defaulting to 1000 [ 343.491295][ T1416] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.568456][ T7174] lo speed is unknown, defaulting to 1000 [ 343.800472][ C1] vkms_vblank_simulate: vblank timer overrun [ 344.521354][ C1] vkms_vblank_simulate: vblank timer overrun [ 345.300824][ C1] vkms_vblank_simulate: vblank timer overrun [ 345.726708][ C1] vkms_vblank_simulate: vblank timer overrun [ 346.611802][ C1] vkms_vblank_simulate: vblank timer overrun [ 346.671259][ C1] vkms_vblank_simulate: vblank timer overrun [ 346.815072][ C1] vkms_vblank_simulate: vblank timer overrun [ 346.942855][ T7268] Malformed UNC in devname [ 346.942855][ T7268] [ 346.942902][ T7268] CIFS: VFS: Malformed UNC in devname [ 346.953055][ C1] vkms_vblank_simulate: vblank timer overrun [ 347.062744][ C1] vkms_vblank_simulate: vblank timer overrun [ 347.101545][ C1] vkms_vblank_simulate: vblank timer overrun [ 347.167888][ C1] vkms_vblank_simulate: vblank timer overrun [ 350.222109][ T7291] ADFS-fs (nbd2): error: unable to read block 3, try 0 [ 350.961291][ T7138] chnl_net:caif_netlink_parms(): no params data found [ 352.460315][ T7296] vhci_hcd vhci_hcd.0: failed to lookup sock [ 353.266264][ C1] vkms_vblank_simulate: vblank timer overrun [ 353.301043][ T7174] chnl_net:caif_netlink_parms(): no params data found [ 354.240352][ C1] vkms_vblank_simulate: vblank timer overrun [ 354.433734][ C1] vkms_vblank_simulate: vblank timer overrun [ 355.014037][ T7314] netlink: 36 bytes leftover after parsing attributes in process `syz.4.262'. [ 355.086950][ T7175] chnl_net:caif_netlink_parms(): no params data found [ 355.098367][ T7307] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 356.196134][ T1416] bridge_slave_1: left allmulticast mode [ 356.196254][ T1416] bridge_slave_1: left promiscuous mode [ 356.209222][ T1416] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.476578][ T1416] bridge_slave_0: left allmulticast mode [ 356.476613][ T1416] bridge_slave_0: left promiscuous mode [ 356.476863][ T1416] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.615155][ T7324] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 356.677214][ T7324] cramfs: wrong magic [ 356.687976][ C1] vkms_vblank_simulate: vblank timer overrun [ 357.139410][ C1] vkms_vblank_simulate: vblank timer overrun [ 358.260237][ T1416] bridge_slave_1: left allmulticast mode [ 358.260272][ T1416] bridge_slave_1: left promiscuous mode [ 358.260522][ T1416] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.342481][ T1416] bridge_slave_0: left allmulticast mode [ 359.342514][ T1416] bridge_slave_0: left promiscuous mode [ 359.342766][ T1416] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.883395][ T7347] Bluetooth: MGMT ver 1.23 [ 362.191043][ T5845] Bluetooth: hci2: command 0x0406 tx timeout [ 363.192714][ T7356] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 363.695104][ T5845] Bluetooth: hci0: command 0x0406 tx timeout [ 364.496525][ T7363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.275'. [ 364.724009][ T7362] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 365.623365][ T6028] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 365.837945][ T6028] usb 3-1: Using ep0 maxpacket: 8 [ 365.873401][ T6028] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 365.873592][ T6028] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 366.005485][ T6028] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 366.005514][ T6028] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.005533][ T6028] usb 3-1: Product: syz [ 366.005546][ T6028] usb 3-1: Manufacturer: syz [ 366.005560][ T6028] usb 3-1: SerialNumber: syz [ 366.343614][ T6028] usb 3-1: bad CDC descriptors [ 366.384459][ T6028] usbtest 3-1:1.0: couldn't get endpoints, -22 [ 366.398088][ T6028] usbtest 3-1:1.0: probe with driver usbtest failed with error -22 [ 366.474556][ T7370] kernel profiling enabled (shift: 7) [ 368.094822][ T6069] usb 3-1: USB disconnect, device number 5 [ 368.753725][ T1416] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 369.366437][ T1416] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 369.432570][ T1416] bond0 (unregistering): Released all slaves [ 372.309453][ T1416] bond0 (unregistering): Released all slaves [ 373.330268][ C1] vkms_vblank_simulate: vblank timer overrun [ 373.683234][ T7405] ceph: No mds server is up or the cluster is laggy [ 373.687406][ T7409] Driver unsupported XDP return value 0 on prog (id 129) dev N/A, expect packet loss! [ 373.693192][ C1] vkms_vblank_simulate: vblank timer overrun [ 373.695410][ T6069] libceph: connect (1)[c::]:6789 error -101 [ 373.695611][ T6069] libceph: mon0 (1)[c::]:6789 connect error [ 373.852747][ C1] vkms_vblank_simulate: vblank timer overrun [ 374.240440][ C1] vkms_vblank_simulate: vblank timer overrun [ 374.244086][ T1231] libceph: connect (1)[c::]:6789 error -101 [ 374.244309][ T1231] libceph: mon0 (1)[c::]:6789 connect error [ 374.354853][ C1] vkms_vblank_simulate: vblank timer overrun [ 374.369994][ T7414] random: crng reseeded on system resumption [ 374.529074][ T1416] bond0 (unregistering): Released all slaves [ 374.951396][ T6069] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 375.130806][ T6069] usb 5-1: Using ep0 maxpacket: 8 [ 375.147969][ T6069] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 375.148022][ T6069] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 375.154014][ T6069] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 375.154041][ T6069] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.154058][ T6069] usb 5-1: Product: syz [ 375.154073][ T6069] usb 5-1: Manufacturer: syz [ 375.154087][ T6069] usb 5-1: SerialNumber: syz [ 375.181839][ T6069] usb 5-1: bad CDC descriptors [ 375.186014][ T6069] usbtest 5-1:1.0: couldn't get endpoints, -22 [ 375.186095][ T6069] usbtest 5-1:1.0: probe with driver usbtest failed with error -22 [ 375.767359][ T6069] usb 5-1: USB disconnect, device number 3 [ 377.297317][ C1] vkms_vblank_simulate: vblank timer overrun [ 377.859109][ C1] vkms_vblank_simulate: vblank timer overrun [ 378.297395][ C1] vkms_vblank_simulate: vblank timer overrun [ 380.400939][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.400984][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.981598][ T1416] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 383.813479][ T1416] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 383.917813][ T1416] bond0 (unregistering): Released all slaves [ 386.395910][ T5159] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 386.665077][ T5159] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 386.734754][ T6530] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 386.736754][ T5159] Bluetooth: hci0: command 0x0406 tx timeout [ 387.733810][ T5159] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 387.735023][ T5159] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 389.422768][ T7494] CUSE: unknown device info "KJ éH+ßãÛ¤2Lh¸änLþ1Õ`†CcÝòn§õ†îì8­¨×0º©®(À3Õ¶ië®â>f¡Çè_Ù®,°ð<Ö_e¤FÀÆ" [ 389.422786][ T7494] CUSE: unknown device info "3ÜŸ•,²¥Ì˜õ" [ 389.422797][ T7494] CUSE: unknown device info "Jô©Ð2S Zûü !e/ëÅúãõž‘­J½+-n´¸a4¼ßØÁDÿ|G$öó­5O~©q ´ƒ [ 389.422797][ T7494] f𳦧ìýzóÚXÁSAäx¡Ùjª½T¾Ç”¨åw— üæšxRÉQ÷®(hÒj pøVdY0¨Æ|M?2JÿúIšvö^RÎ@´å" [ 389.422812][ T7494] CUSE: unknown device info "!ToÛ}Ý&|L+U²®oæõϲ±„Ð"–¨FstVµ:׌E• gJºî‹ÂÁ<@cÁ”²ûŽ4ÊTáM˜M|©·š‚ô" [ 389.422823][ T7494] CUSE: DEVNAME unspecified [ 389.426636][ T37] audit: type=1326 audit(1759033674.318:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7490 comm="syz.2.300" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f032589eec9 code=0x0 [ 390.546739][ T5845] Bluetooth: hci5: command tx timeout [ 390.622625][ T7501] program syz.4.301 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 392.590935][ T5845] Bluetooth: hci5: command tx timeout [ 392.769155][ T5159] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 393.079443][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 393.096444][ T6530] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 393.131873][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 393.241772][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 393.274170][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 393.498132][ T6530] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 393.521564][ T6530] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 393.580147][ T6530] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 393.607944][ T6530] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 394.028991][ T7524] net_ratelimit: 5 callbacks suppressed [ 394.029012][ T7524] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 394.671354][ T5159] Bluetooth: hci5: command tx timeout [ 395.701718][ T6069] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 395.710923][ T5159] Bluetooth: hci3: command tx timeout [ 395.851034][ T6069] usb 3-1: Using ep0 maxpacket: 8 [ 396.033394][ T5159] Bluetooth: hci1: command tx timeout [ 396.041205][ T6069] usb 3-1: unable to get BOS descriptor or descriptor too short [ 396.112483][ T6069] usb 3-1: config 4 interface 0 has no altsetting 0 [ 396.118655][ T6069] usb 3-1: string descriptor 0 read error: -22 [ 396.118745][ T6069] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 396.118756][ T6069] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.162373][ T7534] netlink: 24 bytes leftover after parsing attributes in process `syz.4.308'. [ 396.762637][ T6069] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 396.771133][ T5159] Bluetooth: hci5: command tx timeout [ 396.821941][ T6069] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 396.822983][ T6069] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 396.823060][ T6069] usb 3-1: media controller created [ 396.902118][ T6069] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 397.523532][ T7539] binder: BINDER_SET_CONTEXT_MGR already set [ 397.523547][ T7539] binder: 7538:7539 ioctl 4018620d 200000000040 returned -16 [ 397.568166][ T7472] lo speed is unknown, defaulting to 1000 [ 397.636003][ T6069] zl10353_read_register: readreg error (reg=127, ret==0) [ 397.790826][ T5159] Bluetooth: hci3: command tx timeout [ 397.877390][ T6069] usb 3-1: USB disconnect, device number 6 [ 398.110818][ T5159] Bluetooth: hci1: command tx timeout [ 398.400834][ T6069] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 398.457532][ T7512] lo speed is unknown, defaulting to 1000 [ 398.518654][ C1] vkms_vblank_simulate: vblank timer overrun [ 398.550783][ T6069] usb 5-1: Using ep0 maxpacket: 16 [ 398.559197][ T6069] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 398.559224][ T6069] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 398.559243][ T6069] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 398.559261][ T6069] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 398.559279][ T6069] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 398.559298][ T6069] usb 5-1: config 0 has no interface number 0 [ 398.559415][ T6069] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 398.559442][ T6069] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 398.559463][ T6069] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 398.559501][ T6069] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 398.559527][ T6069] usb 5-1: config 0 interface 125 has no altsetting 0 [ 398.559544][ T6069] usb 5-1: config 0 interface 125 has no altsetting 2 [ 398.571940][ T6069] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 398.571967][ T6069] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.571985][ T6069] usb 5-1: Product: syz [ 398.571997][ T6069] usb 5-1: Manufacturer: syz [ 398.572010][ T6069] usb 5-1: SerialNumber: syz [ 398.601167][ T6069] usb 5-1: config 0 descriptor?? [ 398.615156][ T6069] usb 5-1: selecting invalid altsetting 2 [ 398.618681][ T7517] lo speed is unknown, defaulting to 1000 [ 398.877721][ C1] vkms_vblank_simulate: vblank timer overrun [ 399.045833][ C1] vkms_vblank_simulate: vblank timer overrun [ 399.203557][ C1] vkms_vblank_simulate: vblank timer overrun [ 399.265320][ C1] vkms_vblank_simulate: vblank timer overrun [ 399.456165][ C1] vkms_vblank_simulate: vblank timer overrun [ 399.699112][ C1] usb 5-1: async_complete: urb error -71 [ 399.699309][ C1] usb 5-1: async_complete: urb error -71 [ 399.699404][ C1] usb 5-1: async_complete: urb error -71 [ 399.699497][ C1] usb 5-1: async_complete: urb error -71 [ 399.848747][ C1] vkms_vblank_simulate: vblank timer overrun [ 399.870952][ T5159] Bluetooth: hci3: command tx timeout [ 399.885116][ T6069] get_1284_register: usb error -71 [ 399.885242][ T6069] uss720 5-1:0.125: probe with driver uss720 failed with error -71 [ 399.918127][ T6069] usb 5-1: USB disconnect, device number 4 [ 400.201097][ T5159] Bluetooth: hci1: command tx timeout [ 400.231528][ C1] vkms_vblank_simulate: vblank timer overrun [ 401.105850][ C1] vkms_vblank_simulate: vblank timer overrun [ 401.326269][ C1] vkms_vblank_simulate: vblank timer overrun [ 401.722624][ C1] vkms_vblank_simulate: vblank timer overrun [ 401.777502][ C1] vkms_vblank_simulate: vblank timer overrun [ 402.480589][ T5159] Bluetooth: hci3: command tx timeout [ 402.480631][ T5159] Bluetooth: hci1: command tx timeout [ 405.212466][ T7600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.317'. [ 405.213123][ T7600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.317'. [ 405.260328][ T7603] netlink: 68 bytes leftover after parsing attributes in process `syz.4.317'. [ 406.142730][ T7592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.316'. [ 406.142747][ T7592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.316'. [ 406.909799][ C1] vkms_vblank_simulate: vblank timer overrun [ 409.225797][ C1] vkms_vblank_simulate: vblank timer overrun [ 409.539035][ C1] vkms_vblank_simulate: vblank timer overrun [ 410.412968][ C1] vkms_vblank_simulate: vblank timer overrun [ 410.522589][ C1] vkms_vblank_simulate: vblank timer overrun [ 410.803690][ C1] vkms_vblank_simulate: vblank timer overrun [ 411.043285][ C1] vkms_vblank_simulate: vblank timer overrun [ 411.440377][ C1] vkms_vblank_simulate: vblank timer overrun [ 411.745202][ C1] vkms_vblank_simulate: vblank timer overrun [ 411.823487][ C1] vkms_vblank_simulate: vblank timer overrun [ 412.225283][ C1] vkms_vblank_simulate: vblank timer overrun [ 413.092034][ C1] vkms_vblank_simulate: vblank timer overrun [ 413.167978][ T37] audit: type=1326 audit(1759033698.048:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7643 comm="syz.2.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032589eec9 code=0x7ffc0000 [ 413.168030][ T37] audit: type=1326 audit(1759033698.058:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7643 comm="syz.2.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f032589eec9 code=0x7ffc0000 [ 413.168070][ T37] audit: type=1326 audit(1759033698.058:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7643 comm="syz.2.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032589eec9 code=0x7ffc0000 [ 413.168108][ T37] audit: type=1326 audit(1759033698.058:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7643 comm="syz.2.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f032589eec9 code=0x7ffc0000 [ 413.168146][ T37] audit: type=1326 audit(1759033698.058:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7643 comm="syz.2.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032589eec9 code=0x7ffc0000 [ 413.295700][ T37] audit: type=1326 audit(1759033698.188:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7643 comm="syz.2.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032589eec9 code=0x7ffc0000 [ 413.351064][ T1416] hsr_slave_0: left promiscuous mode [ 413.400307][ T1416] hsr_slave_1: left promiscuous mode [ 413.404893][ T1416] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 413.404921][ T1416] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 413.506437][ T37] audit: type=1326 audit(1759033698.318:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7643 comm="syz.2.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f032589eec9 code=0x7ffc0000 [ 413.516601][ T1416] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 413.516633][ T1416] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 414.034365][ T1416] hsr_slave_0: left promiscuous mode [ 414.071787][ T37] audit: type=1326 audit(1759033698.958:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7643 comm="syz.2.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032589eec9 code=0x7ffc0000 [ 414.071838][ T37] audit: type=1326 audit(1759033698.958:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7643 comm="syz.2.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032589eec9 code=0x7ffc0000 [ 414.135508][ T1416] hsr_slave_1: left promiscuous mode [ 414.136501][ T1416] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 414.136527][ T1416] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 414.256049][ T1416] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 414.256079][ T1416] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 415.047888][ T1416] veth1_macvtap: left promiscuous mode [ 415.048010][ T1416] veth0_macvtap: left promiscuous mode [ 415.048332][ T1416] veth1_vlan: left promiscuous mode [ 415.055912][ T1416] veth0_vlan: left promiscuous mode [ 415.202375][ T7661] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(14) [ 415.202401][ T7661] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 415.214526][ T7661] vhci_hcd vhci_hcd.0: Device attached [ 415.218595][ T7662] vhci_hcd: connection closed [ 415.224055][ T57] vhci_hcd: stop threads [ 415.224956][ T57] vhci_hcd: release socket [ 415.225016][ T57] vhci_hcd: disconnect device [ 415.306603][ T1416] veth1_macvtap: left promiscuous mode [ 415.306717][ T1416] veth0_macvtap: left promiscuous mode [ 415.306989][ T1416] veth1_vlan: left promiscuous mode [ 415.307203][ T1416] veth0_vlan: left promiscuous mode [ 416.544911][ T7671] atomic_op ffff888029208a18 conn xmit_atomic 0000000000000000 [ 417.086561][ T7665] syz.2.329 (7665) used greatest stack depth: 16120 bytes left [ 417.242624][ T7673] 9pnet_fd: Insufficient options for proto=fd [ 417.831456][ T7675] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 419.378674][ T59] Bluetooth: hci2: unexpected event for opcode 0x100c [ 425.758021][ T37] audit: type=1326 audit(1759033710.638:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7714 comm="syz.4.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbec110eec9 code=0x7ffc0000 [ 425.758300][ T37] audit: type=1326 audit(1759033710.638:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7714 comm="syz.4.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbec110eec9 code=0x7ffc0000 [ 425.758516][ T37] audit: type=1326 audit(1759033710.648:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7714 comm="syz.4.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7fbec110eec9 code=0x7ffc0000 [ 425.758746][ T37] audit: type=1326 audit(1759033710.648:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7714 comm="syz.4.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbec110eec9 code=0x7ffc0000 [ 425.758906][ T37] audit: type=1326 audit(1759033710.648:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7714 comm="syz.4.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbec110eec9 code=0x7ffc0000 [ 425.758946][ T37] audit: type=1326 audit(1759033710.648:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7714 comm="syz.4.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fbec110eec9 code=0x7ffc0000 [ 430.258285][ C1] vkms_vblank_simulate: vblank timer overrun [ 430.508617][ C1] vkms_vblank_simulate: vblank timer overrun [ 430.893935][ C1] vkms_vblank_simulate: vblank timer overrun [ 430.951549][ C1] vkms_vblank_simulate: vblank timer overrun [ 430.980179][ C1] vkms_vblank_simulate: vblank timer overrun [ 431.507959][ C1] vkms_vblank_simulate: vblank timer overrun [ 432.625330][ C1] vkms_vblank_simulate: vblank timer overrun [ 432.798978][ C1] vkms_vblank_simulate: vblank timer overrun [ 432.832536][ C1] vkms_vblank_simulate: vblank timer overrun [ 433.243273][ C1] vkms_vblank_simulate: vblank timer overrun [ 433.604123][ C1] vkms_vblank_simulate: vblank timer overrun [ 433.801290][ T59] Bluetooth: hci0: connection err: -111 [ 433.979312][ C1] vkms_vblank_simulate: vblank timer overrun [ 438.491726][ T5931] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 438.621373][ T5931] usb 3-1: device descriptor read/64, error -71 [ 439.742539][ T1416] team0 (unregistering): Port device team_slave_1 removed [ 440.020830][ T5931] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 440.160902][ T5931] usb 3-1: device descriptor read/64, error -71 [ 440.272081][ T5931] usb usb3-port1: attempt power cycle [ 440.317827][ C0] vkms_vblank_simulate: vblank timer overrun [ 440.539104][ C0] vkms_vblank_simulate: vblank timer overrun [ 440.580859][ T59] Bluetooth: hci0: unexpected event for opcode 0x1407 [ 441.289917][ C0] vkms_vblank_simulate: vblank timer overrun [ 441.531582][ C0] vkms_vblank_simulate: vblank timer overrun [ 441.587245][ T59] Bluetooth: hci2: unexpected subevent 0x01 length: 25 > 18 [ 441.611665][ T1416] team0 (unregistering): Port device team_slave_0 removed [ 442.821288][ C0] vkms_vblank_simulate: vblank timer overrun [ 443.324498][ C0] vkms_vblank_simulate: vblank timer overrun [ 443.438229][ C0] vkms_vblank_simulate: vblank timer overrun [ 443.630886][ T59] Bluetooth: hci2: command 0x0406 tx timeout [ 443.697474][ C0] vkms_vblank_simulate: vblank timer overrun [ 444.538782][ C0] vkms_vblank_simulate: vblank timer overrun [ 445.515417][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.515495][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.023350][ T7802] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 446.966391][ T5159] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 447.019181][ T5159] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 447.028342][ T5159] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 447.030664][ T5159] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 447.046858][ T5159] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 448.711095][ T5159] Bluetooth: hci0: unexpected subevent 0x0c length: 1 < 5 [ 449.690916][ T5159] Bluetooth: hci4: command tx timeout [ 450.610949][ T5858] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 450.760853][ T5858] usb 3-1: Using ep0 maxpacket: 8 [ 450.763874][ T5858] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 450.763927][ T5858] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 450.766958][ T5858] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 450.766982][ T5858] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.767001][ T5858] usb 3-1: Product: syz [ 450.767014][ T5858] usb 3-1: Manufacturer: syz [ 450.767027][ T5858] usb 3-1: SerialNumber: syz [ 450.877054][ T5858] usb 3-1: bad CDC descriptors [ 450.878508][ T5858] usbtest 3-1:1.0: couldn't get endpoints, -22 [ 450.878575][ T5858] usbtest 3-1:1.0: probe with driver usbtest failed with error -22 [ 451.022058][ T5159] Bluetooth: hci2: SCO packet too small [ 451.306187][ T59] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 451.318355][ T59] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 451.320068][ T59] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 451.324065][ T59] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 451.324980][ T59] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 451.598459][ T5159] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 451.645089][ T6530] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 451.648607][ T6530] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 451.650293][ T6530] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 451.672894][ T6530] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 451.712284][ T59] Bluetooth: hci4: command tx timeout [ 451.849397][ T6069] usb 3-1: USB disconnect, device number 10 [ 451.987166][ T59] Bluetooth: hci2: unexpected event for opcode 0x0c47 [ 453.063810][ T59] Bluetooth: hci2: unexpected event for opcode 0x2027 [ 453.393350][ T59] Bluetooth: hci6: command tx timeout [ 453.713528][ T59] Bluetooth: hci7: command tx timeout [ 454.333326][ T59] Bluetooth: hci4: command tx timeout [ 455.470343][ T59] Bluetooth: hci6: command tx timeout [ 455.793297][ T59] Bluetooth: hci7: command tx timeout [ 456.340409][ T59] Bluetooth: hci4: command tx timeout [ 457.535184][ T59] Bluetooth: hci6: command tx timeout [ 457.863775][ T59] Bluetooth: hci7: command tx timeout [ 458.508843][ T1416] team0 (unregistering): Port device team_slave_1 removed [ 458.756515][ T1416] team0 (unregistering): Port device team_slave_0 removed [ 459.590239][ T59] Bluetooth: hci6: command tx timeout [ 461.660271][ T59] Bluetooth: hci7: command tx timeout [ 463.581931][ T7904] netlink: 28 bytes leftover after parsing attributes in process `syz.2.397'. [ 463.582015][ T7904] netlink: 28 bytes leftover after parsing attributes in process `syz.2.397'. [ 464.098157][ T7813] lo speed is unknown, defaulting to 1000 [ 464.194562][ T7848] lo speed is unknown, defaulting to 1000 [ 464.233347][ T7850] lo speed is unknown, defaulting to 1000 [ 466.398958][ T7813] chnl_net:caif_netlink_parms(): no params data found [ 466.496371][ T7848] chnl_net:caif_netlink_parms(): no params data found [ 466.812016][ T7850] chnl_net:caif_netlink_parms(): no params data found [ 467.292938][ T7813] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.293090][ T7813] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.293329][ T7813] bridge_slave_0: entered allmulticast mode [ 467.296074][ T7813] bridge_slave_0: entered promiscuous mode [ 467.479578][ T7813] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.479785][ T7813] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.480021][ T7813] bridge_slave_1: entered allmulticast mode [ 467.482734][ T7813] bridge_slave_1: entered promiscuous mode [ 467.577472][ T7848] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.577611][ T7848] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.577860][ T7848] bridge_slave_0: entered allmulticast mode [ 467.580736][ T7848] bridge_slave_0: entered promiscuous mode [ 467.726048][ T7848] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.726185][ T7848] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.726411][ T7848] bridge_slave_1: entered allmulticast mode [ 467.730415][ T7848] bridge_slave_1: entered promiscuous mode [ 467.970782][ T7813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.143085][ T7813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.274303][ T7850] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.274455][ T7850] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.274686][ T7850] bridge_slave_0: entered allmulticast mode [ 468.277506][ T7850] bridge_slave_0: entered promiscuous mode [ 468.425355][ T7848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.428667][ T7850] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.428808][ T7850] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.429045][ T7850] bridge_slave_1: entered allmulticast mode [ 468.432654][ T7850] bridge_slave_1: entered promiscuous mode [ 468.742980][ T7848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.745782][ T7813] team0: Port device team_slave_0 added [ 468.955609][ T7813] team0: Port device team_slave_1 added [ 468.985638][ T7850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 469.250296][ T7850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 469.252639][ T7848] team0: Port device team_slave_0 added [ 469.449578][ T7848] team0: Port device team_slave_1 added [ 469.450923][ T7813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.450936][ T7813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.450959][ T7813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.670930][ T7813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.670941][ T7813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.670954][ T7813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.684156][ T7850] team0: Port device team_slave_0 added [ 469.796914][ T7850] team0: Port device team_slave_1 added [ 469.807835][ T1416] IPVS: stop unused estimator thread 0... [ 469.808144][ T7848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.808154][ T7848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.808171][ T7848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.973958][ T7848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.973973][ T7848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.973997][ T7848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.198190][ T7850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 470.198206][ T7850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.198229][ T7850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 470.344171][ T7850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.344187][ T7850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.344210][ T7850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.354246][ T7813] hsr_slave_0: entered promiscuous mode [ 470.355693][ T7813] hsr_slave_1: entered promiscuous mode [ 470.356804][ T7813] debugfs: 'hsr0' already exists in 'hsr' [ 470.356828][ T7813] Cannot create hsr debugfs directory [ 470.798959][ T7848] hsr_slave_0: entered promiscuous mode [ 470.800406][ T7848] hsr_slave_1: entered promiscuous mode [ 470.801465][ T7848] debugfs: 'hsr0' already exists in 'hsr' [ 470.801491][ T7848] Cannot create hsr debugfs directory [ 470.997039][ T7850] hsr_slave_0: entered promiscuous mode [ 470.998450][ T7850] hsr_slave_1: entered promiscuous mode [ 470.999464][ T7850] debugfs: 'hsr0' already exists in 'hsr' [ 470.999488][ T7850] Cannot create hsr debugfs directory [ 472.346047][ T1416] bridge_slave_1: left allmulticast mode [ 472.346217][ T1416] bridge_slave_1: left promiscuous mode [ 472.346514][ T1416] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.426660][ T1416] bridge_slave_0: left allmulticast mode [ 472.426683][ T1416] bridge_slave_0: left promiscuous mode [ 472.426884][ T1416] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.501539][ T1416] bridge_slave_1: left allmulticast mode [ 472.501575][ T1416] bridge_slave_1: left promiscuous mode [ 472.501831][ T1416] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.566734][ T1416] bridge_slave_0: left allmulticast mode [ 472.566766][ T1416] bridge_slave_0: left promiscuous mode [ 472.567050][ T1416] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.649255][ T1416] bridge_slave_1: left allmulticast mode [ 472.649287][ T1416] bridge_slave_1: left promiscuous mode [ 472.649536][ T1416] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.715851][ T1416] bridge_slave_0: left allmulticast mode [ 472.715884][ T1416] bridge_slave_0: left promiscuous mode [ 472.716221][ T1416] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.143787][ T1416] bond0 (unregistering): Released all slaves [ 473.486920][ T1416] bond0 (unregistering): Released all slaves [ 473.683764][ T1416] bond0 (unregistering): Released all slaves [ 473.866150][ T1416] bond0 (unregistering): Released all slaves [ 474.148733][ T1416] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 474.236833][ T1416] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 474.309233][ T1416] bond0 (unregistering): Released all slaves [ 474.584669][ T1416] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 474.665354][ T1416] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 474.746690][ T1416] bond0 (unregistering): Released all slaves [ 474.961703][ T1416] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 475.071475][ T1416] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.136344][ T1416] bond0 (unregistering): Released all slaves [ 475.977390][ T7813] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 476.014204][ T7813] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 476.077614][ T7813] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 476.161971][ T7813] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 476.469765][ T7850] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 476.558872][ T7850] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 476.631873][ T7850] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 476.745233][ T7850] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 477.163819][ T7848] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 477.226169][ T7848] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 477.274595][ T7848] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 477.330564][ T7848] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 477.419436][ T1416] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.449882][ T1416] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.500269][ T1416] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.538126][ T1416] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 478.365571][ T1416] team0 (unregistering): Port device team_slave_1 removed [ 478.512513][ T1416] team0 (unregistering): Port device team_slave_0 removed [ 479.397736][ T1416] team0 (unregistering): Port device team_slave_1 removed [ 479.556972][ T1416] team0 (unregistering): Port device team_slave_0 removed [ 480.393906][ T1416] team0 (unregistering): Port device team_slave_1 removed [ 480.533152][ T1416] team0 (unregistering): Port device team_slave_0 removed [ 481.125246][ T7813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.288685][ T7813] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.364925][ T5992] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.365216][ T5992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.434854][ T1516] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.435006][ T1516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.492588][ T7850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.687962][ T7848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.701572][ T7850] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.796856][ T1516] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.801328][ T1516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.843063][ T1485] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.843276][ T1485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.941375][ T7848] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.050257][ T5992] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.050658][ T5992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.117169][ T5096] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.117314][ T5096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.816760][ T7813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 483.198017][ T7850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 483.320078][ T7848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 483.875524][ T7813] veth0_vlan: entered promiscuous mode [ 483.964279][ T7813] veth1_vlan: entered promiscuous mode [ 484.212659][ T7813] veth0_macvtap: entered promiscuous mode [ 484.284236][ T7813] veth1_macvtap: entered promiscuous mode [ 484.465748][ T7850] veth0_vlan: entered promiscuous mode [ 484.507252][ T7813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 484.556967][ T7813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 484.619966][ T7850] veth1_vlan: entered promiscuous mode [ 484.664086][ T1516] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.667368][ T1516] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.712752][ T1516] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.754613][ T1516] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.809052][ T7848] veth0_vlan: entered promiscuous mode [ 485.008236][ T7848] veth1_vlan: entered promiscuous mode [ 485.144256][ T7850] veth0_macvtap: entered promiscuous mode [ 485.202384][ T7850] veth1_macvtap: entered promiscuous mode [ 485.426337][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.426357][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.453335][ T7850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 485.524503][ T7850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 485.525087][ T7848] veth0_macvtap: entered promiscuous mode [ 485.605230][ T7848] veth1_macvtap: entered promiscuous mode [ 485.611618][ T1485] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.611793][ T1485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.611807][ T1485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.641339][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.651539][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.705534][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.363349][ T8089] capability: warning: `syz.7.174' uses deprecated v2 capabilities in a way that may be insecure [ 486.524443][ T7848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 486.952466][ T7848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 487.142971][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.146395][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.147102][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.147463][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.196278][ T6530] Bluetooth: hci0: unexpected event for opcode 0x2002 [ 487.238638][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.238660][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.728491][ T5992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.728510][ T5992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.185177][ T5992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.185197][ T5992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.472977][ T5992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.472997][ T5992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.569222][ T6530] Bluetooth: hci4: command tx timeout [ 494.996628][ T8178] overlayfs: failed to clone upperpath [ 498.054864][ T5832] IPVS: starting estimator thread 0... [ 498.070822][ T8211] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 498.181474][ T8212] IPVS: using max 7 ests per chain, 16800 per kthread [ 501.108260][ T8205] infiniband syz!: set active [ 501.108280][ T8205] infiniband syz!: added team_slave_0 [ 501.141893][ T8205] syz!: rxe_create_cq: returned err = -12 [ 501.141966][ T8205] infiniband syz!: Couldn't create ib_mad CQ [ 501.142153][ T8205] infiniband syz!: Couldn't open port 1 [ 502.262543][ T8205] RDS/IB: syz!: added [ 502.263136][ T8205] smc: adding ib device syz! with port count 1 [ 502.271185][ T8205] smc: ib device syz! port 1 has pnetid [ 505.517251][ T8275] Mount JFS Failure: -22 [ 505.517317][ T8275] jfs_mount failed w/return code = -22 [ 506.399291][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.399351][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 508.704899][ T8340] random: crng reseeded on system resumption [ 516.738665][ T8388] random: crng reseeded on system resumption [ 516.958803][ T8391] netlink: 'syz.6.473': attribute type 1 has an invalid length. [ 516.958826][ T8391] netlink: 224 bytes leftover after parsing attributes in process `syz.6.473'. [ 523.593556][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 523.605786][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 523.610999][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 523.621835][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 523.625782][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 523.812049][ T8419] syz.4.480 uses obsolete (PF_INET,SOCK_PACKET) [ 523.826042][ T8420] netlink: 92 bytes leftover after parsing attributes in process `syz.6.479'. [ 524.007369][ T8408] lo speed is unknown, defaulting to 1000 [ 525.692098][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 525.715370][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 525.716619][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 525.717857][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 525.743278][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 525.773965][ T59] Bluetooth: hci1: command tx timeout [ 525.941134][ C0] vkms_vblank_simulate: vblank timer overrun [ 526.964780][ C0] vkms_vblank_simulate: vblank timer overrun [ 527.048806][ C0] vkms_vblank_simulate: vblank timer overrun [ 527.109801][ C0] vkms_vblank_simulate: vblank timer overrun [ 527.275541][ C0] vkms_vblank_simulate: vblank timer overrun [ 528.289411][ T6530] Bluetooth: hci1: command tx timeout [ 528.289479][ T6530] Bluetooth: hci3: command tx timeout [ 528.631874][ T8467] netlink: 28 bytes leftover after parsing attributes in process `syz.4.492'. [ 528.631933][ T8467] netlink: 28 bytes leftover after parsing attributes in process `syz.4.492'. [ 528.909725][ T8478] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 529.624117][ T8441] lo speed is unknown, defaulting to 1000 [ 529.887610][ T8489] Mount JFS Failure: -22 [ 529.887651][ T8489] jfs_mount failed w/return code = -22 [ 530.646021][ T59] Bluetooth: hci3: command tx timeout [ 530.646053][ T59] Bluetooth: hci1: command tx timeout [ 533.198716][ T6530] Bluetooth: hci1: command tx timeout [ 533.198749][ T6530] Bluetooth: hci3: command tx timeout [ 533.809324][ T6328] IPVS: starting estimator thread 0... [ 533.839096][ T8516] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 533.915636][ T8523] IPVS: using max 13 ests per chain, 31200 per kthread [ 534.118557][ T1378] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.039362][ T1378] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.271447][ T59] Bluetooth: hci3: command tx timeout [ 535.271945][ T8538] netlink: 20 bytes leftover after parsing attributes in process `syz.4.507'. [ 535.272358][ T8538] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 536.707362][ T1378] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.314239][ T1378] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.314758][ T5930] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 538.478823][ T5930] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 538.478849][ T5930] usb 6-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 538.478886][ T5930] usb 6-1: config 220 interface 0 has no altsetting 0 [ 538.488193][ T5930] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 538.488221][ T5930] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.488239][ T5930] usb 6-1: Product: syz [ 538.488252][ T5930] usb 6-1: Manufacturer: syz [ 538.488266][ T5930] usb 6-1: SerialNumber: syz [ 538.792440][ T8408] chnl_net:caif_netlink_parms(): no params data found [ 538.965195][ T59] Bluetooth: hci6: adv larger than maximum supported [ 539.001433][ T5930] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 539.001468][ T5930] usb 6-1: No valid video chain found. [ 539.044438][ T5930] usb 6-1: USB disconnect, device number 2 [ 539.535272][ T1378] bridge_slave_1: left allmulticast mode [ 539.535304][ T1378] bridge_slave_1: left promiscuous mode [ 539.535549][ T1378] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.612346][ T1378] bridge_slave_0: left allmulticast mode [ 539.612378][ T1378] bridge_slave_0: left promiscuous mode [ 539.612639][ T1378] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.682033][ T6328] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 539.831619][ T6328] usb 7-1: Using ep0 maxpacket: 8 [ 539.847235][ T6328] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 539.847300][ T6328] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 539.874773][ T6328] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 539.874801][ T6328] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.874821][ T6328] usb 7-1: Product: syz [ 539.874834][ T6328] usb 7-1: Manufacturer: syz [ 539.874847][ T6328] usb 7-1: SerialNumber: syz [ 539.916513][ T5930] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 539.938301][ T6328] usb 7-1: bad CDC descriptors [ 539.940360][ T6328] usbtest 7-1:1.0: couldn't get endpoints, -22 [ 539.940446][ T6328] usbtest 7-1:1.0: probe with driver usbtest failed with error -22 [ 540.118023][ T5930] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 540.118082][ T5930] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 540.118103][ T5930] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 540.166851][ T5930] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 540.166879][ T5930] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.166896][ T5930] usb 6-1: Product: syz [ 540.166910][ T5930] usb 6-1: Manufacturer: syz [ 540.166923][ T5930] usb 6-1: SerialNumber: syz [ 540.174161][ T5930] usb 6-1: config 0 descriptor?? [ 540.640812][ T5930] usb 6-1: USB disconnect, device number 3 [ 541.046177][ T6328] usb 7-1: USB disconnect, device number 2 [ 545.600386][ T5930] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 545.821716][ T5930] usb 6-1: Using ep0 maxpacket: 8 [ 546.425205][ T5930] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 546.425261][ T5930] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 546.457306][ T5930] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 546.457336][ T5930] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.457355][ T5930] usb 6-1: Product: syz [ 546.457375][ T5930] usb 6-1: Manufacturer: syz [ 546.457389][ T5930] usb 6-1: SerialNumber: syz [ 546.477526][ T5930] usb 6-1: bad CDC descriptors [ 546.481064][ T5930] usbtest 6-1:1.0: couldn't get endpoints, -22 [ 546.481146][ T5930] usbtest 6-1:1.0: probe with driver usbtest failed with error -22 [ 546.978504][ T6069] usb 6-1: USB disconnect, device number 4 [ 547.018580][ T1378] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 547.078487][ T1378] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 547.109630][ T1378] bond0 (unregistering): Released all slaves [ 547.620093][ T8638] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 550.736684][ T8692] lo: entered promiscuous mode [ 550.801929][ T8692] tunl0: entered promiscuous mode [ 550.909300][ T8692] gre0: entered promiscuous mode [ 551.539149][ T8692] gretap0: entered promiscuous mode [ 551.607276][ T8692] erspan0: entered promiscuous mode [ 551.622981][ T8692] ip_vti0: entered promiscuous mode [ 551.916814][ T8408] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.917765][ T8408] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.917936][ T8408] bridge_slave_0: entered allmulticast mode [ 551.948469][ T8408] bridge_slave_0: entered promiscuous mode [ 552.057897][ T8707] warning: `syz.6.553' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 552.311026][ T8716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.556'. [ 552.810992][ T8408] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.811123][ T8408] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.811417][ T8408] bridge_slave_1: entered allmulticast mode [ 552.814420][ T8408] bridge_slave_1: entered promiscuous mode [ 554.698197][ T8739] tc_dump_action: action bad kind [ 554.759341][ T8408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 555.019417][ T8408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 555.219241][ T8772] netlink: 8 bytes leftover after parsing attributes in process `syz.6.571'. [ 555.219275][ T8772] netlink: 'syz.6.571': attribute type 5 has an invalid length. [ 555.219290][ T8772] netlink: 'syz.6.571': attribute type 8 has an invalid length. [ 555.219302][ T8772] netlink: 8 bytes leftover after parsing attributes in process `syz.6.571'. [ 555.438490][ T8772] geneve2: entered promiscuous mode [ 555.438521][ T8772] geneve2: entered allmulticast mode [ 555.693841][ T1416] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 555.924186][ T1378] hsr_slave_0: left promiscuous mode [ 555.968068][ T1378] hsr_slave_1: left promiscuous mode [ 555.968944][ T1378] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 555.968972][ T1378] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 556.251227][ T1378] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 556.251259][ T1378] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 556.987424][ C1] vkms_vblank_simulate: vblank timer overrun [ 557.076827][ C1] vkms_vblank_simulate: vblank timer overrun [ 557.311351][ C1] vkms_vblank_simulate: vblank timer overrun [ 557.433677][ T1378] veth1_macvtap: left promiscuous mode [ 557.433804][ T1378] veth0_macvtap: left promiscuous mode [ 557.434121][ T1378] veth1_vlan: left promiscuous mode [ 557.434325][ T1378] veth0_vlan: left promiscuous mode [ 558.189330][ C1] vkms_vblank_simulate: vblank timer overrun [ 558.855534][ C1] vkms_vblank_simulate: vblank timer overrun [ 559.171194][ C1] vkms_vblank_simulate: vblank timer overrun [ 559.270463][ C1] vkms_vblank_simulate: vblank timer overrun [ 559.437573][ C1] vkms_vblank_simulate: vblank timer overrun [ 559.820217][ C1] vkms_vblank_simulate: vblank timer overrun [ 559.868329][ C1] vkms_vblank_simulate: vblank timer overrun [ 559.989916][ C1] vkms_vblank_simulate: vblank timer overrun [ 560.267133][ C1] vkms_vblank_simulate: vblank timer overrun [ 560.481554][ T1378] team0 (unregistering): Port device team_slave_1 removed [ 560.749552][ T1378] team0 (unregistering): Port device team_slave_0 removed [ 563.243899][ T8408] team0: Port device team_slave_0 added [ 563.246180][ T1416] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 563.250307][ T8441] chnl_net:caif_netlink_parms(): no params data found [ 563.372708][ T1231] lo speed is unknown, defaulting to 1000 [ 563.372737][ T1231] infiniband syz0: ib_query_port failed (-19) [ 563.388774][ T1416] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 563.403873][ T8408] team0: Port device team_slave_1 added [ 563.433214][ T5096] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 563.561789][ T59] Bluetooth: hci7: unknown advertising packet type: 0x0c [ 564.098628][ T8408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 564.098646][ T8408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 564.098669][ T8408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 564.130241][ T8408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 564.130255][ T8408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 564.130278][ T8408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 564.366053][ T8852] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 565.156265][ T8857] bridge_slave_0: left allmulticast mode [ 565.156296][ T8857] bridge_slave_0: left promiscuous mode [ 565.161432][ T8857] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.470270][ T8857] team0: Device bridge_slave_0 is up. Set it down before adding it as a team port [ 565.470295][ T8857] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 566.790232][ T37] audit: type=1400 audit(1759033852.082:22): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=8877 comm="syz.6.608" src=1 dest=20000 netif=wpan0 [ 566.908304][ T8441] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.908443][ T8441] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.908679][ T8441] bridge_slave_0: entered allmulticast mode [ 566.946850][ T8441] bridge_slave_0: entered promiscuous mode [ 567.030672][ T8408] hsr_slave_0: entered promiscuous mode [ 567.035568][ T8408] hsr_slave_1: entered promiscuous mode [ 567.130366][ T8441] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.130521][ T8441] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.130754][ T8441] bridge_slave_1: entered allmulticast mode [ 567.362191][ T8441] bridge_slave_1: entered promiscuous mode [ 567.860623][ T8886] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 568.165433][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.165510][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.913525][ T8898] netlink: 124 bytes leftover after parsing attributes in process `syz.4.615'. [ 568.913591][ T8898] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 568.918594][ T8441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 568.967796][ T8441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 569.513236][ T1378] IPVS: stop unused estimator thread 0... [ 569.581839][ T8441] team0: Port device team_slave_0 added [ 569.684887][ T8441] team0: Port device team_slave_1 added [ 570.257858][ T8929] random: crng reseeded on system resumption [ 572.607213][ T8441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 572.607229][ T8441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 572.607253][ T8441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 572.900090][ T8441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 572.900106][ T8441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 572.900130][ T8441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 573.311939][ T1378] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.408650][ T6328] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 573.568612][ T6328] usb 7-1: Using ep0 maxpacket: 16 [ 573.571364][ T6328] usb 7-1: config 0 interface 0 altsetting 220 endpoint 0x81 has an invalid bInterval 135, changing to 11 [ 573.571395][ T6328] usb 7-1: config 0 interface 0 altsetting 220 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 573.571421][ T6328] usb 7-1: config 0 interface 0 has no altsetting 0 [ 573.571456][ T6328] usb 7-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 573.571478][ T6328] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.577701][ T6328] usb 7-1: config 0 descriptor?? [ 574.000886][ T1378] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.151770][ T6328] input: HID 054c:03d5 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:054C:03D5.0002/input/input8 [ 574.458750][ T6328] sony 0003:054C:03D5.0002: input,hidraw0: USB HID v5.f2 Joystick [HID 054c:03d5] on usb-dummy_hcd.6-1/input0 [ 574.509491][ T6328] usb 7-1: USB disconnect, device number 3 [ 574.856662][ T8978] fido_id[8978]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 574.901867][ T8955] Bluetooth: hci6: command 0x0406 tx timeout [ 574.901876][ T5845] Bluetooth: hci7: command 0x0406 tx timeout [ 575.433171][ T1378] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.579505][ T8441] hsr_slave_0: entered promiscuous mode [ 575.588417][ T8441] hsr_slave_1: entered promiscuous mode [ 575.589446][ T8441] debugfs: 'hsr0' already exists in 'hsr' [ 575.589469][ T8441] Cannot create hsr debugfs directory [ 576.691209][ T9015] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 577.106080][ T1378] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.523378][ T5159] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 577.542388][ T5159] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 577.546882][ T5159] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 577.555821][ T5159] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 577.556563][ T5159] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 579.252762][ T9063] random: crng reseeded on system resumption [ 579.611703][ T59] Bluetooth: hci0: command tx timeout [ 580.411126][ T1378] bridge_slave_1: left allmulticast mode [ 580.411160][ T1378] bridge_slave_1: left promiscuous mode [ 580.411422][ T1378] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.595282][ T1378] bridge_slave_0: left allmulticast mode [ 580.595313][ T1378] bridge_slave_0: left promiscuous mode [ 580.595601][ T1378] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.679435][ T59] Bluetooth: hci0: command tx timeout [ 583.296451][ T9113] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 583.770286][ T59] Bluetooth: hci0: command tx timeout [ 584.345885][ T5159] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 584.361144][ T5159] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 584.363544][ T5159] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 584.386908][ T5159] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 584.388387][ T5159] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 585.022163][ T9120] netlink: 16 bytes leftover after parsing attributes in process `syz.4.676'. [ 585.086784][ T1378] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 585.146692][ T1378] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 585.194129][ T1378] bond0 (unregistering): Released all slaves [ 585.836836][ T59] Bluetooth: hci0: command tx timeout [ 586.394742][ T59] Bluetooth: hci1: command tx timeout [ 588.756178][ T59] Bluetooth: hci1: command tx timeout [ 590.352808][ T9022] chnl_net:caif_netlink_parms(): no params data found [ 590.589234][ T59] Bluetooth: hci6: unexpected event for opcode 0x203e [ 590.790513][ T59] Bluetooth: hci1: command tx timeout [ 591.779573][ T7722] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 591.938078][ T7722] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 591.938112][ T7722] usb 6-1: config 0 interface 0 has no altsetting 0 [ 591.938143][ T7722] usb 6-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 591.938163][ T7722] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.943567][ T7722] usb 6-1: config 0 descriptor?? [ 592.447299][ T7722] lenovo 0003:17EF:6067.0003: item fetching failed at offset 0/2 [ 592.448166][ T7722] lenovo 0003:17EF:6067.0003: hid_parse failed [ 592.450320][ T7722] lenovo 0003:17EF:6067.0003: probe with driver lenovo failed with error -22 [ 592.568835][ T1378] hsr_slave_0: left promiscuous mode [ 592.612543][ T1378] hsr_slave_1: left promiscuous mode [ 592.613526][ T1378] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 592.613555][ T1378] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 592.638893][ T6069] usb 6-1: USB disconnect, device number 5 [ 592.699817][ T1378] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 592.699849][ T1378] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 592.862859][ T1378] veth1_macvtap: left promiscuous mode [ 592.862981][ T1378] veth0_macvtap: left promiscuous mode [ 592.863258][ T1378] veth1_vlan: left promiscuous mode [ 592.863469][ T1378] veth0_vlan: left promiscuous mode [ 592.869271][ T59] Bluetooth: hci1: command tx timeout [ 594.247503][ T5858] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 594.412151][ T5858] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 594.412184][ T5858] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 594.412226][ T5858] usb 7-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 594.412246][ T5858] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.435634][ T5858] usb 7-1: config 0 descriptor?? [ 594.463348][ C0] vkms_vblank_simulate: vblank timer overrun [ 594.680401][ C0] vkms_vblank_simulate: vblank timer overrun [ 594.863136][ C0] vkms_vblank_simulate: vblank timer overrun [ 594.914056][ T5858] aquacomputer_d5next 0003:0C70:F00D.0004: hidraw0: USB HID v0.00 Device [HID 0c70:f00d] on usb-dummy_hcd.6-1/input0 [ 595.090181][ T5858] usb 7-1: USB disconnect, device number 4 [ 595.186913][ T1231] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 595.194492][ C0] vkms_vblank_simulate: vblank timer overrun [ 595.344845][ T1231] usb 6-1: Using ep0 maxpacket: 32 [ 595.355074][ T1231] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 595.355100][ T1231] usb 6-1: config 0 has no interface number 0 [ 595.383300][ T1231] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 595.383329][ T1231] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.383349][ T1231] usb 6-1: Product: syz [ 595.383363][ T1231] usb 6-1: Manufacturer: syz [ 595.383377][ T1231] usb 6-1: SerialNumber: syz [ 595.423101][ T1231] usb 6-1: config 0 descriptor?? [ 595.443329][ T1231] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 595.443366][ T1231] usb 6-1: selecting invalid altsetting 1 [ 595.443387][ T1231] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 595.484663][ T1231] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 595.485036][ T1231] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 595.485085][ T1231] usb 6-1: media controller created [ 595.508452][ T1231] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 595.546201][ C0] vkms_vblank_simulate: vblank timer overrun [ 596.211981][ C0] vkms_vblank_simulate: vblank timer overrun [ 596.278028][ C0] vkms_vblank_simulate: vblank timer overrun [ 596.586259][ T1378] team0 (unregistering): Port device team_slave_1 removed [ 596.645484][ T1231] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 596.645556][ T1231] zl10353_read_register: readreg error (reg=127, ret==-110) [ 596.741017][ T1231] usb 6-1: USB disconnect, device number 6 [ 596.946827][ T1378] team0 (unregistering): Port device team_slave_0 removed [ 596.949491][ T5096] smc: removing ib device syz! [ 597.108269][ C0] vkms_vblank_simulate: vblank timer overrun [ 597.376352][ C0] vkms_vblank_simulate: vblank timer overrun [ 598.552215][ T9273] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 604.663359][ T9022] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.663499][ T9022] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.663715][ T9022] bridge_slave_0: entered allmulticast mode [ 604.746388][ T9022] bridge_slave_0: entered promiscuous mode [ 604.789297][ T9022] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.789435][ T9022] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.789770][ T9022] bridge_slave_1: entered allmulticast mode [ 604.826663][ T9022] bridge_slave_1: entered promiscuous mode [ 605.642949][ T9022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 605.706775][ T37] audit: type=1326 audit(1759033891.041:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9325 comm="syz.6.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa061faeec9 code=0x7ffc0000 [ 605.707046][ T37] audit: type=1326 audit(1759033891.041:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9325 comm="syz.6.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa061faeec9 code=0x7ffc0000 [ 605.752514][ T37] audit: type=1326 audit(1759033891.091:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9325 comm="syz.6.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fa061faeec9 code=0x7ffc0000 [ 605.752825][ T37] audit: type=1326 audit(1759033891.091:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9325 comm="syz.6.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa061faeec9 code=0x7ffc0000 [ 605.753592][ T37] audit: type=1326 audit(1759033891.091:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9325 comm="syz.6.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa061faeec9 code=0x7ffc0000 [ 605.786598][ T9022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 606.887882][ T9022] team0: Port device team_slave_0 added [ 607.003239][ T9022] team0: Port device team_slave_1 added [ 607.367225][ T1231] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 607.553013][ T1231] usb 6-1: Using ep0 maxpacket: 8 [ 607.560044][ T1231] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 607.560101][ T1231] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 607.572783][ T1231] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 607.572810][ T1231] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.572829][ T1231] usb 6-1: Product: syz [ 607.572843][ T1231] usb 6-1: Manufacturer: syz [ 607.572856][ T1231] usb 6-1: SerialNumber: syz [ 607.682886][ T1231] usb 6-1: bad CDC descriptors [ 607.700736][ T1231] usbtest 6-1:1.0: couldn't get endpoints, -22 [ 607.700826][ T1231] usbtest 6-1:1.0: probe with driver usbtest failed with error -22 [ 607.847912][ T9022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 607.847929][ T9022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 607.847954][ T9022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 607.849352][ T9115] chnl_net:caif_netlink_parms(): no params data found [ 607.995833][ T9022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 607.995850][ T9022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 607.995877][ T9022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 609.406178][ T7722] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 609.568396][ T7722] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 609.568430][ T7722] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 609.568456][ T7722] usb 7-1: config 0 interface 0 has no altsetting 0 [ 609.568489][ T7722] usb 7-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 609.568511][ T7722] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.652042][ T7722] usb 7-1: config 0 descriptor?? [ 609.667652][ T9374] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 609.843656][ T1231] usb 6-1: USB disconnect, device number 7 [ 610.158377][ T7722] logitech 0003:046D:C24F.0005: unbalanced collection at end of report description [ 610.159239][ T7722] logitech 0003:046D:C24F.0005: parse failed [ 610.159342][ T7722] logitech 0003:046D:C24F.0005: probe with driver logitech failed with error -22 [ 610.309163][ T7722] usb 7-1: USB disconnect, device number 5 [ 610.553539][ T9022] hsr_slave_0: entered promiscuous mode [ 610.561808][ T9022] hsr_slave_1: entered promiscuous mode [ 610.572722][ T9022] debugfs: 'hsr0' already exists in 'hsr' [ 610.572749][ T9022] Cannot create hsr debugfs directory [ 611.146916][ T9115] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.147058][ T9115] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.147272][ T9115] bridge_slave_0: entered allmulticast mode [ 611.149938][ T9115] bridge_slave_0: entered promiscuous mode [ 611.171389][ T9115] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.171565][ T9115] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.171745][ T9115] bridge_slave_1: entered allmulticast mode [ 611.174306][ T9115] bridge_slave_1: entered promiscuous mode [ 611.524386][ T8238] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 611.685988][ T8238] usb 7-1: Using ep0 maxpacket: 32 [ 611.688524][ T8238] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 611.688556][ T8238] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 611.688581][ T8238] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 611.688603][ T8238] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 611.688629][ T8238] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 611.692735][ T8238] usb 7-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 611.692770][ T8238] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.692790][ T8238] usb 7-1: Product: syz [ 611.692803][ T8238] usb 7-1: Manufacturer: syz [ 611.692817][ T8238] usb 7-1: SerialNumber: syz [ 611.704053][ T8238] usb 7-1: config 0 descriptor?? [ 611.868347][ T9115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 611.973625][ T9115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 612.157211][ T8238] input input9: Device does not respond to id packet M [ 612.263665][ T9414] netlink: 196 bytes leftover after parsing attributes in process `syz.5.776'. [ 612.377734][ T8238] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 612.377783][ T8238] input input9: Device does not respond to id packet P [ 612.378247][ T8238] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 612.378291][ T8238] input input9: Device does not respond to id packet B [ 612.378738][ T8238] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 612.378780][ T8238] input input9: Device does not respond to id packet N [ 612.379213][ T8238] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 612.381096][ T8238] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 612.381559][ T8238] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 612.382012][ T8238] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 612.410681][ T8238] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input9 [ 612.573463][ T8238] usb 7-1: USB disconnect, device number 6 [ 612.783204][ T9115] team0: Port device team_slave_0 added [ 612.975895][ T9428] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 613.473747][ C1] vkms_vblank_simulate: vblank timer overrun [ 613.537198][ T9115] team0: Port device team_slave_1 added [ 613.707113][ T9437] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 614.053512][ T9443] tipc: Started in network mode [ 614.053540][ T9443] tipc: Node identity 9ab715473d55, cluster identity 4711 [ 614.088331][ T9443] tipc: Enabled bearer , priority 0 [ 614.192339][ T9450] can: request_module (can-proto-0) failed. [ 614.512943][ T9115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 614.512959][ T9115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 614.512985][ T9115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 614.642443][ T9115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 614.642460][ T9115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 614.642485][ T9115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 614.776249][ T9463] netlink: 'syz.6.790': attribute type 30 has an invalid length. [ 615.173008][ T7722] tipc: Node number set to 2816611655 [ 615.690968][ T9115] hsr_slave_0: entered promiscuous mode [ 615.718144][ T9115] hsr_slave_1: entered promiscuous mode [ 615.730938][ T9115] debugfs: 'hsr0' already exists in 'hsr' [ 615.730965][ T9115] Cannot create hsr debugfs directory [ 616.487591][ T6028] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 616.655845][ T6028] usb 6-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 616.655879][ T6028] usb 6-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 616.655902][ T6028] usb 6-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 616.655928][ T6028] usb 6-1: config 0 interface 0 has no altsetting 0 [ 616.655962][ T6028] usb 6-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 616.656004][ T6028] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.737592][ T6028] usb 6-1: config 0 descriptor?? [ 617.273974][ T9498] random: crng reseeded on system resumption [ 620.170975][ T6028] uclogic 0003:28BD:0042.0006: interface is invalid, ignoring [ 620.197410][ T6028] usb 6-1: USB disconnect, device number 8 [ 620.219548][ T1378] bridge_slave_1: left allmulticast mode [ 620.219580][ T1378] bridge_slave_1: left promiscuous mode [ 620.219840][ T1378] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.346720][ T1378] bridge_slave_0: left allmulticast mode [ 620.346799][ T1378] bridge_slave_0: left promiscuous mode [ 620.347071][ T1378] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.453365][ T1378] bridge_slave_1: left allmulticast mode [ 620.453397][ T1378] bridge_slave_1: left promiscuous mode [ 620.453634][ T1378] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.540965][ T1378] bridge_slave_0: left allmulticast mode [ 620.540998][ T1378] bridge_slave_0: left promiscuous mode [ 620.541243][ T1378] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.989257][ T1378] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 621.071758][ T1378] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 621.143168][ T1378] bond0 (unregistering): Released all slaves [ 621.469165][ T1378] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 621.573545][ T1378] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 621.632803][ T1378] bond0 (unregistering): Released all slaves [ 621.764491][ T9506] veth0_to_bond: entered allmulticast mode [ 622.102379][ T37] audit: type=1326 audit(1759033907.441:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9521 comm="syz.4.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbec110eec9 code=0x7ffc0000 [ 622.102430][ T37] audit: type=1326 audit(1759033907.441:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9521 comm="syz.4.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbec110eec9 code=0x7ffc0000 [ 622.102479][ T37] audit: type=1326 audit(1759033907.451:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9521 comm="syz.4.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbec110eec9 code=0x7ffc0000 [ 622.102519][ T37] audit: type=1326 audit(1759033907.451:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9521 comm="syz.4.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbec110eec9 code=0x7ffc0000 [ 622.102556][ T37] audit: type=1326 audit(1759033907.451:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9521 comm="syz.4.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbec110eec9 code=0x7ffc0000 [ 622.217923][ T6028] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 623.699626][ T6028] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 623.699677][ T6028] usb 7-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 623.699700][ T6028] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.749501][ T6028] usb 7-1: config 0 descriptor?? [ 624.057092][ T1378] hsr_slave_0: left promiscuous mode [ 624.102951][ T1378] hsr_slave_1: left promiscuous mode [ 624.103884][ T1378] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 624.215046][ T9541] random: crng reseeded on system resumption [ 624.698498][ T6028] uclogic 0003:5543:0522.0007: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.6-1/input0 [ 624.920513][ T6028] usb 7-1: USB disconnect, device number 7 [ 625.048590][ T1378] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 625.378616][ T9543] fido_id[9543]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 625.425663][ T1378] hsr_slave_0: left promiscuous mode [ 625.470854][ T1378] hsr_slave_1: left promiscuous mode [ 625.471768][ T1378] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 625.517090][ T1378] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 626.470502][ C0] vkms_vblank_simulate: vblank timer overrun [ 627.529389][ C0] vkms_vblank_simulate: vblank timer overrun [ 627.568837][ C0] vkms_vblank_simulate: vblank timer overrun [ 628.768747][ C0] vkms_vblank_simulate: vblank timer overrun [ 628.842866][ C0] vkms_vblank_simulate: vblank timer overrun [ 630.009261][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 630.009467][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.234062][ C0] vkms_vblank_simulate: vblank timer overrun [ 630.320861][ T1378] team0 (unregistering): Port device team_slave_1 removed [ 630.580429][ T1378] team0 (unregistering): Port device team_slave_0 removed [ 634.232202][ T5858] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 634.381835][ T5858] usb 6-1: Using ep0 maxpacket: 32 [ 634.385067][ T5858] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 634.385092][ T5858] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 634.385111][ T5858] usb 6-1: config 0 has no interface number 0 [ 634.385162][ T5858] usb 6-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 634.385189][ T5858] usb 6-1: config 0 interface 8 has no altsetting 0 [ 634.388333][ T5858] usb 6-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 634.388363][ T5858] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.388382][ T5858] usb 6-1: Product: syz [ 634.388397][ T5858] usb 6-1: Manufacturer: syz [ 634.388411][ T5858] usb 6-1: SerialNumber: syz [ 634.492287][ T5858] usb 6-1: config 0 descriptor?? [ 634.755159][ T5858] ath6kl: Failed to submit usb control message: -71 [ 634.755209][ T5858] ath6kl: unable to send the bmi data to the device: -71 [ 634.755225][ T5858] ath6kl: Unable to send get target info: -71 [ 634.756182][ T5858] ath6kl: Failed to init ath6kl core: -71 [ 634.757750][ T5858] ath6kl_usb 6-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 634.883724][ C0] vkms_vblank_simulate: vblank timer overrun [ 634.913726][ T5858] usb 6-1: USB disconnect, device number 9 [ 635.076040][ T1378] team0 (unregistering): Port device team_slave_1 removed [ 635.117463][ C0] vkms_vblank_simulate: vblank timer overrun [ 635.222424][ T1378] team0 (unregistering): Port device team_slave_0 removed [ 635.716067][ C0] vkms_vblank_simulate: vblank timer overrun [ 636.398573][ C0] vkms_vblank_simulate: vblank timer overrun [ 636.929991][ T5159] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 636.946262][ T5159] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 636.949442][ T5159] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 636.952429][ T5159] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 636.994780][ T5159] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 637.251995][ T8238] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 637.422579][ T8238] usb 6-1: Using ep0 maxpacket: 32 [ 637.427446][ T8238] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 637.427473][ T8238] usb 6-1: config 0 has no interface number 0 [ 637.439753][ T8238] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 637.439781][ T8238] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.439799][ T8238] usb 6-1: Product: syz [ 637.439813][ T8238] usb 6-1: Manufacturer: syz [ 637.439826][ T8238] usb 6-1: SerialNumber: syz [ 637.498751][ T8238] usb 6-1: config 0 descriptor?? [ 637.523557][ T8238] smsc95xx v2.0.0 [ 637.523580][ T8238] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 637.523860][ T8238] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -22 [ 638.384211][ T8238] usb 6-1: USB disconnect, device number 10 [ 639.079844][ T59] Bluetooth: hci3: command tx timeout [ 639.089786][ T5930] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 639.240150][ T5930] usb 7-1: Using ep0 maxpacket: 16 [ 639.243890][ T5930] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 639.243932][ T5930] usb 7-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 639.243953][ T5930] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.263022][ T5930] usb 7-1: config 0 descriptor?? [ 640.642393][ T9725] random: crng reseeded on system resumption [ 641.143972][ T5930] waltop 0003:172F:0501.0008: unknown main item tag 0x0 [ 641.144011][ T5930] waltop 0003:172F:0501.0008: unknown main item tag 0x0 [ 641.144038][ T5930] waltop 0003:172F:0501.0008: unknown main item tag 0x0 [ 641.144062][ T5930] waltop 0003:172F:0501.0008: unknown main item tag 0x0 [ 641.144087][ T5930] waltop 0003:172F:0501.0008: unknown main item tag 0x0 [ 641.148597][ T5930] waltop 0003:172F:0501.0008: hidraw0: USB HID v0.08 Device [HID 172f:0501] on usb-dummy_hcd.6-1/input0 [ 641.168809][ T59] Bluetooth: hci3: command tx timeout [ 641.400131][ T5930] usb 7-1: USB disconnect, device number 8 [ 641.656157][ T9732] fido_id[9732]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 642.278792][ T9658] chnl_net:caif_netlink_parms(): no params data found [ 643.241470][ T59] Bluetooth: hci3: command tx timeout [ 645.009020][ T9658] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.009482][ T9658] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.009721][ T9658] bridge_slave_0: entered allmulticast mode [ 645.012470][ T9658] bridge_slave_0: entered promiscuous mode [ 645.167676][ T9658] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.167832][ T9658] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.168035][ T9658] bridge_slave_1: entered allmulticast mode [ 645.215473][ T9658] bridge_slave_1: entered promiscuous mode [ 645.317350][ T59] Bluetooth: hci3: command tx timeout [ 645.512911][ T5159] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 645.521977][ T5159] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 645.538067][ T5159] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 645.542878][ T5159] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 645.545418][ T5159] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 646.637631][ T9658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 646.716793][ T9658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 646.971047][ T9806] random: crng reseeded on system resumption [ 647.636641][ T5159] Bluetooth: hci0: command tx timeout [ 648.084715][ T37] audit: type=1326 audit(1759033933.443:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9813 comm="syz.6.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa061faeec9 code=0x7ffc0000 [ 648.084769][ T37] audit: type=1326 audit(1759033933.443:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9813 comm="syz.6.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa061faeec9 code=0x7ffc0000 [ 648.108533][ T37] audit: type=1326 audit(1759033933.473:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9813 comm="syz.6.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa061faeec9 code=0x7ffc0000 [ 648.108584][ T37] audit: type=1326 audit(1759033933.473:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9813 comm="syz.6.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa061faeec9 code=0x7ffc0000 [ 648.108624][ T37] audit: type=1326 audit(1759033933.473:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9813 comm="syz.6.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa061faeec9 code=0x7ffc0000 [ 648.110129][ T37] audit: type=1326 audit(1759033933.473:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9813 comm="syz.6.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa061faeec9 code=0x7ffc0000 [ 648.110177][ T37] audit: type=1326 audit(1759033933.473:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9813 comm="syz.6.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa061faeec9 code=0x7ffc0000 [ 648.110215][ T37] audit: type=1326 audit(1759033933.473:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9813 comm="syz.6.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa061faeec9 code=0x7ffc0000 [ 648.110668][ T37] audit: type=1326 audit(1759033933.473:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9813 comm="syz.6.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fa061faeec9 code=0x7ffc0000 [ 648.110710][ T37] audit: type=1326 audit(1759033933.473:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9813 comm="syz.6.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa061faeec9 code=0x7ffc0000 [ 649.715596][ T5159] Bluetooth: hci0: command tx timeout [ 649.978382][ T9658] team0: Port device team_slave_0 added [ 650.317833][ T9658] team0: Port device team_slave_1 added [ 650.331803][ T9823] netlink: 8 bytes leftover after parsing attributes in process `syz.4.894'. [ 651.804833][ T5159] Bluetooth: hci0: command tx timeout [ 653.874380][ T5159] Bluetooth: hci0: command tx timeout [ 655.439872][ T9658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 655.439889][ T9658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 655.439915][ T9658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 655.786542][ T9658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 655.786558][ T9658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 655.786583][ T9658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 657.930725][ T9658] hsr_slave_0: entered promiscuous mode [ 657.953751][ T9658] hsr_slave_1: entered promiscuous mode [ 660.183764][ T8238] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 660.229444][ T1378] bridge_slave_1: left allmulticast mode [ 660.229477][ T1378] bridge_slave_1: left promiscuous mode [ 660.229727][ T1378] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.303556][ T1378] bridge_slave_0: left allmulticast mode [ 660.303578][ T1378] bridge_slave_0: left promiscuous mode [ 660.303771][ T1378] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.342263][ T8238] usb 7-1: Using ep0 maxpacket: 32 [ 660.344612][ T8238] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 660.344637][ T8238] usb 7-1: config 0 has no interfaces? [ 660.354536][ T8238] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice= 9.57 [ 660.354564][ T8238] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.354582][ T8238] usb 7-1: Product: syz [ 660.354595][ T8238] usb 7-1: Manufacturer: syz [ 660.354608][ T8238] usb 7-1: SerialNumber: syz [ 660.370798][ T8238] usb 7-1: config 0 descriptor?? [ 660.589389][ T5159] Bluetooth: latency 39169 > 499 [ 660.594341][ T6069] usb 7-1: USB disconnect, device number 9 [ 660.914428][ T1378] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 661.006371][ T1378] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 661.082527][ T1378] bond0 (unregistering): Released all slaves [ 661.213196][ T9792] chnl_net:caif_netlink_parms(): no params data found [ 662.656425][ T5159] Bluetooth: hci7: command 0x0406 tx timeout [ 662.718899][ T9911] random: crng reseeded on system resumption [ 664.874142][ T1378] hsr_slave_0: left promiscuous mode [ 664.930816][ T1378] hsr_slave_1: left promiscuous mode [ 664.931774][ T1378] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 664.984864][ T1378] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 666.222540][ T1378] team0 (unregistering): Port device team_slave_1 removed [ 666.371456][ T1378] team0 (unregistering): Port device team_slave_0 removed [ 667.425545][ T9970] random: crng reseeded on system resumption [ 668.283480][ T9964] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.299973][ T9792] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.300143][ T9792] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.300374][ T9792] bridge_slave_0: entered allmulticast mode [ 668.303097][ T9792] bridge_slave_0: entered promiscuous mode [ 668.487536][ T9792] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.487675][ T9792] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.487914][ T9792] bridge_slave_1: entered allmulticast mode [ 668.501763][ T9792] bridge_slave_1: entered promiscuous mode [ 669.201509][ T9792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 669.214302][ T9792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 669.847417][ T9999] random: crng reseeded on system resumption [ 670.889229][T10007] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 671.476194][ T9792] team0: Port device team_slave_0 added [ 671.502798][ T9792] team0: Port device team_slave_1 added [ 671.680326][T10017] netlink: 12 bytes leftover after parsing attributes in process `syz.4.959'. [ 671.774598][T10013] netlink: 830 bytes leftover after parsing attributes in process `syz.5.956'. [ 672.010784][ T9792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 672.010806][ T9792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 672.010832][ T9792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 672.290853][ T9792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 672.290870][ T9792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 672.290896][ T9792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 673.219963][ T9658] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 673.292670][ T9792] hsr_slave_0: entered promiscuous mode [ 673.294762][ T9792] hsr_slave_1: entered promiscuous mode [ 673.295676][ T9792] debugfs: 'hsr0' already exists in 'hsr' [ 673.295699][ T9792] Cannot create hsr debugfs directory [ 673.296315][ T5159] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 673.296760][ T9658] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 673.330891][ T5931] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 673.496087][ T9658] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 673.501107][ T5931] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 673.501138][ T5931] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 673.501182][ T5931] usb 6-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 673.501204][ T5931] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.519427][ T5931] usb 6-1: config 0 descriptor?? [ 673.520554][T10035] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 673.634407][ T9658] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 674.138745][ T5931] glorious 0003:22D4:1503.0009: hidraw0: USB HID v0.00 Device [Glorious Model I] on usb-dummy_hcd.5-1/input0 [ 674.330843][ T5931] usb 6-1: USB disconnect, device number 11 [ 675.318995][ C1] vkms_vblank_simulate: vblank timer overrun [ 675.436982][T10078] netlink: 8 bytes leftover after parsing attributes in process `syz.5.978'. [ 676.063475][ T1378] bridge_slave_1: left allmulticast mode [ 676.063902][ T1378] bridge_slave_1: left promiscuous mode [ 676.064084][ T1378] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.184222][ T1378] bridge_slave_0: left allmulticast mode [ 676.184255][ T1378] bridge_slave_0: left promiscuous mode [ 676.184516][ T1378] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.131138][ T1378] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 677.208094][ T1378] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 677.281767][ T1378] bond0 (unregistering): Released all slaves [ 677.382123][ C1] vkms_vblank_simulate: vblank timer overrun [ 677.947629][ T1378] hsr_slave_0: left promiscuous mode [ 677.987696][ T1378] hsr_slave_1: left promiscuous mode [ 677.988784][ T1378] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 678.038173][ T1378] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 678.157609][ T6028] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 678.307508][ T6028] usb 7-1: Using ep0 maxpacket: 16 [ 678.312216][ T6028] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 678.314943][ T6028] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 678.314971][ T6028] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.314989][ T6028] usb 7-1: Product: syz [ 678.315002][ T6028] usb 7-1: Manufacturer: syz [ 678.315015][ T6028] usb 7-1: SerialNumber: syz [ 678.385652][ T6028] usb 7-1: config 0 descriptor?? [ 678.402511][ T6028] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 678.402545][ T6028] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 678.580826][ C1] vkms_vblank_simulate: vblank timer overrun [ 678.946395][ C1] vkms_vblank_simulate: vblank timer overrun [ 678.998621][ T1378] team0 (unregistering): Port device team_slave_1 removed [ 679.042097][ T6028] em28xx 7-1:0.0: chip ID is em2860 [ 679.160736][ T1378] team0 (unregistering): Port device team_slave_0 removed [ 679.342157][ T6028] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 679.342198][ T6028] em28xx 7-1:0.0: board has no eeprom [ 679.447344][ T6028] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 679.447373][ T6028] em28xx 7-1:0.0: dvb set to bulk mode. [ 679.452266][ T5930] em28xx 7-1:0.0: Binding DVB extension [ 679.527788][ T6028] usb 7-1: USB disconnect, device number 10 [ 679.586804][ T6028] em28xx 7-1:0.0: Disconnecting em28xx [ 679.601860][ T5930] em28xx 7-1:0.0: Registering input extension [ 679.648283][ C1] vkms_vblank_simulate: vblank timer overrun [ 679.697117][ T5930] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 679.697137][ T5930] Registered IR keymap rc-empty [ 679.755957][ T5930] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 679.793800][ T5930] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input10 [ 679.832259][ T5930] em28xx 7-1:0.0: Input extension successfully initialized [ 679.832654][ T6028] em28xx 7-1:0.0: Closing input extension [ 680.080406][ T6028] em28xx 7-1:0.0: Freeing device [ 680.235843][T10099] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.988'. [ 680.606476][ T9658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 680.692719][ T9658] 8021q: adding VLAN 0 to HW filter on device team0 [ 680.770531][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.770881][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 681.031782][ T1416] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.032435][ T1416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 681.129832][T10126] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 682.725038][T10155] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 682.999074][ T9792] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 684.760225][ T9792] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 684.883426][ T9792] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 684.983817][ T9792] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 685.174720][T10190] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1016'. [ 685.190879][T10190] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1016'. [ 685.231302][ T9658] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 686.466324][ T9792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 686.797392][ T9792] 8021q: adding VLAN 0 to HW filter on device team0 [ 686.918711][ T1485] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.925671][ T1485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 686.939418][ T1485] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.939563][ T1485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 688.500073][ T9658] veth0_vlan: entered promiscuous mode [ 688.660989][ T9658] veth1_vlan: entered promiscuous mode [ 688.688876][ T37] audit: type=1326 audit(1759033974.064:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10231 comm="syz.6.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa061faeec9 code=0x7ffc0000 [ 688.725456][ T37] audit: type=1326 audit(1759033974.064:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10231 comm="syz.6.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa061faeec9 code=0x7ffc0000 [ 689.044443][ T37] audit: type=1326 audit(1759033974.414:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10231 comm="syz.6.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fa061faeec9 code=0x7ffc0000 [ 689.044497][ T37] audit: type=1326 audit(1759033974.414:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10231 comm="syz.6.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa061faeec9 code=0x7ffc0000 [ 689.044538][ T37] audit: type=1326 audit(1759033974.414:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10231 comm="syz.6.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa061faeec9 code=0x7ffc0000 [ 689.182261][ T37] audit: type=1326 audit(1759033974.554:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10231 comm="syz.6.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fa061faeec9 code=0x7ffc0000 [ 689.210294][ T37] audit: type=1326 audit(1759033974.584:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10231 comm="syz.6.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa061faeec9 code=0x7ffc0000 [ 689.210343][ T37] audit: type=1326 audit(1759033974.584:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10231 comm="syz.6.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa061faeec9 code=0x7ffc0000 [ 689.210380][ T37] audit: type=1326 audit(1759033974.584:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10231 comm="syz.6.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7fa061faeec9 code=0x7ffc0000 [ 689.210420][ T37] audit: type=1326 audit(1759033974.584:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10231 comm="syz.6.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa061faeec9 code=0x7ffc0000 [ 690.518691][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 690.518766][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 692.784902][ T9658] veth0_macvtap: entered promiscuous mode [ 692.830769][ T9658] veth1_macvtap: entered promiscuous mode [ 693.373107][T10245] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.718099][T10243] can0: slcan on ttyS3. [ 693.996700][ T9658] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 700.405489][ T9658] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 703.463414][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 703.483843][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 703.485349][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 703.490263][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 703.491144][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 704.327850][ T9792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 704.830402][T10283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1044'. [ 705.622369][ T5159] Bluetooth: hci1: command tx timeout [ 706.838853][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 706.864251][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 706.867404][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 706.893336][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 706.901633][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 707.717624][ T59] Bluetooth: hci1: command tx timeout [ 707.865027][T10273] chnl_net:caif_netlink_parms(): no params data found [ 708.981968][ T59] Bluetooth: hci4: command tx timeout [ 709.296477][ C1] sched: DL replenish lagged too much [ 709.773518][ T5159] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 709.783179][ T5845] Bluetooth: hci1: command tx timeout [ 709.806355][ T5159] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 709.809303][ T5159] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 709.811357][ T5159] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 709.864275][ T5159] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 711.061590][ T5159] Bluetooth: hci4: command tx timeout [ 711.861758][ T5159] Bluetooth: hci1: command tx timeout [ 713.141480][ T5159] Bluetooth: hci4: command tx timeout [ 715.221013][ T5159] Bluetooth: hci4: command tx timeout [ 717.142428][ T5159] Bluetooth: hci5: command tx timeout [ 719.220520][ T5159] Bluetooth: hci5: command tx timeout [ 721.300310][ T5159] Bluetooth: hci5: command tx timeout [ 723.380032][ T5159] Bluetooth: hci5: command tx timeout [ 726.549474][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 726.578409][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 726.603618][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 726.608020][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 726.608866][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 728.739445][ T5159] Bluetooth: hci3: command tx timeout [ 730.819280][ T5159] Bluetooth: hci3: command tx timeout [ 732.899558][ T5159] Bluetooth: hci3: command tx timeout [ 734.979202][ T5159] Bluetooth: hci3: command tx timeout [ 753.444206][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 753.444298][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 758.084958][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 758.128930][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 758.130297][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 758.131482][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 758.132566][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 760.178792][ T5159] Bluetooth: hci0: command tx timeout [ 762.260409][ T5159] Bluetooth: hci0: command tx timeout [ 762.335480][ T59] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 762.352619][ T59] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 762.354097][ T59] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 762.355250][ T59] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 762.386756][ T59] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 764.336619][ T59] Bluetooth: hci0: command tx timeout [ 764.505951][ T59] Bluetooth: hci8: command tx timeout [ 766.420904][ T59] Bluetooth: hci0: command tx timeout [ 766.576465][ T59] Bluetooth: hci8: command tx timeout [ 766.833371][ T5159] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 766.860060][ T5159] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 766.861761][ T5159] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 766.862906][ T5159] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 766.894200][ T5159] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 768.662154][ T5159] Bluetooth: hci8: command tx timeout [ 768.976333][ T5159] Bluetooth: hci9: command tx timeout [ 769.463629][ T59] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 769.486473][ T59] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 769.487820][ T59] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 769.530730][ T59] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 769.532772][ T59] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 770.736238][ T59] Bluetooth: hci8: command tx timeout [ 771.058947][ T59] Bluetooth: hci9: command tx timeout [ 771.616233][ T59] Bluetooth: hci10: command tx timeout [ 773.137588][ T59] Bluetooth: hci9: command tx timeout [ 773.696192][ T59] Bluetooth: hci10: command tx timeout [ 775.216067][ T5159] Bluetooth: hci9: command tx timeout [ 775.776054][ T5159] Bluetooth: hci10: command tx timeout [ 777.856106][ T5159] Bluetooth: hci10: command tx timeout [ 779.368430][T10273] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.368582][T10273] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.368833][T10273] bridge_slave_0: entered allmulticast mode [ 779.623959][T10273] bridge_slave_0: entered promiscuous mode [ 783.169025][T10344] chnl_net:caif_netlink_parms(): no params data found [ 786.916730][ T59] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 786.937444][ T59] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 786.938853][ T59] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 786.940126][ T59] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 786.940956][ T59] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 791.215371][ T5159] Bluetooth: hci11: command tx timeout [ 793.295384][ T5159] Bluetooth: hci11: command tx timeout [ 795.385199][ T5159] Bluetooth: hci11: command tx timeout [ 797.458345][ T5159] Bluetooth: hci11: command tx timeout [ 797.860622][T10368] chnl_net:caif_netlink_parms(): no params data found [ 797.912887][T10374] chnl_net:caif_netlink_parms(): no params data found [ 797.932622][T10362] chnl_net:caif_netlink_parms(): no params data found [ 797.974699][T10379] chnl_net:caif_netlink_parms(): no params data found [ 818.488776][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 818.530566][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 818.532711][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 818.532784][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 818.535123][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 818.564645][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 818.577515][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 820.654430][ T5159] Bluetooth: hci1: command tx timeout [ 822.743678][ T5159] Bluetooth: hci1: command tx timeout [ 823.169523][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 823.191762][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 823.193589][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 823.412199][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 823.413066][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 824.814545][ T59] Bluetooth: hci1: command tx timeout [ 825.534385][ T59] Bluetooth: hci2: command tx timeout [ 826.894244][ T59] Bluetooth: hci1: command tx timeout [ 827.618740][ T59] Bluetooth: hci2: command tx timeout [ 828.155689][ T5159] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 828.179017][ T5159] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 828.183700][ T5159] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 828.207393][ T5159] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 828.208223][ T5159] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 829.694201][ T59] Bluetooth: hci2: command tx timeout [ 830.133921][ T5845] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 830.152882][ T5845] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 830.161762][ T5845] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 830.163064][ T5845] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 830.185280][ T5845] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 830.259029][ T5845] Bluetooth: hci3: command tx timeout [ 830.823763][ T5845] Bluetooth: hci4: command 0x0406 tx timeout [ 831.774196][ T5845] Bluetooth: hci2: command tx timeout [ 832.254516][ T5845] Bluetooth: hci12: command tx timeout [ 832.334292][ T5845] Bluetooth: hci3: command tx timeout [ 834.337723][ T5845] Bluetooth: hci12: command tx timeout [ 834.415730][ T5845] Bluetooth: hci3: command tx timeout [ 836.414163][ T5845] Bluetooth: hci12: command tx timeout [ 836.500024][ T5845] Bluetooth: hci3: command tx timeout [ 838.494158][ T5159] Bluetooth: hci12: command tx timeout [ 841.064257][ T5159] Bluetooth: hci5: command 0x0406 tx timeout [ 847.485619][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 847.492465][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 847.515809][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 847.517024][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 847.523212][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 849.615556][ T59] Bluetooth: hci0: command tx timeout [ 851.695222][ T5845] Bluetooth: hci0: command tx timeout [ 853.773965][ T5845] Bluetooth: hci0: command tx timeout [ 855.854049][ T5845] Bluetooth: hci0: command tx timeout [ 865.214164][ T38] INFO: task syz.5.1032:10248 blocked for more than 143 seconds. [ 865.214199][ T38] Not tainted syzkaller #0 [ 865.214210][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 865.214219][ T38] task:syz.5.1032 state:D stack:26768 pid:10248 tgid:10241 ppid:7848 task_flags:0x400140 flags:0x00004006 [ 865.214277][ T38] Call Trace: [ 865.214284][ T38] [ 865.214297][ T38] __schedule+0x16f3/0x4c20 [ 865.214350][ T38] ? __lock_acquire+0xab9/0xd20 [ 865.214375][ T38] ? __pfx___schedule+0x10/0x10 [ 865.214416][ T38] ? schedule+0x91/0x360 [ 865.214443][ T38] schedule+0x165/0x360 [ 865.214468][ T38] schedule_timeout+0x9a/0x270 [ 865.214491][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 865.214528][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 865.214551][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 865.214573][ T38] ? wait_for_completion+0x267/0x5d0 [ 865.214599][ T38] wait_for_completion+0x2bf/0x5d0 [ 865.214637][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 865.214669][ T38] ? __init_swait_queue_head+0xa9/0x150 [ 865.214695][ T38] rcu_barrier+0x463/0x570 [ 865.214725][ T38] netdev_run_todo+0x327/0xea0 [ 865.214753][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 865.214770][ T38] ? unregister_netdevice_queue+0x33c/0x380 [ 865.214792][ T38] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 865.214810][ T38] ? mutex_lock_nested+0x16a/0x1d0 [ 865.214834][ T38] ? rtnl_net_dev_lock+0x36/0x2f0 [ 865.214856][ T38] ? rtnl_net_dev_lock+0x2de/0x2f0 [ 865.214882][ T38] unregister_netdev+0x52/0x60 [ 865.214902][ T38] slcan_close+0x7d/0x160 [ 865.214928][ T38] tty_ldisc_kill+0xa3/0x1a0 [ 865.214959][ T38] tty_ldisc_hangup+0x3a2/0x4b0 [ 865.214982][ T38] __tty_hangup+0x418/0x690 [ 865.215016][ T38] tty_ioctl+0x75d/0xde0 [ 865.215035][ T38] ? __pfx_tty_ioctl+0x10/0x10 [ 865.215053][ T38] __se_sys_ioctl+0xfc/0x170 [ 865.215076][ T38] do_syscall_64+0xfa/0x3b0 [ 865.215092][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 865.215116][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.215134][ T38] ? clear_bhb_loop+0x60/0xb0 [ 865.215156][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.215178][ T38] RIP: 0033:0x7f6f2f2deec9 [ 865.215198][ T38] RSP: 002b:00007f6f2d525038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 865.215217][ T38] RAX: ffffffffffffffda RBX: 00007f6f2f536090 RCX: 00007f6f2f2deec9 [ 865.215231][ T38] RDX: 0000000000000000 RSI: 0000000000005437 RDI: 0000000000000003 [ 865.215243][ T38] RBP: 00007f6f2f361f91 R08: 0000000000000000 R09: 0000000000000000 [ 865.215255][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 865.215266][ T38] R13: 00007f6f2f536128 R14: 00007f6f2f536090 R15: 00007ffdd26676b8 [ 865.215297][ T38] [ 865.215308][ T38] INFO: task syz.6.1056:10318 blocked for more than 143 seconds. [ 865.215321][ T38] Not tainted syzkaller #0 [ 865.215330][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 865.215339][ T38] task:syz.6.1056 state:D stack:25128 pid:10318 tgid:10318 ppid:7850 task_flags:0x400040 flags:0x00004006 [ 865.215381][ T38] Call Trace: [ 865.215387][ T38] [ 865.215399][ T38] __schedule+0x16f3/0x4c20 [ 865.215436][ T38] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 865.215468][ T38] ? __pfx___schedule+0x10/0x10 [ 865.215516][ T38] rt_mutex_schedule+0x77/0xf0 [ 865.215534][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 865.215569][ T38] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 865.215595][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 865.215619][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 865.215641][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 865.215674][ T38] ? rcu_barrier+0x4c/0x570 [ 865.215701][ T38] ? rt_mutex_slowunlock+0x493/0x8a0 [ 865.215726][ T38] ? rcu_barrier+0x4c/0x570 [ 865.215742][ T38] mutex_lock_nested+0x16a/0x1d0 [ 865.215762][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 865.215787][ T38] rcu_barrier+0x4c/0x570 [ 865.215816][ T38] kvm_mmu_uninit_vm+0x53/0x90 [ 865.215837][ T38] kvm_arch_destroy_vm+0x23d/0x280 [ 865.215861][ T38] kvm_put_kvm+0xf8e/0x1670 [ 865.215891][ T38] ? __pfx_kvm_vm_release+0x10/0x10 [ 865.215914][ T38] kvm_vm_release+0x46/0x50 [ 865.215940][ T38] __fput+0x45b/0xa80 [ 865.215972][ T38] task_work_run+0x1d1/0x260 [ 865.215994][ T38] ? __pfx_task_work_run+0x10/0x10 [ 865.216019][ T38] ? exit_to_user_mode_loop+0x40/0x110 [ 865.216046][ T38] exit_to_user_mode_loop+0xec/0x110 [ 865.216069][ T38] do_syscall_64+0x2bd/0x3b0 [ 865.216086][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 865.216110][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.216127][ T38] ? clear_bhb_loop+0x60/0xb0 [ 865.216149][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.216166][ T38] RIP: 0033:0x7fa061faeec9 [ 865.216181][ T38] RSP: 002b:00007ffc4be67558 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 865.216199][ T38] RAX: 0000000000000000 RBX: 00007fa062207da0 RCX: 00007fa061faeec9 [ 865.216211][ T38] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 865.216223][ T38] RBP: 00007fa062207da0 R08: 0000000000000054 R09: 000000044be6784f [ 865.216236][ T38] R10: 00000000003ffd88 R11: 0000000000000246 R12: 00000000000adb69 [ 865.216248][ T38] R13: 00007fa062206090 R14: ffffffffffffffff R15: 00007ffc4be67670 [ 865.216280][ T38] [ 865.216305][ T38] [ 865.216305][ T38] Showing all locks held in the system: [ 865.216314][ T38] 6 locks held by rcuc/1/28: [ 865.216326][ T38] 1 lock held by khungtaskd/38: [ 865.216336][ T38] #0: ffffffff8d9a8dc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 865.216380][ T38] 3 locks held by kworker/u8:2/43: [ 865.216391][ T38] #0: ffff88802fe53938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 865.216438][ T38] #1: ffffc90000b47bc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 865.216484][ T38] #2: ffffffff8ecd38b8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x119/0x15a0 [ 865.216537][ T38] 2 locks held by kworker/1:2/1231: [ 865.216548][ T38] 3 locks held by kworker/u8:8/1378: [ 865.216558][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 865.216602][ T38] #1: ffffc900055dfbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 865.216647][ T38] #2: ffffffff8ecd38b8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 865.216689][ T38] 2 locks held by kworker/u8:12/1485: [ 865.216700][ T38] 2 locks held by kworker/u8:13/1503: [ 865.216710][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 865.216755][ T38] #1: ffffc90005a7fbc0 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 865.216811][ T38] 1 lock held by dhcpcd/5505: [ 865.216821][ T38] #0: ffffffff8ecd38b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 865.216867][ T38] 2 locks held by getty/5603: [ 865.216877][ T38] #0: ffff88823bf368a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 865.216916][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 865.216976][ T38] 1 lock held by syz-executor/9658: [ 865.216985][ T38] #0: ffffffff8d9ae770 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 865.217028][ T38] 1 lock held by syz-executor/9792: [ 865.217038][ T38] #0: ffffffff8d9ae770 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 865.217081][ T38] 3 locks held by syz.5.1032/10248: [ 865.217091][ T38] #0: ffff88805c4621a0 (&tty->legacy_mutex){+.+.}-{4:4}, at: __tty_hangup+0xeb/0x690 [ 865.217137][ T38] #1: ffff88805c4620a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_lock+0x6c/0xc0 [ 865.217176][ T38] #2: ffffffff8d9ae770 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 865.217218][ T38] 1 lock held by syz-executor/10273: [ 865.217228][ T38] #0: ffffffff8d9ae770 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 865.217269][ T38] 2 locks held by syz-executor/10302: [ 865.217280][ T38] #0: ffffffff8ecc69a0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 865.217324][ T38] #1: ffffffff8d9ae770 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 865.217366][ T38] 2 locks held by syz-executor/10312: [ 865.217376][ T38] #0: ffffffff8ecc69a0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 865.217421][ T38] #1: ffffffff8d9ae770 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 865.217463][ T38] 1 lock held by syz.6.1056/10318: [ 865.217473][ T38] #0: ffffffff8d9ae770 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 865.217514][ T38] 1 lock held by syz-executor/10344: [ 865.217524][ T38] #0: ffffffff8ecd38b8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 865.217570][ T38] 1 lock held by syz.4.1069/10360: [ 865.217580][ T38] #0: ffffffff8ecd38b8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 865.217626][ T38] 1 lock held by syz-executor/10362: [ 865.217635][ T38] #0: ffffffff8ecd38b8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 865.217682][ T38] 2 locks held by syz-executor/10368: [ 865.217693][ T38] #0: ffffffff8f1d7be8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 865.217743][ T38] #1: ffffffff8ecd38b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 865.217788][ T38] 2 locks held by syz-executor/10374: [ 865.217799][ T38] #0: ffffffff8f1d7be8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 865.217848][ T38] #1: ffffffff8ecd38b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 865.217893][ T38] 2 locks held by syz-executor/10379: [ 865.217903][ T38] #0: ffffffff8f1d7be8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 865.217958][ T38] #1: ffffffff8ecd38b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 865.218004][ T38] 2 locks held by syz-executor/10408: [ 865.218014][ T38] #0: ffffffff8ecc69a0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 865.218058][ T38] #1: ffffffff8ecd38b8 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x990 [ 865.218104][ T38] 1 lock held by syz-executor/10417: [ 865.218115][ T38] #0: ffffffff8ecd38b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 865.218157][ T38] 1 lock held by syz-executor/10423: [ 865.218168][ T38] #0: ffffffff8ecd38b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 865.218209][ T38] 1 lock held by syz-executor/10426: [ 865.218219][ T38] #0: ffffffff8ecd38b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 865.218262][ T38] 1 lock held by syz-executor/10432: [ 865.218272][ T38] #0: ffffffff8ecd38b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 865.218313][ T38] 1 lock held by syz-executor/10440: [ 865.218324][ T38] #0: ffffffff8ecd38b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 865.218366][ T38] [ 865.218370][ T38] ============================================= [ 865.218370][ T38] [ 865.218383][ T38] NMI backtrace for cpu 0 [ 865.218406][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 865.218426][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 865.218437][ T38] Call Trace: [ 865.218443][ T38] [ 865.218451][ T38] dump_stack_lvl+0x189/0x250 [ 865.218478][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 865.218501][ T38] ? __pfx__printk+0x10/0x10 [ 865.218532][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 865.218556][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 865.218581][ T38] ? __pfx__printk+0x10/0x10 [ 865.218604][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 865.218627][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 865.218656][ T38] watchdog+0xf93/0xfe0 [ 865.218682][ T38] ? watchdog+0x1de/0xfe0 [ 865.218708][ T38] kthread+0x711/0x8a0 [ 865.218735][ T38] ? __pfx_watchdog+0x10/0x10 [ 865.218755][ T38] ? __pfx_kthread+0x10/0x10 [ 865.218782][ T38] ? __pfx_kthread+0x10/0x10 [ 865.218806][ T38] ret_from_fork+0x436/0x7d0 [ 865.218830][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 865.218858][ T38] ? __switch_to_asm+0x39/0x70 [ 865.218873][ T38] ? __switch_to_asm+0x33/0x70 [ 865.218888][ T38] ? __pfx_kthread+0x10/0x10 [ 865.218913][ T38] ret_from_fork_asm+0x1a/0x30 [ 865.218950][ T38] [ 865.218957][ T38] Sending NMI from CPU 0 to CPUs 1: [ 865.218982][ C1] NMI backtrace for cpu 1 [ 865.218996][ C1] CPU: 1 UID: 0 PID: 28 Comm: rcuc/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 865.219014][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 865.219023][ C1] RIP: 0010:fib_table_lookup+0x7b2/0x16e0 [ 865.219046][ C1] Code: 80 cd 01 41 88 2e eb 05 e8 1b d7 38 f8 48 8d 6b 19 48 89 e8 48 c1 e8 03 49 bf 00 00 00 00 00 fc ff df 48 89 84 24 90 00 00 00 <42> 0f b6 04 38 84 c0 0f 85 4a 03 00 00 44 0f b6 75 00 bf 0c 00 00 [ 865.219059][ C1] RSP: 0018:ffffc90000a2e5f8 EFLAGS: 00000a02 [ 865.219072][ C1] RAX: 1ffff110049b1558 RBX: ffff888024d8aaa8 RCX: ffff88801cac8000 [ 865.219084][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 865.219094][ C1] RBP: ffff888024d8aac1 R08: 0000000000000000 R09: 0000000000000100 [ 865.219105][ C1] R10: ffffc90000a2e820 R11: fffff52000145d0a R12: ffff888039007ea0 [ 865.219117][ C1] R13: 1ffff110049b1557 R14: ffff888024d8aac2 R15: dffffc0000000000 [ 865.219128][ C1] FS: 0000000000000000(0000) GS:ffff8881269bc000(0000) knlGS:0000000000000000 [ 865.219142][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 865.219153][ C1] CR2: 00007ffc41be6598 CR3: 000000000d7a6000 CR4: 00000000003526f0 [ 865.219167][ C1] Call Trace: [ 865.219172][ C1] [ 865.219198][ C1] fib_lookup+0x1c5/0x440 [ 865.219212][ C1] ? fib_lookup+0x76/0x440 [ 865.219228][ C1] ip_route_output_key_hash_rcu+0x31b/0x23e0 [ 865.219247][ C1] ? ip_route_output_key_hash+0xde/0x2e0 [ 865.219262][ C1] ? ip_route_output_key_hash+0xde/0x2e0 [ 865.219279][ C1] ip_route_output_key_hash+0x1b9/0x2e0 [ 865.219294][ C1] ? __lock_acquire+0xab9/0xd20 [ 865.219312][ C1] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 865.219331][ C1] ? ip_route_me_harder+0x4ad/0x1030 [ 865.219352][ C1] ip_route_output_flow+0x2a/0x150 [ 865.219365][ C1] ? ip_route_me_harder+0x6c0/0x1030 [ 865.219382][ C1] ip_route_me_harder+0x6d2/0x1030 [ 865.219405][ C1] ? __pfx_ip_route_me_harder+0x10/0x10 [ 865.219435][ C1] synproxy_send_tcp+0x359/0x6c0 [ 865.219459][ C1] synproxy_send_client_synack+0x8bb/0xe20 [ 865.219485][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 865.219504][ C1] ? nft_synproxy_do_eval+0x1d8/0x570 [ 865.219520][ C1] ? synproxy_pernet+0x45/0x270 [ 865.219538][ C1] nft_synproxy_eval_v4+0x36e/0x560 [ 865.219557][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 865.219574][ C1] ? nf_ip_checksum+0x13c/0x510 [ 865.219592][ C1] nft_synproxy_do_eval+0x345/0x570 [ 865.219611][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 865.219626][ C1] ? ip_vs_conn_out_get+0x9c/0xa70 [ 865.219649][ C1] nft_do_chain+0x40c/0x1920 [ 865.219666][ C1] ? ip_vs_fill_iph_skb_off+0x30a/0x7b0 [ 865.219686][ C1] ? __pfx_ip_vs_fill_iph_skb_off+0x10/0x10 [ 865.219706][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 865.219719][ C1] ? ip_vs_conn_out_get_proto+0x25e/0x420 [ 865.219739][ C1] ? __pfx_ip_vs_conn_out_get_proto+0x10/0x10 [ 865.219765][ C1] ? ip_vs_out_hook+0x9b5/0xef0 [ 865.219782][ C1] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 865.219802][ C1] nft_do_chain_inet+0x25d/0x340 [ 865.219818][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 865.219839][ C1] ? NF_HOOK+0x9a/0x3a0 [ 865.219857][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 865.219873][ C1] nf_hook_slow+0xc2/0x220 [ 865.219894][ C1] NF_HOOK+0x206/0x3a0 [ 865.219912][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 865.219930][ C1] ? NF_HOOK+0x9a/0x3a0 [ 865.219947][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 865.219963][ C1] ? ip_rcv_finish_core+0x10e9/0x1c00 [ 865.219982][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 865.220001][ C1] ? skb_dst+0x4f/0xd0 [ 865.220019][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 865.220038][ C1] NF_HOOK+0x30c/0x3a0 [ 865.220057][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 865.220074][ C1] ? NF_HOOK+0x9a/0x3a0 [ 865.220091][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 865.220110][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 865.220132][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 865.220149][ C1] __netif_receive_skb+0x143/0x380 [ 865.220166][ C1] ? rt_spin_unlock+0x65/0x80 [ 865.220190][ C1] ? process_backlog+0x27b/0x900 [ 865.220207][ C1] process_backlog+0x31e/0x900 [ 865.220230][ C1] __napi_poll+0xb3/0x540 [ 865.220250][ C1] net_rx_action+0x707/0xe00 [ 865.220266][ C1] ? arch_stack_walk+0x11c/0x150 [ 865.220287][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 865.220307][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 865.220326][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 865.220350][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 865.220372][ C1] handle_softirqs+0x22c/0x710 [ 865.220393][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 865.220415][ C1] __local_bh_enable_ip+0x179/0x270 [ 865.220432][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 865.220454][ C1] ? rcu_cpu_kthread+0x23e/0x1b50 [ 865.220472][ C1] ? rcu_cpu_kthread+0x23e/0x1b50 [ 865.220490][ C1] rcu_cpu_kthread+0xc3d/0x1b50 [ 865.220512][ C1] ? rcu_cpu_kthread+0x23e/0x1b50 [ 865.220536][ C1] ? __pfx_rcu_cpu_kthread+0x10/0x10 [ 865.220557][ C1] ? __pfx___schedule+0x10/0x10 [ 865.220584][ C1] ? schedule+0x91/0x360 [ 865.220605][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 865.220621][ C1] smpboot_thread_fn+0x542/0xa60 [ 865.220639][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 865.220660][ C1] kthread+0x711/0x8a0 [ 865.220680][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 865.220697][ C1] ? __pfx_kthread+0x10/0x10 [ 865.220718][ C1] ? __pfx_kthread+0x10/0x10 [ 865.220737][ C1] ret_from_fork+0x436/0x7d0 [ 865.220755][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 865.220775][ C1] ? __switch_to_asm+0x39/0x70 [ 865.220788][ C1] ? __switch_to_asm+0x33/0x70 [ 865.220801][ C1] ? __pfx_kthread+0x10/0x10 [ 865.220820][ C1] ret_from_fork_asm+0x1a/0x30 [ 865.220842][ C1] [ 865.220983][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 865.220997][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 865.221017][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 865.221028][ T38] Call Trace: [ 865.221035][ T38] [ 865.221043][ T38] dump_stack_lvl+0x99/0x250 [ 865.221066][ T38] ? __asan_memcpy+0x40/0x70 [ 865.221086][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 865.221109][ T38] ? __pfx__printk+0x10/0x10 [ 865.221140][ T38] vpanic+0x281/0x750 [ 865.221165][ T38] ? __pfx_vpanic+0x10/0x10 [ 865.221185][ T38] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 865.221204][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 865.221237][ T38] panic+0xb9/0xc0 [ 865.221259][ T38] ? __pfx_panic+0x10/0x10 [ 865.221284][ T38] ? irq_work_queue+0xc3/0x140 [ 865.221309][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 865.221333][ T38] watchdog+0xfd2/0xfe0 [ 865.221359][ T38] ? watchdog+0x1de/0xfe0 [ 865.221386][ T38] kthread+0x711/0x8a0 [ 865.221412][ T38] ? __pfx_watchdog+0x10/0x10 [ 865.221433][ T38] ? __pfx_kthread+0x10/0x10 [ 865.221460][ T38] ? __pfx_kthread+0x10/0x10 [ 865.221485][ T38] ret_from_fork+0x436/0x7d0 [ 865.221509][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 865.221535][ T38] ? __switch_to_asm+0x39/0x70 [ 865.221551][ T38] ? __switch_to_asm+0x33/0x70 [ 865.221567][ T38] ? __pfx_kthread+0x10/0x10 [ 865.221591][ T38] ret_from_fork_asm+0x1a/0x30 [ 865.221624][ T38] [ 865.221879][ T38] Kernel Offset: disabled