last executing test programs: 5m21.287539511s ago: executing program 0 (id=752): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff, 0x2000000}, 0x10) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsmount(0xffffffffffffffff, 0x0, 0x8) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001340)) r3 = fsopen(&(0x7f0000000080)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0..:\x00', 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f0000003680)=[{{&(0x7f0000000140)=@nfc, 0x80, &(0x7f0000002380)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1, &(0x7f00000023c0)=""/215, 0xd7}, 0x1}, {{&(0x7f00000024c0)=@can, 0x80, &(0x7f00000035c0)=[{&(0x7f0000002540)=""/4096, 0x1000}, {&(0x7f0000003540)=""/84, 0x54}], 0x2, &(0x7f0000003600)=""/91, 0x5b}, 0x9}], 0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x40, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r6, 0x0, 0xa0028000}, 0x38) r7 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r7, 0x114, 0x36, 0x0, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r8, 0x40046104, &(0x7f0000000080)) 5m17.949672701s ago: executing program 0 (id=759): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ptrace$ARCH_SHSTK_DISABLE(0x1e, r0, 0x3, 0x5002) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x15, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x2}}, 0x14) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000000000/0x1000)=nil, 0x1000, &(0x7f0000000100)='maps\x00') syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0xc0686611, &(0x7f0000000040)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r6, 0xffffffffffffffff, 0x0) 5m15.460470865s ago: executing program 0 (id=764): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) writev(r0, &(0x7f0000000340)=[{}], 0x1) 5m6.905036588s ago: executing program 0 (id=778): syz_io_uring_complete(0x0, 0x0) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x80400, 0x0) ioctl$TIOCGPKT(r0, 0x80045438, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0xfe33) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000003c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000540)=[{0x0, 0x0, 0x0}], 0x1, 0x4000800) recvmsg(r3, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x4, 0x0, 0x0, 0x41100}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000440)={'gre0\x00', 0x0, 0x10, 0x80, 0x0, 0x7, {{0x14, 0x4, 0x3, 0x37, 0x50, 0x66, 0x0, 0x9, 0x4, 0x0, @loopback, @loopback, {[@timestamp_prespec={0x44, 0xc, 0x6, 0x3, 0x1, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xd8b}]}, @generic={0x82, 0xa, "9bc7dce4085fe09a"}, @timestamp={0x44, 0x24, 0x93, 0x0, 0x4, [0x4, 0x6, 0x8, 0x2, 0xfff, 0xc, 0x9a, 0x5]}]}}}}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000380)='\x00'/14, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m5.614327549s ago: executing program 0 (id=780): sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008080}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf182", 0x17) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) 5m4.192839287s ago: executing program 0 (id=785): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0xf, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1400000004, 0x800009d8}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x2, 0x32}, 0x2, @in6=@local, 0x0, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e0"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0xf0, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0xff}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffff7fffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}}, 0xf0}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000003000000fdfffffffeffffff0000000000000000000000070000000000000000000000090000000000000000000000090400000000000000000000090600"], 0x0, 0x96}, 0x28) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018000000", @ANYRES32, @ANYBLOB="000000000000000095000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0xaa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x1fffffdfff, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0x200000fff, 0x5) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='ecryptfs\x00', 0x10005, 0x0) 4m48.78828185s ago: executing program 32 (id=785): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0xf, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1400000004, 0x800009d8}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x2, 0x32}, 0x2, @in6=@local, 0x0, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e0"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0xf0, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0xff}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffff7fffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}}, 0xf0}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000003000000fdfffffffeffffff0000000000000000000000070000000000000000000000090000000000000000000000090400000000000000000000090600"], 0x0, 0x96}, 0x28) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018000000", @ANYRES32, @ANYBLOB="000000000000000095000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0xaa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x1fffffdfff, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0x200000fff, 0x5) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='ecryptfs\x00', 0x10005, 0x0) 2m55.567962344s ago: executing program 2 (id=1002): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet_udp(0x2, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) bind$ax25(r3, &(0x7f0000000280)={{0x3, @default, 0x5}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @null]}, 0x48) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f00000000c0)) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) connect$ax25(r3, &(0x7f0000000180)={{0x3, @bcast, 0x5}, [@bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) syz_emit_ethernet(0x80, &(0x7f0000000580)=ANY=[], 0x0) unshare(0x22020400) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x40, 0x6, 0x8}, 0x48) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) 2m54.399732318s ago: executing program 2 (id=1004): ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f00000002c0)={0x1, 0x9d, 0x7, &(0x7f0000000240)={0x1c, "24e16370a061c2db0732e87176a1c9758266aa22dfd45d69888bbe0add3a4f4f0f"}}) 2m54.172089845s ago: executing program 2 (id=1007): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24044041}, 0x4080) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) socket$inet(0x2, 0x2, 0x0) r6 = socket(0x21, 0x2, 0x4) ptrace$ARCH_SET_GS(0x1e, 0x0, &(0x7f0000000080), 0x1001) sendfile(r6, 0xffffffffffffffff, 0x0, 0xffba83) pipe(&(0x7f0000000200)) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f00000002c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x24040801}, 0x40001) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$rds(r1, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) 2m52.856731211s ago: executing program 2 (id=1008): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ptrace$ARCH_SHSTK_DISABLE(0x1e, r0, 0x3, 0x5002) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x15, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x2}}, 0x14) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000000000/0x1000)=nil, 0x1000, &(0x7f0000000100)='maps\x00') syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, &(0x7f0000000040)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x100, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x3, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x350bae1a, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xd4f, 0x7, 0xf2, 0x10, 0x5, 0x8, 0x10001, 0x401, 0x80000000, 0x2401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0x0, 0x54, 0x80000000, 0x7fff, 0x7, 0x3, 0xa, 0x0, 0x10000, 0x401, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x1, 0xb6, 0x20, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0x80000c74, 0x77, 0x1, 0xff, 0x5cb5, 0xfffffffe, 0x3fd, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x5, 0x1, 0x32, 0x98, 0x7f, 0x0, 0x401, 0x2, 0x2, 0x4680, 0x7, 0xe665, 0x3c6e, 0x3, 0x40, 0x80, 0x4b, 0x8000, 0x2, 0xb, 0x6, 0x4fa4, 0x80000002, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0xfe, 0x4, 0x40, 0x9, 0x1b, 0x1ff, 0x7ff, 0x2, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0x1, 0x3, 0xa0, 0xf, 0x1ff, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0xf1a, 0x664, 0x4, 0x9, 0x9, 0x2, 0x4, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0xf7a, 0xc6, 0x1, 0x4, 0x6, 0xffffffff, 0x6, 0x10001, 0x3042c26b, 0x68, 0x7, 0x1, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffff0000, 0x7, 0x5, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x101, 0x5, 0x63, 0x4, 0x4, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7ffffffb, 0x73, 0x7, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x8, 0x6688, 0x45e3, 0x5, 0x7, 0x1, 0x5, 0x3, 0x0, 0x1, 0x2, 0x2, 0x4, 0xce, 0xf, 0x0, 0x1, 0x667, 0x3, 0x0, 0x9, 0x9, 0x37d, 0x10001, 0xc, 0x1, 0x1, 0x2, 0x6, 0x4, 0x6, 0x1, 0x9, 0x6, 0xfffffffa, 0x2, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80000001, 0x8, 0x8000, 0x3a, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xffff, 0xe, 0x89, 0x2, 0x7, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x2, 0x80000004, 0x29, 0x9, 0x0, 0x80000004, 0x4, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0xfc, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0xbf, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x7, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x5, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x8, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xc, 0x6, 0x7, 0xfffffeff, 0x100, 0x2, 0x7fff, 0x101, 0x7, 0x6, 0x706, 0x2, 0x49, 0xe, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x6, 0x1, 0xa9c, 0x9, 0x9, 0x1, 0x2, 0x5, 0x1000, 0x5, 0x1ff, 0x9, 0x3, 0x3, 0x10001, 0xffff0000, 0xf, 0x1, 0xffffa5ba, 0xffffa9b4, 0xb, 0x4, 0x8000005, 0x3, 0x4b5f, 0x6, 0xa, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0xc8f, 0x1, 0x7, 0x8, 0x0, 0x10000, 0x57dc, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0x5, 0x4, 0xfff, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x7f, 0x5, 0x2, 0x80000000, 0xd, 0x3, 0x1, 0x0, 0x5, 0xb8, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xae6, 0x9, 0xffffa0b0, 0x9, 0x6, 0x2, 0x80, 0x9, 0x1, 0x81, 0x9a, 0x9, 0xb, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x2, 0x20000000, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0x8000001, 0x0, 0xfff, 0x101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xfff, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x6, 0x4b15, 0x10000, 0x1, 0x9, 0x1, 0xd, 0x9, 0x4, 0x9, 0x1, 0x6, 0x0, 0x3, 0x10001, 0x1, 0x7, 0x1, 0x5, 0x8, 0xffffc488, 0x200, 0x10001, 0x37c, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0x10, 0x0, 0x3, 0x4, 0x80000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x9, 0x3, 0xffffffff, 0x0, 0x7f, 0x6, 0x8, 0x40, 0x2, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x2, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x80000001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa958, 0xff, 0x5, 0x2, 0x2, 0x4, 0x10000, 0x80000001, 0x5, 0x1c00, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0xffff, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x9, 0x8, 0x0, 0x5, 0xf, 0x5, 0xe, 0x6, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x9, 0x5, 0xffff8000, 0xe0, 0xfffffffb, 0x85, 0xffffffff, 0x2, 0x7, 0xa05a, 0x0, 0x0, 0x101, 0x35, 0x8, 0x1, 0x1, 0x30, 0xffffff7e, 0x1, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x4000, 0x1, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x43, 0x3, 0x9, 0x5, 0x80000000, 0x9, 0x0, 0x5, 0x81, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x1, 0x9, 0x8, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x9, 0x6, 0x9, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x8000002, 0x1000008, 0x2b, 0x200006, 0x4, 0x1, 0x2, 0xfb4, 0xbf9, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0x3, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x8, 0x3, 0x6, 0x80000000, 0x0, 0x100a, 0x7fffffff, 0x8000, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0x8, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x5, 0x6, 0x1, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xd, 0x3, 0x4, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x6, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0x0, 0x924, 0x6, 0x100, 0x1, 0x5, 0xffff351b, 0x8, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x4, 0x1, 0x4, 0x8, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x10001, 0x1, 0x1, 0xfffffff7, 0x0, 0x5, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x8, 0x5, 0xfffffff7, 0x7, 0x7, 0x5, 0x6330, 0xffffffff, 0x6, 0xea, 0x0, 0xfff, 0x809, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0x7, 0x5, 0x7, 0x2ec, 0x9, 0x6, 0x3ff, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x8, 0x3, 0xe, 0x1, 0x1, 0xc, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0xb, 0xc0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0x65, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xfffffff8, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x8, 0x1, 0xfffffffb, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x40, 0x8, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x7fff, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x7, 0x7ff, 0x0, 0x1, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x7, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x8, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x400, 0x1, 0x8, 0x200, 0xe9ab, 0xfffffff8, 0x8000, 0x7, 0x2, 0x2, 0x43, 0x3ff, 0x8, 0x7, 0x9, 0x1, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]}) 2m46.504066108s ago: executing program 2 (id=1022): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000000)=r0) 2m39.213126551s ago: executing program 2 (id=1033): bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_open_dev$swradio(0x0, 0x1, 0x2) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ff199610b90661408801010203010902"], 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x240, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) getgroups(0x1, &(0x7f0000000040)=[0x0]) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000000c0)={0x0, 0x1, 0x0, &(0x7f0000000340)=""/85, 0x0, 0xfec00000}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/85, 0x0, 0x60000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000040)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0xfffffffe) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af04, &(0x7f00000003c0)={0x1}) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x8040) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2m23.118094204s ago: executing program 33 (id=1033): bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_open_dev$swradio(0x0, 0x1, 0x2) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ff199610b90661408801010203010902"], 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x240, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) getgroups(0x1, &(0x7f0000000040)=[0x0]) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000000c0)={0x0, 0x1, 0x0, &(0x7f0000000340)=""/85, 0x0, 0xfec00000}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/85, 0x0, 0x60000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000040)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0xfffffffe) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af04, &(0x7f00000003c0)={0x1}) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x8040) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 13.71664793s ago: executing program 3 (id=1266): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = io_uring_setup(0xbbc, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x0, 0x345}) io_uring_enter(r3, 0x100000, 0x2, 0xf, &(0x7f0000000000), 0x18) 12.34776342s ago: executing program 3 (id=1268): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) read$FUSE(r0, 0x0, 0x0) fanotify_init(0x10, 0x101000) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$setregset(0x4205, r1, 0x4, 0x0) ptrace$pokeuser(0x6, 0x0, 0x118, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', 0x2) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r6, 0x89e0, &(0x7f0000000040)={0x1}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd700ffedbdf252800000005002e000500000008000200", @ANYRES32=r4, @ANYBLOB="05002b0002000000"], 0x2c}, 0x1, 0x0, 0x0, 0x94}, 0xc0) 11.813695578s ago: executing program 4 (id=1270): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000300), 0x4000, 0x0) 11.114139344s ago: executing program 3 (id=1271): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = io_uring_setup(0x2f35, &(0x7f0000000000)={0x0, 0xfca1, 0x2, 0x2, 0x1e}) io_uring_register$IORING_REGISTER_RING_FDS(r5, 0x13, &(0x7f0000001bc0), 0x2) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000680001000000000000fe017802000000000000344d000b00df20c9727bd5e7ff08b5923f316fd6abaed548a7ceed1cbfc4fa8654e6ec703b0c476f8131eaf5e61837cd1ed8fb8b1f04513ff423"], 0x1c}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x10000, 0x1, 0x7f}, &(0x7f0000000300)=0x10) shutdown(r6, 0x1) 9.727315574s ago: executing program 3 (id=1274): mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) 9.256695736s ago: executing program 3 (id=1275): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f000054e000/0x400000)=nil) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000002040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 7.70806787s ago: executing program 1 (id=1278): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) ptrace$ARCH_SHSTK_DISABLE(0x1e, r0, 0x3, 0x5002) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000000000/0x1000)=nil, 0x1000, &(0x7f0000000100)='maps\x00') syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0xc0686611, &(0x7f0000000040)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x100, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x3, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x350bae1a, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xd4f, 0x7, 0xf2, 0x10, 0x5, 0x8, 0x10001, 0x401, 0x80000000, 0x2401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0x0, 0x54, 0x80000000, 0x7fff, 0x7, 0x3, 0xa, 0x0, 0x10000, 0x401, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x1, 0xb6, 0x20, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0x80000c74, 0x77, 0x1, 0xff, 0x5cb5, 0xfffffffe, 0x3fd, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x5, 0x1, 0x32, 0x98, 0x7f, 0x0, 0x401, 0x2, 0x2, 0x4680, 0x7, 0xe665, 0x3c6e, 0x3, 0x40, 0x80, 0x4b, 0x8000, 0x2, 0xb, 0x6, 0x4fa4, 0x80000002, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0xfe, 0x4, 0x40, 0x9, 0x1b, 0x1ff, 0x7ff, 0x2, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0x1, 0x3, 0xa0, 0xf, 0x1ff, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0xf1a, 0x664, 0x4, 0x9, 0x9, 0x2, 0x4, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0xf7a, 0xc6, 0x1, 0x4, 0x6, 0xffffffff, 0x6, 0x10001, 0x3042c26b, 0x68, 0x7, 0x1, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffff0000, 0x7, 0x5, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x101, 0x5, 0x63, 0x4, 0x4, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7ffffffb, 0x73, 0x7, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x8, 0x6688, 0x45e3, 0x5, 0x7, 0x1, 0x5, 0x3, 0x0, 0x1, 0x2, 0x2, 0x4, 0xce, 0xf, 0x0, 0x1, 0x667, 0x3, 0x0, 0x9, 0x9, 0x37d, 0x10001, 0xc, 0x1, 0x1, 0x2, 0x6, 0x4, 0x6, 0x1, 0x9, 0x6, 0xfffffffa, 0x2, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80000001, 0x8, 0x8000, 0x3a, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xffff, 0xe, 0x89, 0x2, 0x7, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x2, 0x80000004, 0x29, 0x9, 0x0, 0x80000004, 0x4, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0xfc, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0xbf, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x7, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x5, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x8, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xc, 0x6, 0x7, 0xfffffeff, 0x100, 0x2, 0x7fff, 0x101, 0x7, 0x6, 0x706, 0x2, 0x49, 0xe, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x6, 0x1, 0xa9c, 0x9, 0x9, 0x1, 0x2, 0x5, 0x1000, 0x5, 0x1ff, 0x9, 0x3, 0x3, 0x10001, 0xffff0000, 0xf, 0x1, 0xffffa5ba, 0xffffa9b4, 0xb, 0x4, 0x8000005, 0x3, 0x4b5f, 0x6, 0xa, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0xc8f, 0x1, 0x7, 0x8, 0x0, 0x10000, 0x57dc, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0x5, 0x4, 0xfff, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x7f, 0x5, 0x2, 0x80000000, 0xd, 0x3, 0x1, 0x0, 0x5, 0xb8, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xae6, 0x9, 0xffffa0b0, 0x9, 0x6, 0x2, 0x80, 0x9, 0x1, 0x81, 0x9a, 0x9, 0xb, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x2, 0x20000000, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0x8000001, 0x0, 0xfff, 0x101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xfff, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x6, 0x4b15, 0x10000, 0x1, 0x9, 0x1, 0xd, 0x9, 0x4, 0x9, 0x1, 0x6, 0x0, 0x3, 0x10001, 0x1, 0x7, 0x1, 0x5, 0x8, 0xffffc488, 0x200, 0x10001, 0x37c, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0x10, 0x0, 0x3, 0x4, 0x80000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x9, 0x3, 0xffffffff, 0x0, 0x7f, 0x6, 0x8, 0x40, 0x2, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x2, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x80000001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa958, 0xff, 0x5, 0x2, 0x2, 0x4, 0x10000, 0x80000001, 0x5, 0x1c00, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0xffff, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x9, 0x8, 0x0, 0x5, 0xf, 0x5, 0xe, 0x6, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x9, 0x5, 0xffff8000, 0xe0, 0xfffffffb, 0x85, 0xffffffff, 0x2, 0x7, 0xa05a, 0x0, 0x0, 0x101, 0x35, 0x8, 0x1, 0x1, 0x30, 0xffffff7e, 0x1, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x4000, 0x1, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x43, 0x3, 0x9, 0x5, 0x80000000, 0x9, 0x0, 0x5, 0x81, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x1, 0x9, 0x8, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x9, 0x6, 0x9, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x8000002, 0x1000008, 0x2b, 0x200006, 0x4, 0x1, 0x2, 0xfb4, 0xbf9, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0x3, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x8, 0x3, 0x6, 0x80000000, 0x0, 0x100a, 0x7fffffff, 0x8000, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0x8, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x5, 0x6, 0x1, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xd, 0x3, 0x4, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x6, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0x0, 0x924, 0x6, 0x100, 0x1, 0x5, 0xffff351b, 0x8, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x4, 0x1, 0x4, 0x8, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x10001, 0x1, 0x1, 0xfffffff7, 0x0, 0x5, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x8, 0x5, 0xfffffff7, 0x7, 0x7, 0x5, 0x6330, 0xffffffff, 0x6, 0xea, 0x0, 0xfff, 0x809, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0x7, 0x5, 0x7, 0x2ec, 0x9, 0x6, 0x3ff, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x8, 0x3, 0xe, 0x1, 0x1, 0xc, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0xb, 0xc0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0x65, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xfffffff8, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x8, 0x1, 0xfffffffb, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x40, 0x8, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x7fff, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x7, 0x7ff, 0x0, 0x1, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x7, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x8, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x400, 0x1, 0x8, 0x200, 0xe9ab, 0xfffffff8, 0x8000, 0x7, 0x2, 0x2, 0x43, 0x3ff, 0x8, 0x7, 0x9, 0x1, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]}) 6.18771045s ago: executing program 1 (id=1279): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) read$FUSE(r0, 0x0, 0x0) fanotify_init(0x10, 0x101000) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$setregset(0x4205, r1, 0x4, 0x0) ptrace$pokeuser(0x6, 0x0, 0x118, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', 0x2) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r6, 0x89e0, &(0x7f0000000040)={0x1}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd700ffedbdf252800000005002e000500000008000200", @ANYRES32=r4, @ANYBLOB="05002b0002000000"], 0x2c}, 0x1, 0x0, 0x0, 0x94}, 0xc0) 5.870434214s ago: executing program 3 (id=1280): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f0", 0x44}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d0", 0x95}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb519864", 0x67}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83a", 0x5a}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135", 0x21}], 0x5}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @mark={{0x14, 0x1, 0x24, 0x2}}], 0x60}}], 0x2, 0x20000044) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5.657225763s ago: executing program 4 (id=1281): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x28e08a7aa33ba155) mkdirat(0xffffffffffffff9c, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001300)={0x44, 0x1, 0x9, 0x401, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}]}]}, 0x44}}, 0x8000) 4.109005386s ago: executing program 1 (id=1282): r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000040)={0x7, 0x4, 0x248}) 4.024393293s ago: executing program 1 (id=1283): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)="85", 0x1}], 0x1}, 0x200000c0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0xe000, 0x0, 0x77, 0x8, 0x3, 0x7, 0x2, 0x0, 0x6, 0x6}, {0x1000, 0x9000, 0xc, 0xeb, 0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2}, {0xeeee0000, 0x30000, 0x0, 0x3, 0x7, 0xc4, 0x0, 0x1, 0x45, 0x3, 0x0, 0x6}, {0x1, 0x0, 0x9, 0x4, 0x1, 0x0, 0x9, 0x0, 0x3, 0x0, 0x4}, {0x6000, 0xffff1000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x34, 0x7}, {0xffff1000, 0x0, 0x0, 0x78, 0x5, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x5}, {0xeeee8000, 0x1000, 0xa, 0x4, 0x0, 0x0, 0x7, 0x20}, {0x0, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x3}, {0x5000, 0xfffd}, 0xddf8ffdb, 0x0, 0x1, 0x120, 0x0, 0xf801, 0x0, [0x80000001, 0x0, 0x1, 0xfffffffffffffffe]}) 4.006319356s ago: executing program 4 (id=1284): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) socket(0x2, 0x80805, 0x0) r2 = fanotify_init(0x2, 0x1) fanotify_mark(r2, 0x80, 0x8001018, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz1\x00', 0x1ff) openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101800, 0x0) 3.096824546s ago: executing program 4 (id=1285): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = fanotify_init(0x200, 0x0) r6 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r7 = dup(r6) fanotify_mark(r5, 0x1, 0x48000046, r7, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) r9 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000300000000000004000000080002000500000006"], 0x24}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r10, 0x0, 0xc840) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x19, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.800621816s ago: executing program 1 (id=1286): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x28e08a7aa33ba155) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x1c, 0x42, 0x1, 0xffffffff, 0x25dfdbfd, {0x2}, [@nested={0x4, 0x38}, @nested={0x4, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, 0x0, 0x8000) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) 1.529629965s ago: executing program 4 (id=1287): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) ptrace$ARCH_SHSTK_DISABLE(0x1e, r0, 0x3, 0x5002) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000000000/0x1000)=nil, 0x1000, &(0x7f0000000100)='maps\x00') syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0xc0686611, &(0x7f0000000040)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x100, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x3, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x350bae1a, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xd4f, 0x7, 0xf2, 0x10, 0x5, 0x8, 0x10001, 0x401, 0x80000000, 0x2401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0x0, 0x54, 0x80000000, 0x7fff, 0x7, 0x3, 0xa, 0x0, 0x10000, 0x401, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x1, 0xb6, 0x20, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0x80000c74, 0x77, 0x1, 0xff, 0x5cb5, 0xfffffffe, 0x3fd, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x5, 0x1, 0x32, 0x98, 0x7f, 0x0, 0x401, 0x2, 0x2, 0x4680, 0x7, 0xe665, 0x3c6e, 0x3, 0x40, 0x80, 0x4b, 0x8000, 0x2, 0xb, 0x6, 0x4fa4, 0x80000002, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0xfe, 0x4, 0x40, 0x9, 0x1b, 0x1ff, 0x7ff, 0x2, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0x1, 0x3, 0xa0, 0xf, 0x1ff, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0xf1a, 0x664, 0x4, 0x9, 0x9, 0x2, 0x4, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0xf7a, 0xc6, 0x1, 0x4, 0x6, 0xffffffff, 0x6, 0x10001, 0x3042c26b, 0x68, 0x7, 0x1, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffff0000, 0x7, 0x5, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x101, 0x5, 0x63, 0x4, 0x4, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7ffffffb, 0x73, 0x7, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x8, 0x6688, 0x45e3, 0x5, 0x7, 0x1, 0x5, 0x3, 0x0, 0x1, 0x2, 0x2, 0x4, 0xce, 0xf, 0x0, 0x1, 0x667, 0x3, 0x0, 0x9, 0x9, 0x37d, 0x10001, 0xc, 0x1, 0x1, 0x2, 0x6, 0x4, 0x6, 0x1, 0x9, 0x6, 0xfffffffa, 0x2, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80000001, 0x8, 0x8000, 0x3a, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xffff, 0xe, 0x89, 0x2, 0x7, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x2, 0x80000004, 0x29, 0x9, 0x0, 0x80000004, 0x4, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0xfc, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0xbf, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x7, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x5, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x8, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xc, 0x6, 0x7, 0xfffffeff, 0x100, 0x2, 0x7fff, 0x101, 0x7, 0x6, 0x706, 0x2, 0x49, 0xe, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x6, 0x1, 0xa9c, 0x9, 0x9, 0x1, 0x2, 0x5, 0x1000, 0x5, 0x1ff, 0x9, 0x3, 0x3, 0x10001, 0xffff0000, 0xf, 0x1, 0xffffa5ba, 0xffffa9b4, 0xb, 0x4, 0x8000005, 0x3, 0x4b5f, 0x6, 0xa, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0xc8f, 0x1, 0x7, 0x8, 0x0, 0x10000, 0x57dc, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0x5, 0x4, 0xfff, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x7f, 0x5, 0x2, 0x80000000, 0xd, 0x3, 0x1, 0x0, 0x5, 0xb8, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xae6, 0x9, 0xffffa0b0, 0x9, 0x6, 0x2, 0x80, 0x9, 0x1, 0x81, 0x9a, 0x9, 0xb, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x2, 0x20000000, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0x8000001, 0x0, 0xfff, 0x101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xfff, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x6, 0x4b15, 0x10000, 0x1, 0x9, 0x1, 0xd, 0x9, 0x4, 0x9, 0x1, 0x6, 0x0, 0x3, 0x10001, 0x1, 0x7, 0x1, 0x5, 0x8, 0xffffc488, 0x200, 0x10001, 0x37c, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0x10, 0x0, 0x3, 0x4, 0x80000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x9, 0x3, 0xffffffff, 0x0, 0x7f, 0x6, 0x8, 0x40, 0x2, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x2, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x80000001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa958, 0xff, 0x5, 0x2, 0x2, 0x4, 0x10000, 0x80000001, 0x5, 0x1c00, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0xffff, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x9, 0x8, 0x0, 0x5, 0xf, 0x5, 0xe, 0x6, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x9, 0x5, 0xffff8000, 0xe0, 0xfffffffb, 0x85, 0xffffffff, 0x2, 0x7, 0xa05a, 0x0, 0x0, 0x101, 0x35, 0x8, 0x1, 0x1, 0x30, 0xffffff7e, 0x1, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x4000, 0x1, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x43, 0x3, 0x9, 0x5, 0x80000000, 0x9, 0x0, 0x5, 0x81, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x1, 0x9, 0x8, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x9, 0x6, 0x9, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x8000002, 0x1000008, 0x2b, 0x200006, 0x4, 0x1, 0x2, 0xfb4, 0xbf9, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0x3, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x8, 0x3, 0x6, 0x80000000, 0x0, 0x100a, 0x7fffffff, 0x8000, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0x8, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x5, 0x6, 0x1, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xd, 0x3, 0x4, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x6, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0x0, 0x924, 0x6, 0x100, 0x1, 0x5, 0xffff351b, 0x8, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x4, 0x1, 0x4, 0x8, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x10001, 0x1, 0x1, 0xfffffff7, 0x0, 0x5, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x8, 0x5, 0xfffffff7, 0x7, 0x7, 0x5, 0x6330, 0xffffffff, 0x6, 0xea, 0x0, 0xfff, 0x809, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0x7, 0x5, 0x7, 0x2ec, 0x9, 0x6, 0x3ff, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x8, 0x3, 0xe, 0x1, 0x1, 0xc, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0xb, 0xc0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0x65, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xfffffff8, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x8, 0x1, 0xfffffffb, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x40, 0x8, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x7fff, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x7, 0x7ff, 0x0, 0x1, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x7, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x8, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x400, 0x1, 0x8, 0x200, 0xe9ab, 0xfffffff8, 0x8000, 0x7, 0x2, 0x2, 0x43, 0x3ff, 0x8, 0x7, 0x9, 0x1, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]}) 1.518041637s ago: executing program 1 (id=1288): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet_udp(0x2, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) bind$ax25(r3, &(0x7f0000000280)={{0x3, @default, 0x5}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @null]}, 0x48) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f00000000c0)) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) connect$ax25(r3, &(0x7f0000000180)={{0x3, @bcast, 0x5}, [@bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) syz_emit_ethernet(0x80, &(0x7f0000000580)=ANY=[], 0x0) unshare(0x22020400) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) 0s ago: executing program 4 (id=1289): openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x141842, 0x8) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000340)={r1, &(0x7f00000001c0)=')\x00', 0x0, &(0x7f0000000200)={@align=0x3a, {0x101, 0x4, 0x3, 0x26b}}, 0x6, &(0x7f0000000280)={@_ha_fsid}, &(0x7f0000000300)=0x5}) write$UHID_INPUT(r3, &(0x7f00000007c0)={0x8, {"b5d0696f53641c50cc7b57996abe40554ba46194bb6d303191e2c06ae3fbb086e7057a9d245bfb4c7e7368c8558cf7bc7bc5f9daafc48c61660bae47684a50731d1ddccebee5d29dc33a8820101f6e2eb4a8e6d6a46e373181f9b1449da422bb66a8a84e6d1576138fb5fec5d493a8546f48ccd1795a6abfa95ec55b03b6794922aa55b84a8fa342008a7b1e586a79a4769090c036d7469780811825d4e5a968f1e1819a3aed4947ce4df39f806d6cb463137ca2b390b7f95c1f85efdca0004ebb52c56c4e0fa0bb16504b2dcd0a5afda9baad12732234f164b8b299a44bd5c8bc67705d5ef060449400c2f60b0d2edf41fdf0571577493fd5dc3c3c72f0e3517251b2b6bd31a6c531bb5daa7ca6f8ad295657029543a6d39933b734cbf4cdc39a377e1e1b0b39c2ae9076d1e081ff438a973fdedf3d5010ddb857d2663c54d2e1bc9ce38b0ee7574bf7f2764bf1115108b899016d7a2a3271fed252213f1ef37332dc2efe3023f6f0f8efe6d61ad622d1363922439ecd244d8289f96cebfbdc00beb5be6ce383475e3a97d3e39117cb75136741b3e6e3c5f652a4d37a1e17a055215af51abf30c0b31e4d123f2197a55b9eb410161e7f982686de89078634b0c490adee520da5551728043189e16cab5c945c8d401ad27d5f1adc9ab325f519e02166a9c7a0baa921ac019e52def9ef2df54bd5c4c2ac926cd51499dad20d36124b636cfbceaca599491e4cc9706a621a3c4664f0e009630df66f1ced59bd9eb9759639f6a6016fe69beb93e00b551fd55d9aca9c7670656edd17c4a9cd755dcbbe684e793875bd350aa0adbb7bbad2f2eba56f4432828cd28fbc992cedc6c7217227ed668acbf6adc9983d1162956a97d5c6979c2e61b4d8b063d3e286a0bd274cd35d7e3feb4b98b54bdf8664a877a1f9986583f845ea530d82ff1d330534e852e126278684a7ff7e72b5f2e94dcc493cf7ff6351f0b2ba6563eab662dcfd4d04ed21258c320e4e244bb21cafdaa4f990622748bdcd4eb3dc8308e8032b8e55b24ca71ce35dd308db3935042dc96ba971e29d810e373b2a3ad2d584fb47ebd0af8f86c30d0a7ae060759406468670498fed16fcb2c809c41f38faecc9be25b5e0a89574919c20b458233d264857675866880a5b2a976527993490deb6d4118746baf8bafdbb056530d322d2d8adb65bbb167dc6c3784b9a7247129e9fcc2c23a5a163a1ebf8b44830393940249bf01e7874bd310c5d642a65fe6331df2530a115f3e2a3d5f110454e814354e1ca2b55662ab29ace4fc804f087b11bda3689333ddd24736b4f90e24584cdf12f840eec82534fa051b8f5a5d2d194f511dcc1fe256af6308648e0abaa4b3a058c84ad33862631bff2b17f91d71db79e188cdb62af4fce0bcc042b884bb0679affcea0a2bcf3008e00a95325acaeb3541ccd1e8c0466fc5cb1cfeb5a784c11f61ba0a38984bfa5a442a63001bfe97c1a3bf74a01f67d4024a108df31c951c2db58741bba126de9af460efb3a91f2d7621c623889bf104faa15d3b9122838876fd8a50106d31c7fba668f28db7ac9aef4df0ebf01be27124c73681295b8be10820901e7696a099143aa4e05aab84d2792fec35465b4b26b63327b44ff16f8de6f87fffb8e3bdf9059143a60ee5c132b10ca3e95eabdb5a4ea108c85d3a49e432cd5ad2875d9ad2157f6f822209edeb0bbb7f6a680146fb9da6b4866be3e10e3f68b7b7396c5bd0625913b21910e7d2dc1a54aabfa07e4a570ab3e4a35dcb7a31b468f2dd4fb14d3c750b757380b4bcd9a9f34b7f283e31b8612a8a8d19862a19ca1e8165a8403ca4e4c648951bd630274d219eea777a6e532d750f4544c71062cf5dff0db631dc6fdf1f0bbbcb5d239c506e7cace07b98acd0c1a17d673c6f7042b870ba96b5c915de251fef3e4febc83b7c376b09659df8dc4e17088500ed0f57a50574fefd524c4147c2d31ceb2abd9412fb7c812007d23e0ca035ecdf57470ea651bbbedbe0d95fb98a3dd34a7d7954399864148349a8d151aa091c17ee603be819a51003b7c67635c26f81ab73ce2f902d1cd163c4e0d4fab40535ad71fd456a7141ff5d1a1c537d072ccbda141c21bbb1d8989a860db17a2806f1352d20f8bd19f1224b97f74c073423abc8dd37d52d0c36bb11f883e17e1999cbcd83cfc1fad213945d3836c3f084e7ba32c57b37862e73cc57b3351972d0f339df7688ff8804d75cea866d7e456e1cc7104101eb8d0419f2b322893021d78076c1c6c3993a78987c208478a76603fc385271a13d24a14101068b8432ccdab7640f6f5d8245a4dfb703cfe2233f5e22f71cd290becc5514ecd30fac6cdf4adf782908e034e5de9ca35fbafc432db059450a55890d222efdbcb3d692369b4abcc16bc16b03a459f595dc8ef001d3df51a5b6f73c6127e8358791388efd075f1deb62a3a46e4e16c3bd7a880f95c5555f8a0816a1d97ab0dc9d16034d4417cd089c49c11c9c117495969190174167790dd833e629c4e20bb5dc8c9a490004547e7d900baa82a7a459d18d3767f363a01387b6d94f3f2c52e36a9ffadefb5a6c78c8b8622e22eecf9acf9cba0c58cb8be1db1cbb80edaa47a5459731811162e8bbe83152057ade5a53cb3fefa794a595584523ab60c6e4b9a0d6add8e5a331f32d82526c3bcfbe8a49814dab705a7b61e68da436bc8f11201c5a1556ed57228492ea177f91febdda1b56c932eebb688b162cabc5595eb182cf083c0c8bcde49b2795b48a98317decc5b375c9b4b7467a88fcad33fcd73b1f636b33d55b4e18dc646292b65ee166acd722e9dd89c6bfea6bf9061047c759ca97e3b54cc60c35fb323ee14f25583b367fa88def52f6ce45a05309c3155624858928d03a7168eb709515b6942211de872bc99453107ec263d619e16e3b3abfc485cd967e0c62a778d5b109a42eb9b07e423074ac5e5c02872842dcd493e9e4b75835559a7b8670d28d26f83da44df7ab79f0dd9e8d9855869484b569372277050575c3c3c115be4f6125d8e36d6ba9084e0e1ee4ace62819ad5047dd93c1fe2246a14472c4e32b6e9bb6042d264493e88d06d082d532c54f4bb32b196b1f02d7ccce7952730082f901d7e37f5e93c75a0eef8cb4b3f1d1e0d37a0765b7bcd2ceedcc4f09fc8191fdee886c0ab6327c1ac6672b15f88a9c3bd3713533751b368b89aa32863a59119f629501f6552d95e66df79eb19fe3cc9f404c846a5c577728f3237f2015ee417b070c1464c6c9a01a1b65b7c03c45484d264c1cf2f559fa041ebcf2134017dde04f48cd95cc89417371f055a603c1b7f702edd7bb8da97a8d1b6833c1e066190b137203f960a55e8a5df9d57cebe2ff8eaab11d21f29659bd78069b269e81ecc40434906ffbeec6d0d692ad2bb734b5d1c717ff182299be8c62ddf8edeff74290d265c275f0828188f1e35b40db807f1d49a871950ad08c493e24486194382b81278d052094396956a30cbe10e718a5eb3e25835436334d6830acc87267e5e4ff6325e6432576472c503b77cf5467e3888b82bf1889d7629864ebce187d2b1f3f15eaf0c72222f551d242ed1141a2e427cc0e5a5b4516b054fea9f42a8f847ef424f4c72cabca444cdc68fd23d76c68ca77b430114c01d903855f3b031e4521acafb9027bd46bf6c137089a7bea0ff239e95559155d1643e957374d1bb249ccea35e43d0d03b8efea25a94796c8bebbc95e2d35194f852ae7b32e2446e5c753949461554f33c12d75871c59aba560f5c2ede592cb9abba35c9e7d00b98e5ead9b82c0cc1dd1d31800bce77a4749e27e6ad3bf4a566fe549e9ce577dd6c75c62fc3441d615e3027c064a1bb2c5f9e9ceb015ecf63c530b4e7ecc66d08f36a55807110718e0bfdf3b9b664f8165688fff924fbb038a0513a89dcd94ae3cb28fd68f4e9fafe55d1dcfef9f456e934b327a5ae241046be634fac2205b955021d49be60fbf7da8ff1c60bf447b6ea82c5175426e2c5a7ed97e8932092b72f9b5796a5752e3bef643c81c9f7aa065339daa80f52de4ec87971ae7706b699ec4d4fbaf64deeb5bae42e30ca1d0f5f8ecff7ed90d26ba4e89548ae1d31da4c96d850a39b2d56281fbe2efaf464d6afe608c2e1479d0b1545a992dd53c22892f99c37341451bbb8b5f54ec2f254ce413148b4655a0896a7c49c74c502368e0a96aad62ed91dcd7b8aafbce6f97e393c459c9c6db0dad5173d8bc3cbff40cd5324147e6bdc2f4a64cf22b19dc2511799287b3fc772f2f101f3b8a7e5bae696f3d716cab10d1f81231041c96acaa7128e589bd219d2037b034bac5e956fe13d7b6f2db66c3a1e7f77198955f8b9dcede7c8c68c7bfca0b8313b3ec4c74a16c0cfdc69e0140e878547f8ff520aad96d70ead76198f1e5da120c48cdb650818b38c8d26eacd9a6e02ebc1eba8c7cc9c3488ad077b9236b63294690c4f347fb5bd52088616e630e01fde6ea53a8c7ce4c0ad8a0c9edd4b1770583ddfdbbf32495886e0cb5bddab432e33d38b68fff0c44bcf509a9c5bd2a9a64c0d86598d5865c9a0fc55e48308b94b6678002a72685ccb0776229692c4bbf01f0f83026a612c617daba212d6b7f7f0290a7a9d9a237005680e7b23db9abb88771e7adce767a92123320d6619809fffb3df10e927f1885e3a67753eb15f491426890e956806af1ff0fbcd6201dd1620dd617bd31ff9109c69da0ec9a26d99ede33c4a3d3ce58049f5da321c0dec0c11473c38327d7eae0fd6256469d9390937bee74a39dce787e1bad9d57381830858a0759668da5ffd6e9dc0414d907cbe7e48a9243b54e9d1568a8aca5039f232ad0d245ad25b28c76ba8d4cd9e6a0d13a5c7cc068ecdac0e9bf048e1a24452795260bd7961a5b7dd50acbfbb736a2f8a92f7ac4539e006a75d381ca05492a8c05e61303cb624ab68c5576ff4437556745e34fcc0ae47a442a861dfc7c531bf1be410dd3e7ef7cf37db47866d845a74c30d35d29d57f15d4b03ff0445af372c55733d6c6d3dce3c36eb536be673c1211646c44f53d6ec5e8093f5e53da417ce2cc49ed645f58fe640ec658c973a13dcb32d5e682447d35fc764c17e597aa6d1b7febd05eee7ff8efd1972711afa8effdd0e04ffe41eec6414a2e6edef1576f9ba2c47ffb1b40383f9153956abef4584fe0ba34cd42cd8bb9d78ddca77ad88affb3698d2fe1df531d6b81f5016454cd9ab63e94ce8221d71e8964712b5e2acf2935a9dc61e113c63841c48666270c1a1f49917ec98de6abd6a69ded3aa880dd8327554e2540c067c3b300a3f98338b48db54c86d807036da69bbcdde86db73557552ccd9364d2b2b65f0336e7ea51048307321f0b9feb14028bebc13e14b309da2f6e1c03b9d48b5a91b549aa0a182e1d3a180c4c6fa963405d6e8a950697b7a6c7dbfc479c63e49298709177bd068d2bf4cd322d8b056bb47bd97079f6ef20accdc38d805bf6a44652f723ca2341461592f1c37e1d54fa9b0204b80d7337a2dff90ed15e90c1075c34f0a5b2ba174bf0de1b6569519bbb3a3ea1006b9accd5ca5db6d1f20f326e8580753ec94191a219dde72e2103b03757bcc93526d243259ebf29f217e66a1cc80bfbbab7b8f1cb6295141e7fffaf8c3443ff51edae3f4c9fa940fad55733e682b082a1f203b05cc577b1f791da8f5d7d3c5bad490d126bdf6e8782340db99fd4511909b7cf0e886fb3c1fd36804fa39c655391410c2f88a9b90309a515eb58e90d57e77864b7bba3099a226fa1ba3ef12", 0x1000}}, 0x1006) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x14, r6, 0x1, 0x0, 0xffffffff, {0x54}}, 0x14}}, 0x0) close(0x3) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x1d, &(0x7f0000000000)=0x7fffffff, 0x4) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, 0x0, 0x0) ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f0000000140)) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0xffffffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3e}, 0x1c) r8 = fanotify_init(0xf00, 0x80000) fanotify_mark(r8, 0x2, 0x5000001b, r0, 0x0) kernel console output (not intermixed with test programs): ntered promiscuous mode [ 77.616688][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.616954][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.617170][ T5831] bridge_slave_0: entered allmulticast mode [ 77.619924][ T5831] bridge_slave_0: entered promiscuous mode [ 77.628988][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.629226][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.629429][ T5827] bridge_slave_0: entered allmulticast mode [ 77.633746][ T5827] bridge_slave_0: entered promiscuous mode [ 77.639913][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.640186][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.646692][ T5835] bridge_slave_1: entered allmulticast mode [ 77.649658][ T5835] bridge_slave_1: entered promiscuous mode [ 77.705814][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.706388][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.706643][ T5831] bridge_slave_1: entered allmulticast mode [ 77.709945][ T5831] bridge_slave_1: entered promiscuous mode [ 77.712312][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.712556][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.712777][ T5827] bridge_slave_1: entered allmulticast mode [ 77.716255][ T5827] bridge_slave_1: entered promiscuous mode [ 77.744834][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.745099][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.745668][ T5833] bridge_slave_0: entered allmulticast mode [ 77.748606][ T5833] bridge_slave_0: entered promiscuous mode [ 77.785527][ T5834] Bluetooth: hci0: command tx timeout [ 77.824433][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.824799][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.825015][ T5833] bridge_slave_1: entered allmulticast mode [ 77.826723][ T5833] bridge_slave_1: entered promiscuous mode [ 77.831834][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.881293][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.901232][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.907605][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.954180][ T5834] Bluetooth: hci3: command tx timeout [ 78.009162][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.012301][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.024268][ T5834] Bluetooth: hci2: command tx timeout [ 78.024284][ T5146] Bluetooth: hci4: command tx timeout [ 78.024410][ T5834] Bluetooth: hci1: command tx timeout [ 78.078885][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.083482][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.108879][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.171285][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.173742][ T5829] team0: Port device team_slave_0 added [ 78.211689][ T5835] team0: Port device team_slave_0 added [ 78.228856][ T5829] team0: Port device team_slave_1 added [ 78.231187][ T5831] team0: Port device team_slave_0 added [ 78.233819][ T5827] team0: Port device team_slave_0 added [ 78.237838][ T5835] team0: Port device team_slave_1 added [ 78.272580][ T5831] team0: Port device team_slave_1 added [ 78.289394][ T5827] team0: Port device team_slave_1 added [ 78.291671][ T5833] team0: Port device team_slave_0 added [ 78.356215][ T5833] team0: Port device team_slave_1 added [ 78.357707][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.357717][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.357730][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.413165][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.413180][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.413202][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.460884][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.460894][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.460908][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.462199][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.462208][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.462220][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.474253][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.474268][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.474292][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.476735][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.476748][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.476769][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.527413][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.527429][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.527452][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.549044][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.549060][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.549082][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.551509][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.551538][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.551561][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.595350][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.595366][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.595389][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.781009][ T5829] hsr_slave_0: entered promiscuous mode [ 78.783045][ T5829] hsr_slave_1: entered promiscuous mode [ 78.824915][ T5835] hsr_slave_0: entered promiscuous mode [ 78.826782][ T5835] hsr_slave_1: entered promiscuous mode [ 78.828793][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 78.828906][ T5835] Cannot create hsr debugfs directory [ 78.873395][ T5831] hsr_slave_0: entered promiscuous mode [ 78.879733][ T5831] hsr_slave_1: entered promiscuous mode [ 78.880737][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 78.880759][ T5831] Cannot create hsr debugfs directory [ 78.895752][ T5827] hsr_slave_0: entered promiscuous mode [ 78.898060][ T5827] hsr_slave_1: entered promiscuous mode [ 78.899620][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 78.899642][ T5827] Cannot create hsr debugfs directory [ 78.935151][ T5833] hsr_slave_0: entered promiscuous mode [ 78.936301][ T5833] hsr_slave_1: entered promiscuous mode [ 78.937198][ T5833] debugfs: 'hsr0' already exists in 'hsr' [ 78.937219][ T5833] Cannot create hsr debugfs directory [ 79.865285][ T5839] Bluetooth: hci0: command tx timeout [ 80.024071][ T5839] Bluetooth: hci3: command tx timeout [ 80.104064][ T5839] Bluetooth: hci1: command tx timeout [ 80.106326][ T5839] Bluetooth: hci4: command tx timeout [ 80.106349][ T5839] Bluetooth: hci2: command tx timeout [ 80.246688][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.291541][ T5829] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.298201][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.332560][ T5829] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.339952][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.368518][ T5829] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.396537][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.429422][ T5829] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.552046][ T5835] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.596196][ T5835] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.598250][ T5835] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.640856][ T5835] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.643380][ T5835] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.680322][ T5835] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.710932][ T5835] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.748629][ T5835] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.889245][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.927760][ T5831] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.935372][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.970142][ T5831] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.981382][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.010961][ T5831] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.053381][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.088266][ T5831] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.227186][ T5833] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.269324][ T5833] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.286221][ T5833] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.317873][ T5833] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.326073][ T5833] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.359491][ T5833] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.390179][ T5833] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.422970][ T5833] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.537697][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.620978][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.651290][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.669363][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.698593][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.703003][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.750544][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.753686][ T886] cfg80211: failed to load regulatory.db [ 81.800529][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.849683][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.934237][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.946004][ T5834] Bluetooth: hci0: command tx timeout [ 82.031590][ T1022] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.031998][ T1022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.050757][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.085763][ T1022] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.085906][ T1022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.104505][ T5834] Bluetooth: hci3: command tx timeout [ 82.181109][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.194091][ T5834] Bluetooth: hci2: command tx timeout [ 82.194123][ T5834] Bluetooth: hci4: command tx timeout [ 82.194142][ T5834] Bluetooth: hci1: command tx timeout [ 82.231339][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.260753][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.260975][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.338376][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.338512][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.411388][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.441574][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.458261][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.458394][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.521881][ T1508] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.522042][ T1508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.658448][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.737664][ T1508] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.737889][ T1508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.774590][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.805355][ T1491] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.805459][ T1491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.973379][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.025607][ T1022] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.025793][ T1022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.081179][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.081278][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.089062][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.250333][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.502477][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.551673][ T5829] veth0_vlan: entered promiscuous mode [ 83.639973][ T5829] veth1_vlan: entered promiscuous mode [ 83.679371][ T5835] veth0_vlan: entered promiscuous mode [ 83.729182][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.757046][ T5835] veth1_vlan: entered promiscuous mode [ 83.850103][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.880238][ T5831] veth0_vlan: entered promiscuous mode [ 83.921260][ T5829] veth0_macvtap: entered promiscuous mode [ 83.989752][ T5829] veth1_macvtap: entered promiscuous mode [ 84.009714][ T5831] veth1_vlan: entered promiscuous mode [ 84.024612][ T5839] Bluetooth: hci0: command tx timeout [ 84.061213][ T5835] veth0_macvtap: entered promiscuous mode [ 84.095387][ T5835] veth1_macvtap: entered promiscuous mode [ 84.117511][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.155904][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.184581][ T5839] Bluetooth: hci3: command tx timeout [ 84.211469][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.237353][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.239498][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.262816][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.265363][ T5834] Bluetooth: hci4: command tx timeout [ 84.265388][ T5146] Bluetooth: hci2: command tx timeout [ 84.265408][ T5839] Bluetooth: hci1: command tx timeout [ 84.271167][ T5827] veth0_vlan: entered promiscuous mode [ 84.275099][ T5831] veth0_macvtap: entered promiscuous mode [ 84.297499][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.309775][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.385414][ T5831] veth1_macvtap: entered promiscuous mode [ 84.410900][ T5833] veth0_vlan: entered promiscuous mode [ 84.419672][ T1022] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.473342][ T1022] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.497050][ T5827] veth1_vlan: entered promiscuous mode [ 84.525339][ T1022] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.532541][ T1022] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.701245][ T5833] veth1_vlan: entered promiscuous mode [ 84.729778][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.871163][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.991088][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.991105][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.084891][ T150] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.110999][ T150] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.140007][ T150] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.158476][ T150] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.191953][ T1508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.191969][ T1508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.237007][ T5827] veth0_macvtap: entered promiscuous mode [ 85.353444][ T5827] veth1_macvtap: entered promiscuous mode [ 85.363618][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.363634][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.371725][ T5833] veth0_macvtap: entered promiscuous mode [ 85.528335][ T5833] veth1_macvtap: entered promiscuous mode [ 85.679467][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.748790][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.748809][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.819938][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.968749][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.323374][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.907531][ T1445] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.907550][ T1445] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.990199][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.004921][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.007206][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.011303][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.052223][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.069248][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.074720][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.108337][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.513774][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.513793][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.064631][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.064651][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.681975][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.681994][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.449806][ T5984] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 92.449875][ T5984] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 92.449960][ T5984] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 92.603930][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 92.610517][ T1508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.610536][ T1508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.626060][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.626078][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.856260][ T5994] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.082603][ T5994] bridge_slave_0 (unregistering): left allmulticast mode [ 94.082620][ T5994] bridge_slave_0 (unregistering): left promiscuous mode [ 94.082681][ T5994] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.742788][ T6000] process 'syz.3.14' launched './file0' with NULL argv: empty string added [ 103.646749][ T6055] netlink: 'syz.4.22': attribute type 3 has an invalid length. [ 103.646839][ T6055] netlink: 16 bytes leftover after parsing attributes in process `syz.4.22'. [ 105.420422][ T6063] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 105.420466][ T6063] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 105.420484][ T6063] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 105.497824][ T37] audit: type=1800 audit(1776414238.817:2): pid=6063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.26" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 108.659631][ T6096] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 110.874017][ T6113] netlink: 'syz.0.40': attribute type 3 has an invalid length. [ 110.874037][ T6113] netlink: 16 bytes leftover after parsing attributes in process `syz.0.40'. [ 112.082617][ T6116] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 112.082656][ T6116] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 112.082674][ T6116] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 112.087569][ T37] audit: type=1800 audit(1776414245.477:3): pid=6116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.39" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 112.330668][ T6125] tmpfs: Bad value for 'uid' [ 112.330686][ T6125] tmpfs: Bad value for 'uid' [ 116.209724][ T6164] netlink: 'syz.3.53': attribute type 3 has an invalid length. [ 116.209744][ T6164] netlink: 16 bytes leftover after parsing attributes in process `syz.3.53'. [ 117.041813][ T6166] syz.4.52 (6166) used greatest stack depth: 16288 bytes left [ 120.505506][ T5146] Bluetooth: hci0: command 0x206a tx timeout [ 120.505731][ T5839] Bluetooth: hci0: Opcode 0x206a failed: -110 [ 122.348510][ T6212] netlink: 'syz.0.67': attribute type 3 has an invalid length. [ 122.348523][ T6212] netlink: 16 bytes leftover after parsing attributes in process `syz.0.67'. [ 123.638773][ T6228] capability: warning: `syz.2.69' uses 32-bit capabilities (legacy support in use) [ 127.338774][ T6239] Device name cannot be null; rc = [-22] [ 127.374517][ T5839] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 128.285342][ T5839] Bluetooth: hci1: command 0x206a tx timeout [ 129.121536][ T6255] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 129.121575][ T6255] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 129.121593][ T6255] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 133.713908][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 133.733910][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 133.743914][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 133.753928][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 133.763919][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 133.773921][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 133.783918][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 133.789903][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.790023][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.894726][ T6291] netlink: 36 bytes leftover after parsing attributes in process `syz.4.89'. [ 136.923922][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 137.817907][ T5146] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 137.903922][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 137.906204][ T5146] Bluetooth: hci1: command 0x206a tx timeout [ 141.114263][ T6327] warning: `syz.4.100' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 141.294232][ T6331] netlink: 'syz.2.104': attribute type 3 has an invalid length. [ 141.294253][ T6331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.104'. [ 146.101950][ T6359] PKCS8: Unsupported PKCS#8 version [ 148.883070][ T6378] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.002948][ T6378] bridge_slave_0 (unregistering): left allmulticast mode [ 149.002964][ T6378] bridge_slave_0 (unregistering): left promiscuous mode [ 149.003032][ T6378] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.487351][ T6392] libceph: resolve '0..' (ret=-3): failed [ 152.628349][ T6414] Device name cannot be null; rc = [-22] [ 161.363700][ T6455] loop9: detected capacity change from 0 to 7 [ 161.450199][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 161.450317][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 161.605401][ T6468] Device name cannot be null; rc = [-22] [ 161.683780][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 161.683812][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 161.684666][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 161.684690][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 161.688537][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 161.688562][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 161.860141][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 161.860172][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 161.860335][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 161.860357][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 161.861062][ T6455] ldm_validate_partition_table(): Disk read failed. [ 161.861078][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 161.861100][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 161.861206][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 161.861228][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 161.861323][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 161.861343][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 161.861437][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 161.861459][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 161.861543][ T6455] Dev loop9: unable to read RDB block 0 [ 161.862713][ T6455] loop9: unable to read partition table [ 161.862934][ T6455] loop9: partition table beyond EOD, truncated [ 161.862981][ T6455] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 162.214126][ T6479] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.302783][ T6479] bridge_slave_0 (unregistering): left allmulticast mode [ 162.302808][ T6479] bridge_slave_0 (unregistering): left promiscuous mode [ 162.302902][ T6479] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.678734][ T6500] Zero length message leads to an empty skb [ 166.223260][ T5158] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 171.605450][ T6564] can0: slcan on ttyS3. [ 172.911105][ T6559] can0 (unregistered): slcan off ttyS3. [ 174.375823][ T6581] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.474659][ T6581] bridge_slave_0 (unregistering): left allmulticast mode [ 174.474685][ T6581] bridge_slave_0 (unregistering): left promiscuous mode [ 174.474787][ T6581] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.567083][ T5920] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 179.658450][ T6646] can0: slcan on ttyS3. [ 179.908721][ T5920] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.908777][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.908801][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.908839][ T5920] usb 1-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 179.908870][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.654833][ T6643] can0 (unregistered): slcan off ttyS3. [ 180.768923][ T5920] usb 1-1: config 0 descriptor?? [ 181.163026][ T6665] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.406690][ T6665] bridge_slave_0 (unregistering): left allmulticast mode [ 181.406716][ T6665] bridge_slave_0 (unregistering): left promiscuous mode [ 181.406818][ T6665] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.610136][ T5920] usbhid 1-1:0.0: can't add hid device: -71 [ 181.610233][ T5920] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 181.933812][ T5920] usb 1-1: USB disconnect, device number 3 [ 184.683183][ T6706] can0: slcan on ttyS3. [ 185.285965][ T6699] can0 (unregistered): slcan off ttyS3. [ 185.773194][ T6722] tmpfs: Bad value for 'uid' [ 185.773211][ T6722] tmpfs: Bad value for 'uid' [ 188.182667][ T6760] Bluetooth: MGMT ver 1.23 [ 190.392304][ T6791] tmpfs: Bad value for 'uid' [ 190.392322][ T6791] tmpfs: Bad value for 'uid' [ 193.330278][ T49] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 194.104568][ T49] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.104618][ T49] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.104641][ T49] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.104674][ T49] usb 2-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 194.104695][ T49] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.230558][ T49] usb 2-1: config 0 descriptor?? [ 194.373920][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.384538][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.650309][ T6828] tmpfs: Bad value for 'uid' [ 195.650328][ T6828] tmpfs: Bad value for 'uid' [ 196.608502][ T49] usbhid 2-1:0.0: can't add hid device: -71 [ 196.631334][ T49] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 196.671915][ T49] usb 2-1: USB disconnect, device number 2 [ 199.011398][ T6860] libceph: resolve '0..' (ret=-3): failed [ 201.402122][ T6878] tmpfs: Bad value for 'uid' [ 201.402140][ T6878] tmpfs: Bad value for 'uid' [ 201.642122][ T5830] Bluetooth: hci3: command 0x0406 tx timeout [ 201.642160][ T5830] Bluetooth: hci2: command 0x0406 tx timeout [ 201.642185][ T5830] Bluetooth: hci0: command 0x206a tx timeout [ 201.642217][ T5830] Bluetooth: hci1: command 0x206a tx timeout [ 207.368933][ T6935] netlink: 20 bytes leftover after parsing attributes in process `syz.2.253'. [ 212.679238][ T6964] ======================================================= [ 212.679238][ T6964] WARNING: The mand mount option has been deprecated and [ 212.679238][ T6964] and is ignored by this kernel. Remove the mand [ 212.679238][ T6964] option from the mount to silence this warning. [ 212.679238][ T6964] ======================================================= [ 213.631270][ T6974] netlink: 28 bytes leftover after parsing attributes in process `syz.4.267'. [ 217.395460][ T5905] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 217.395604][ T886] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 217.566899][ T886] usb 5-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 217.566924][ T886] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.566941][ T886] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 129 [ 217.568929][ T5905] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.568984][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.568999][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.569019][ T5905] usb 1-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 217.569030][ T5905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.572172][ T886] usb 5-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 217.572196][ T886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.572207][ T886] usb 5-1: Product: syz [ 217.572214][ T886] usb 5-1: Manufacturer: syz [ 217.572222][ T886] usb 5-1: SerialNumber: syz [ 217.740889][ T886] usb 5-1: config 0 descriptor?? [ 217.838386][ T5905] usb 1-1: config 0 descriptor?? [ 218.471099][ T5905] usbhid 1-1:0.0: can't add hid device: -71 [ 218.471204][ T5905] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 218.577767][ T5905] usb 1-1: USB disconnect, device number 4 [ 218.993517][ T7017] netlink: 28 bytes leftover after parsing attributes in process `syz.1.281'. [ 221.233299][ T5816] usb 5-1: USB disconnect, device number 2 [ 223.242589][ T7051] blktrace: Concurrent blktraces are not allowed on loop4 [ 223.610950][ T7053] netlink: 28 bytes leftover after parsing attributes in process `syz.4.294'. [ 225.194165][ T5962] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 226.229591][ T5962] usb 3-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 226.229618][ T5962] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.229635][ T5962] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 129 [ 226.232089][ T5962] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 226.232114][ T5962] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.232133][ T5962] usb 3-1: Product: syz [ 226.232145][ T5962] usb 3-1: Manufacturer: syz [ 226.232154][ T5962] usb 3-1: SerialNumber: syz [ 226.294845][ T5962] usb 3-1: config 0 descriptor?? [ 226.770939][ T7080] binder: 7079:7080 ioctl c0306201 200000000080 returned -14 [ 226.810814][ T7080] binder: BINDER_SET_CONTEXT_MGR already set [ 226.810823][ T7080] binder: 7079:7080 ioctl 4018620d 200000000040 returned -16 [ 226.811628][ T7080] binder: 7079:7080 ioctl c0306201 2000000003c0 returned -14 [ 227.057892][ T7084] netlink: 84 bytes leftover after parsing attributes in process `syz.4.306'. [ 227.060696][ T7084] netlink: 84 bytes leftover after parsing attributes in process `syz.4.306'. [ 227.344607][ T7094] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 227.634734][ T7102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.312'. [ 228.597099][ T7105] infiniband syz2: set active [ 228.597219][ T7105] infiniband syz2: added bridge_slave_1 [ 228.604386][ T7105] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 228.608001][ T7105] infiniband syz2: Couldn't open port 1 [ 228.608240][ T7105] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 228.608257][ T7105] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 228.608276][ T7105] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 228.692117][ T49] usb 3-1: USB disconnect, device number 2 [ 228.707897][ T7105] RDS/IB: syz2: added [ 228.708317][ T7105] smc: adding ib device syz2 with port count 1 [ 228.708713][ T7105] smc: ib device syz2 port 1 has no pnetid [ 229.705163][ T7115] binder: 7114:7115 ioctl c0306201 200000000080 returned -14 [ 229.722868][ T7115] binder: 7114:7115 ioctl c0306201 2000000003c0 returned -14 [ 230.010317][ T7112] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 230.010339][ T7112] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 230.010350][ T7112] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 230.183343][ T7125] netlink: 84 bytes leftover after parsing attributes in process `syz.0.320'. [ 230.189728][ T7125] netlink: 84 bytes leftover after parsing attributes in process `syz.0.320'. [ 230.706999][ T7132] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 231.311929][ T7144] blktrace: Concurrent blktraces are not allowed on loop4 [ 231.524490][ T7146] netlink: 8 bytes leftover after parsing attributes in process `syz.4.326'. [ 231.934756][ T7153] binder: 7150:7153 ioctl c0306201 200000000080 returned -14 [ 231.948879][ T7153] binder: 7150:7153 ioctl c0306201 2000000003c0 returned -14 [ 232.215623][ T7155] syz2: rxe_newlink: already configured on bridge_slave_1 [ 233.966107][ T7166] netlink: 84 bytes leftover after parsing attributes in process `syz.1.331'. [ 233.967067][ T7166] netlink: 84 bytes leftover after parsing attributes in process `syz.1.331'. [ 234.024186][ T5921] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 234.176346][ T5921] usb 3-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 234.176372][ T5921] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.176390][ T5921] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 129 [ 234.181319][ T5921] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 234.181344][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.181363][ T5921] usb 3-1: Product: syz [ 234.181376][ T5921] usb 3-1: Manufacturer: syz [ 234.181389][ T5921] usb 3-1: SerialNumber: syz [ 234.279144][ T5921] usb 3-1: config 0 descriptor?? [ 235.122828][ T7179] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 235.165689][ T7182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.338'. [ 235.779490][ T7194] blktrace: Concurrent blktraces are not allowed on loop4 [ 236.904956][ T7197] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 237.209084][ T49] usb 3-1: USB disconnect, device number 3 [ 237.350873][ T7205] netlink: 84 bytes leftover after parsing attributes in process `syz.3.343'. [ 237.366279][ T7205] netlink: 84 bytes leftover after parsing attributes in process `syz.3.343'. [ 237.381763][ T7207] binder: 7206:7207 ioctl c0306201 200000000080 returned -14 [ 237.414073][ T7207] binder: 7206:7207 ioctl c0306201 2000000003c0 returned -14 [ 239.591171][ T7231] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 240.946110][ T7239] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 241.380739][ T7253] binder: 7252:7253 ioctl c0306201 200000000080 returned -14 [ 241.396179][ T7253] binder: 7252:7253 ioctl c0306201 2000000003c0 returned -14 [ 241.683977][ T5816] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 242.850600][ T5816] usb 3-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 242.850627][ T5816] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 129 [ 242.875624][ T5816] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 242.875652][ T5816] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.875671][ T5816] usb 3-1: Product: syz [ 242.875684][ T5816] usb 3-1: Manufacturer: syz [ 242.875697][ T5816] usb 3-1: SerialNumber: syz [ 243.020748][ T5816] usb 3-1: config 0 descriptor?? [ 244.481298][ T5905] usb 3-1: USB disconnect, device number 4 [ 245.679910][ T7281] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 246.321615][ T7293] syz2: rxe_newlink: already configured on bridge_slave_1 [ 248.080593][ T7301] blktrace: Concurrent blktraces are not allowed on loop4 [ 248.456393][ T32] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 248.637488][ T32] usb 1-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 248.637513][ T32] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 129 [ 248.640030][ T32] usb 1-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 248.640054][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.640073][ T32] usb 1-1: Product: syz [ 248.640086][ T32] usb 1-1: Manufacturer: syz [ 248.640099][ T32] usb 1-1: SerialNumber: syz [ 248.744447][ T32] usb 1-1: config 0 descriptor?? [ 250.149193][ T7322] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 251.329872][ T5816] usb 1-1: USB disconnect, device number 5 [ 254.524031][ T7362] netlink: 32 bytes leftover after parsing attributes in process `syz.2.386'. [ 254.860875][ T7368] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 256.417151][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.417243][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.556363][ T7405] blktrace: Concurrent blktraces are not allowed on loop4 [ 263.613617][ T7442] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 263.613650][ T7442] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 263.613660][ T7442] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 265.771724][ T7461] netlink: 32 bytes leftover after parsing attributes in process `syz.2.417'. [ 268.831644][ T7480] blktrace: Concurrent blktraces are not allowed on loop4 [ 270.784596][ T7496] Device name cannot be null; rc = [-22] [ 274.424834][ T7528] tmpfs: Bad value for 'uid' [ 274.424851][ T7528] tmpfs: Bad value for 'uid' [ 274.675008][ T7531] Device name cannot be null; rc = [-22] [ 279.648122][ T7577] netlink: 32 bytes leftover after parsing attributes in process `syz.3.451'. [ 283.691998][ T7608] tmpfs: Bad value for 'uid' [ 283.692015][ T7608] tmpfs: Bad value for 'uid' [ 284.573916][ T60] Bluetooth: hci4: link tx timeout [ 284.578890][ T60] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 284.585009][ T60] Bluetooth: hci4: link tx timeout [ 284.585026][ T60] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 286.668343][ T5146] Bluetooth: hci4: command 0x0406 tx timeout [ 289.920882][ T5146] Bluetooth: hci4: command 0x0406 tx timeout [ 290.245850][ T7670] tmpfs: Bad value for 'uid' [ 290.245868][ T7670] tmpfs: Bad value for 'uid' [ 292.143578][ T7689] netlink: 32 bytes leftover after parsing attributes in process `syz.2.479'. [ 296.044647][ T7715] tmpfs: Bad value for 'uid' [ 296.044665][ T7715] tmpfs: Bad value for 'uid' [ 301.516472][ T7757] Device name cannot be null; rc = [-22] [ 302.977930][ T7753] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 302.977952][ T7753] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 302.977962][ T7753] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 303.021318][ T7762] tmpfs: Bad value for 'uid' [ 303.021333][ T7762] tmpfs: Bad value for 'uid' [ 307.506773][ T5816] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 307.720706][ T5816] usb 2-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 307.720732][ T5816] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 307.743479][ T5816] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 307.743518][ T5816] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.743576][ T5816] usb 2-1: Product: syz [ 307.743623][ T5816] usb 2-1: Manufacturer: syz [ 307.743638][ T5816] usb 2-1: SerialNumber: syz [ 309.332577][ T5816] usb 2-1: config 0 descriptor?? [ 309.421621][ T5816] usb 2-1: can't set config #0, error -71 [ 309.436353][ T5816] usb 2-1: USB disconnect, device number 3 [ 312.005995][ T6213] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 312.577041][ T6213] usb 4-1: Using ep0 maxpacket: 16 [ 313.529954][ T6213] usb 4-1: device descriptor read/all, error -71 [ 316.760100][ T32] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 318.358189][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.358280][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.417369][ T32] usb 1-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 318.417396][ T32] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 318.462997][ T32] usb 1-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 318.463025][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.463044][ T32] usb 1-1: Product: syz [ 318.463057][ T32] usb 1-1: Manufacturer: syz [ 318.463070][ T32] usb 1-1: SerialNumber: syz [ 318.650963][ T32] usb 1-1: config 0 descriptor?? [ 320.535789][ T32] mos7840 1-1:0.0: required endpoints missing [ 320.620126][ T32] usb 1-1: USB disconnect, device number 6 [ 321.468668][ T7881] NILFS (nullb0): couldn't find nilfs on the device [ 323.446219][ T7904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.544'. [ 335.721821][ T7928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.550'. [ 335.931316][ T7934] netlink: 4 bytes leftover after parsing attributes in process `syz.4.552'. [ 338.111654][ T7949] Mount JFS Failure: -22 [ 338.111712][ T7949] jfs_mount failed w/return code = -22 [ 340.334059][ T5905] kernel read not supported for file /dsp (pid: 5905 comm: kworker/1:6) [ 344.285126][ T7986] netlink: 40 bytes leftover after parsing attributes in process `syz.4.566'. [ 347.416814][ T5905] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 347.594137][ T32] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 347.782021][ T5905] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 347.782051][ T5905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 347.782077][ T5905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 348.537175][ T5905] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 348.537205][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.537224][ T5905] usb 5-1: Product: syz [ 348.537238][ T5905] usb 5-1: Manufacturer: syz [ 348.537251][ T5905] usb 5-1: SerialNumber: syz [ 348.562665][ T32] usb 3-1: config 0 has no interfaces? [ 348.562703][ T32] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 348.562725][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.597803][ T5905] usb 5-1: config 0 descriptor?? [ 348.606481][ T32] usb 3-1: config 0 descriptor?? [ 348.826104][ T5905] iguanair 5-1:0.0: probe with driver iguanair failed with error -12 [ 349.070204][ T7998] mmap: syz.2.569 (7998) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 350.001581][ T5905] usb 5-1: USB disconnect, device number 3 [ 351.713044][ T32] usb 3-1: string descriptor 0 read error: -71 [ 351.824911][ T32] usb 3-1: USB disconnect, device number 5 [ 354.875543][ T8045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.583'. [ 355.164624][ T8046] bridge0: port 1(geneve1) entered blocking state [ 355.173688][ T8046] bridge0: port 1(geneve1) entered disabled state [ 355.194995][ T8046] geneve1: entered allmulticast mode [ 355.304092][ T8046] geneve1: entered promiscuous mode [ 355.353705][ T8046] bridge0: port 1(geneve1) entered blocking state [ 355.359415][ T8046] bridge0: port 1(geneve1) entered forwarding state [ 355.697456][ T8045] netlink: 'syz.2.583': attribute type 10 has an invalid length. [ 355.698051][ T8045] bridge0: port 1(geneve1) entered disabled state [ 355.698292][ T8045] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.704221][ T8045] bridge0: port 1(geneve1) entered blocking state [ 355.704339][ T8045] bridge0: port 1(geneve1) entered forwarding state [ 355.705004][ T8045] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.705106][ T8045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.708913][ T8045] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 357.036895][ T8056] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 364.444259][ T8111] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 366.346740][ T8120] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 366.346831][ T8120] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 366.346918][ T8120] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 367.434182][ T8129] Device name cannot be null; rc = [-22] [ 372.003747][ T8158] syzkaller0: entered promiscuous mode [ 372.003868][ T8158] syzkaller0: entered allmulticast mode [ 373.179848][ T8163] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 375.096049][ T8189] Device name cannot be null; rc = [-22] [ 376.227159][ T8194] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 376.227180][ T8194] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 376.227189][ T8194] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 377.317058][ T5905] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 378.134040][ T5905] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 378.134068][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.134086][ T5905] usb 4-1: Product: syz [ 378.134100][ T5905] usb 4-1: Manufacturer: syz [ 378.134113][ T5905] usb 4-1: SerialNumber: syz [ 378.438270][ T8215] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 378.624820][ T5905] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 378.624881][ T5905] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 378.821914][ T8228] Device name cannot be null; rc = [-22] [ 378.840270][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.840354][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.083270][ T8231] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 379.776119][ T5962] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 379.933990][ T5962] usb 5-1: Using ep0 maxpacket: 16 [ 379.936791][ T5962] usb 5-1: unable to get BOS descriptor or descriptor too short [ 379.942531][ T5962] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 379.948406][ T5962] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 379.948432][ T5962] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.948449][ T5962] usb 5-1: Product: syz [ 379.948462][ T5962] usb 5-1: Manufacturer: syz [ 379.948475][ T5962] usb 5-1: SerialNumber: syz [ 380.071433][ T8206] netlink: 32 bytes leftover after parsing attributes in process `syz.3.628'. [ 380.198914][ T5962] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 380.201484][ T5962] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 380.540043][ T5905] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 380.540897][ T5905] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 380.619535][ T5905] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 380.619865][ T5905] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 380.654023][ T5962] usb 5-1: 2:1 : bogus bTerminalLink 6 [ 380.731632][ T5905] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 380.812778][ T5905] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 381.049224][ T5905] usb 4-1: USB disconnect, device number 4 [ 382.414199][ T32] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 382.636063][ T32] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 382.651335][ T32] usb 2-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 382.651361][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.651380][ T32] usb 2-1: Product: syz [ 382.651391][ T32] usb 2-1: Manufacturer: syz [ 382.651403][ T32] usb 2-1: SerialNumber: syz [ 382.723417][ T32] usb 2-1: config 0 descriptor?? [ 382.964777][ T5962] usb 5-1: USB disconnect, device number 4 [ 383.273284][ T37] audit: type=1326 audit(1776414516.597:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8251 comm="syz.1.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d54bdc819 code=0x7ffc0000 [ 383.311883][ T37] audit: type=1326 audit(1776414516.667:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8251 comm="syz.1.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d54bdc819 code=0x7ffc0000 [ 383.390867][ T37] audit: type=1326 audit(1776414516.777:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8251 comm="syz.1.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f4d54bdc819 code=0x7ffc0000 [ 383.440494][ T8268] sctp: [Deprecated]: syz.1.642 (pid 8268) Use of int in max_burst socket option deprecated. [ 383.440494][ T8268] Use struct sctp_assoc_value instead [ 383.799767][ T37] audit: type=1326 audit(1776414517.027:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8251 comm="syz.1.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d54bdc819 code=0x7ffc0000 [ 383.800674][ T37] audit: type=1326 audit(1776414517.177:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8251 comm="syz.1.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f4d54bdc819 code=0x7ffc0000 [ 383.902413][ T37] audit: type=1326 audit(1776414517.247:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8251 comm="syz.1.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d54bdc819 code=0x7ffc0000 [ 383.911875][ T37] audit: type=1326 audit(1776414517.297:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8251 comm="syz.1.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d54bdc819 code=0x7ffc0000 [ 384.125784][ T5962] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 384.437620][ T8278] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 384.965120][ T5962] usb 5-1: Using ep0 maxpacket: 16 [ 384.981856][ T5962] usb 5-1: config 0 has no interfaces? [ 384.995191][ T5962] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 384.995225][ T5962] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.995244][ T5962] usb 5-1: Product: syz [ 384.995258][ T5962] usb 5-1: Manufacturer: syz [ 384.995272][ T5962] usb 5-1: SerialNumber: syz [ 385.011912][ T5962] usb 5-1: config 0 descriptor?? [ 385.936746][ T8283] Device name cannot be null; rc = [-22] [ 386.157935][ T8285] fuse: Bad value for 'fd' [ 386.221859][ T5962] usb 5-1: USB disconnect, device number 5 [ 386.901146][ T5921] usb 2-1: USB disconnect, device number 4 [ 386.924941][ T5962] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 387.077002][ T5962] usb 1-1: Using ep0 maxpacket: 8 [ 387.084689][ T5962] usb 1-1: config 0 has no interfaces? [ 387.087747][ T5962] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 387.087772][ T5962] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.087790][ T5962] usb 1-1: Product: syz [ 387.087803][ T5962] usb 1-1: Manufacturer: syz [ 387.087816][ T5962] usb 1-1: SerialNumber: syz [ 387.224182][ T5962] usb 1-1: config 0 descriptor?? [ 387.455280][ T5921] usb 1-1: USB disconnect, device number 7 [ 388.109340][ T8318] netlink: 'syz.4.660': attribute type 1 has an invalid length. [ 388.123290][ T8318] netlink: 'syz.4.660': attribute type 1 has an invalid length. [ 390.295486][ T8331] Device name cannot be null; rc = [-22] [ 392.300341][ T8362] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 394.999571][ T8380] Device name cannot be null; rc = [-22] [ 398.416545][ T8415] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 400.952059][ T5158] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 402.995173][ T60] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 402.995206][ T60] CPU: 0 UID: 0 PID: 60 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 402.995223][ T60] Tainted: [L]=SOFTLOCKUP [ 402.995227][ T60] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 402.995234][ T60] Workqueue: hci3 hci_rx_work [ 402.995255][ T60] Call Trace: [ 402.995261][ T60] [ 402.995267][ T60] dump_stack_lvl+0xe8/0x150 [ 402.995281][ T60] sysfs_create_dir_ns+0x271/0x2a0 [ 402.995294][ T60] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 402.995310][ T60] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 402.995324][ T60] ? rt_spin_unlock+0x160/0x200 [ 402.995339][ T60] kobject_add_internal+0x631/0xd10 [ 402.995356][ T60] kobject_add+0x163/0x240 [ 402.995371][ T60] ? __pfx_kobject_add+0x10/0x10 [ 402.995387][ T60] ? get_device_parent+0x370/0x3a0 [ 402.995400][ T60] device_add+0x408/0xbb0 [ 402.995413][ T60] hci_conn_add_sysfs+0xd5/0x210 [ 402.995425][ T60] le_conn_complete_evt+0x10e6/0x16b0 [ 402.995444][ T60] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 402.995458][ T60] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 402.995468][ T60] ? lockdep_hardirqs_on+0x7a/0x110 [ 402.995480][ T60] ? skb_pull_data+0xfb/0x200 [ 402.995496][ T60] hci_le_conn_complete_evt+0x187/0x470 [ 402.995513][ T60] hci_event_packet+0x659/0xef0 [ 402.995528][ T60] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 402.995540][ T60] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 402.995552][ T60] ? __pfx_hci_event_packet+0x10/0x10 [ 402.995562][ T60] ? rt_spin_unlock+0x14f/0x200 [ 402.995580][ T60] ? hci_send_to_monitor+0xe2/0x590 [ 402.995600][ T60] hci_rx_work+0x3ee/0x1040 [ 402.995616][ T60] ? process_one_work+0x8b7/0x1710 [ 402.995626][ T60] process_one_work+0x9a3/0x1710 [ 402.995648][ T60] ? __pfx_process_one_work+0x10/0x10 [ 402.995656][ T60] ? do_raw_spin_lock+0x12b/0x2f0 [ 402.995676][ T60] worker_thread+0xba8/0x11e0 [ 402.995700][ T60] kthread+0x388/0x470 [ 402.995713][ T60] ? __pfx_worker_thread+0x10/0x10 [ 402.995722][ T60] ? __pfx_kthread+0x10/0x10 [ 402.995735][ T60] ret_from_fork+0x514/0xb70 [ 402.995749][ T60] ? __pfx_ret_from_fork+0x10/0x10 [ 402.995759][ T60] ? __switch_to+0xc79/0x1410 [ 402.995775][ T60] ? __pfx_kthread+0x10/0x10 [ 402.995788][ T60] ret_from_fork_asm+0x1a/0x30 [ 402.995809][ T60] [ 402.995879][ T60] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 402.995909][ T60] Bluetooth: hci3: failed to register connection device [ 403.134376][ T8454] netlink: 4 bytes leftover after parsing attributes in process `syz.4.697'. [ 408.969004][ T8454] nbd: socks must be embedded in a SOCK_ITEM attr [ 409.065131][ T8483] tmpfs: Bad value for 'uid' [ 409.065149][ T8483] tmpfs: Bad value for 'uid' [ 410.424747][ T8490] libceph: resolve '0..' (ret=-3): failed [ 412.863527][ T7804] udevd[7804]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 414.349923][ T7804] udevd[7804]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 415.647778][ T8533] tmpfs: Bad value for 'uid' [ 415.647797][ T8533] tmpfs: Bad value for 'uid' [ 416.328769][ T8545] libceph: resolve '0..' (ret=-3): failed [ 422.451582][ T8589] tmpfs: Bad value for 'uid' [ 422.451600][ T8589] tmpfs: Bad value for 'uid' [ 422.642517][ T8595] libceph: resolve '0..' (ret=-3): failed [ 425.173588][ T8616] Device name cannot be null; rc = [-22] [ 429.334394][ T8643] tmpfs: Bad value for 'uid' [ 429.334412][ T8643] tmpfs: Bad value for 'uid' [ 430.527629][ T8655] libceph: resolve '0..' (ret=-3): failed [ 431.249556][ T8665] Device name cannot be null; rc = [-22] [ 436.494314][ T8702] tmpfs: Bad value for 'uid' [ 436.494333][ T8702] tmpfs: Bad value for 'uid' [ 436.604391][ T8706] Device name cannot be null; rc = [-22] [ 436.849083][ T8711] libceph: resolve '0..' (ret=-3): failed [ 437.386676][ T5158] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 437.955817][ T5158] usb 5-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 437.955843][ T5158] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 437.960366][ T5158] usb 5-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 437.960390][ T5158] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.960408][ T5158] usb 5-1: Product: syz [ 437.960420][ T5158] usb 5-1: Manufacturer: syz [ 437.960433][ T5158] usb 5-1: SerialNumber: syz [ 437.966084][ T5158] usb 5-1: config 0 descriptor?? [ 441.044703][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.045925][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.138845][ T5158] mos7840 5-1:0.0: required endpoints missing [ 441.170109][ T5158] usb 5-1: USB disconnect, device number 6 [ 444.991555][ T37] audit: type=1400 audit(1776414578.317:11): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=8756 comm="syz.1.779" [ 445.283604][ T8765] libceph: resolve '0..' (ret=-3): failed [ 446.748086][ T8778] netlink: 'syz.3.786': attribute type 1 has an invalid length. [ 446.767809][ T8779] Device name cannot be null; rc = [-22] [ 446.773903][ T32] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 446.926161][ T32] usb 2-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 446.926187][ T32] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 446.928394][ T32] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 446.928419][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.928438][ T32] usb 2-1: Product: syz [ 446.928451][ T32] usb 2-1: Manufacturer: syz [ 446.928465][ T32] usb 2-1: SerialNumber: syz [ 446.994192][ T32] usb 2-1: config 0 descriptor?? [ 448.253471][ T32] mos7840 2-1:0.0: required endpoints missing [ 448.302579][ T32] usb 2-1: USB disconnect, device number 6 [ 449.790278][ T8793] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 449.790299][ T8793] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 449.790312][ T8793] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 452.945726][ T8815] libceph: resolve '0..' (ret=-3): failed [ 454.193927][ T5962] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 455.316228][ T5962] usb 2-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 455.316256][ T5962] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 455.318778][ T5962] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 455.318804][ T5962] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.318822][ T5962] usb 2-1: Product: syz [ 455.318835][ T5962] usb 2-1: Manufacturer: syz [ 455.318848][ T5962] usb 2-1: SerialNumber: syz [ 455.372219][ T5962] usb 2-1: config 0 descriptor?? [ 457.494758][ T8837] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 457.494780][ T8837] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 457.494789][ T8837] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 458.013191][ T5962] mos7840 2-1:0.0: required endpoints missing [ 458.058305][ T5962] usb 2-1: USB disconnect, device number 7 [ 463.800807][ T5834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 463.833435][ T5834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 463.851365][ T5834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 463.852680][ T5834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 463.853608][ T5834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 464.626997][ T32] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 464.757620][ T8878] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 464.757641][ T8878] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 464.757660][ T8878] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 464.816497][ T32] usb 4-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 464.816523][ T32] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 464.820180][ T32] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 464.820205][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.820215][ T32] usb 4-1: Product: syz [ 464.820221][ T32] usb 4-1: Manufacturer: syz [ 464.820228][ T32] usb 4-1: SerialNumber: syz [ 464.888830][ T32] usb 4-1: config 0 descriptor?? [ 465.317842][ T32] mos7840 4-1:0.0: required endpoints missing [ 465.353102][ T32] usb 4-1: USB disconnect, device number 5 [ 466.525245][ T60] Bluetooth: hci5: command tx timeout [ 468.584510][ T60] Bluetooth: hci5: command tx timeout [ 469.911210][ T1401] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.674592][ T60] Bluetooth: hci5: command tx timeout [ 472.754851][ T60] Bluetooth: hci5: command tx timeout [ 472.782864][ T1401] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.937236][ T1401] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.982382][ T8929] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 474.982404][ T8929] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 474.982414][ T8929] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 475.821630][ T8937] netlink: 'syz.1.831': attribute type 1 has an invalid length. [ 478.025174][ T1401] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.399052][ T8946] fuse: Unknown parameter '00000000000000000000' [ 481.463491][ T8873] chnl_net:caif_netlink_parms(): no params data found [ 481.790661][ T8970] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 481.790681][ T8970] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 481.790692][ T8970] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 482.411314][ T8979] netlink: 'syz.3.842': attribute type 1 has an invalid length. [ 486.679767][ T8873] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.680021][ T8873] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.680287][ T8873] bridge_slave_0: entered allmulticast mode [ 486.712182][ T8873] bridge_slave_0: entered promiscuous mode [ 486.802704][ T8873] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.802959][ T8873] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.821288][ T8873] bridge_slave_1: entered allmulticast mode [ 486.838269][ T8873] bridge_slave_1: entered promiscuous mode [ 487.344048][ T9015] netlink: 'syz.1.852': attribute type 1 has an invalid length. [ 488.854609][ T32] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 489.755129][ T1401] bridge_slave_1: left allmulticast mode [ 489.755230][ T1401] bridge_slave_1: left promiscuous mode [ 489.763529][ T1401] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.156213][ T32] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 491.156239][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.156258][ T32] usb 3-1: Product: syz [ 491.156271][ T32] usb 3-1: Manufacturer: syz [ 491.156284][ T32] usb 3-1: SerialNumber: syz [ 491.644607][ T32] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 491.644665][ T32] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 493.170564][ T9027] netlink: 32 bytes leftover after parsing attributes in process `syz.2.850'. [ 493.298475][ T9059] netlink: 'syz.1.864': attribute type 1 has an invalid length. [ 494.438834][ T32] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 494.469537][ T32] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 494.473135][ T32] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 494.473187][ T32] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 494.534296][ T32] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 494.710141][ T32] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 495.164469][ T32] usb 3-1: USB disconnect, device number 6 [ 495.305026][ T1401] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 495.487610][ T1401] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 495.738333][ T1401] bond0 (unregistering): Released all slaves [ 496.550167][ T8873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 497.652343][ T8873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 497.967965][ T8873] team0: Port device team_slave_0 added [ 497.986616][ T8873] team0: Port device team_slave_1 added [ 498.119387][ T8873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.119397][ T8873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.119409][ T8873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 498.120979][ T8873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.120986][ T8873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.120998][ T8873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 499.132320][ T9102] netlink: 'syz.4.874': attribute type 1 has an invalid length. [ 500.606011][ T5816] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 500.861278][ T5816] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 500.861321][ T5816] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.861339][ T5816] usb 5-1: Product: syz [ 500.861353][ T5816] usb 5-1: Manufacturer: syz [ 500.861366][ T5816] usb 5-1: SerialNumber: syz [ 501.181597][ T5492] 8021q: adding VLAN 0 to HW filter on device eth1 [ 501.240845][ T8873] hsr_slave_0: entered promiscuous mode [ 501.242707][ T8873] hsr_slave_1: entered promiscuous mode [ 501.256228][ T8873] debugfs: 'hsr0' already exists in 'hsr' [ 501.256250][ T8873] Cannot create hsr debugfs directory [ 501.421254][ T5816] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 501.421313][ T5816] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 501.670151][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.670237][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.409097][ T9105] netlink: 32 bytes leftover after parsing attributes in process `syz.4.875'. [ 503.513585][ T5816] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 503.515703][ T5816] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 503.516142][ T5816] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 503.516186][ T5816] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 503.516975][ T5816] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 503.558422][ T5816] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 504.772912][ T5816] usb 5-1: USB disconnect, device number 7 [ 505.187170][ T9144] netlink: 'syz.2.884': attribute type 1 has an invalid length. [ 509.020016][ T1401] hsr_slave_0: left promiscuous mode [ 509.381448][ T1401] hsr_slave_1: left promiscuous mode [ 509.423658][ T1401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 509.447824][ T1401] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 509.548753][ T1401] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 509.548778][ T1401] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 511.482464][ T1401] veth1_macvtap: left promiscuous mode [ 511.482647][ T1401] veth0_macvtap: left promiscuous mode [ 514.124952][ T9198] netlink: 'syz.1.896': attribute type 1 has an invalid length. [ 518.166816][ T1401] team0 (unregistering): Port device team_slave_1 removed [ 518.357526][ T1401] team0 (unregistering): Port device team_slave_0 removed [ 519.875308][ T9234] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 519.875339][ T9234] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 519.875356][ T9234] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 519.909722][ T5492] 8021q: adding VLAN 0 to HW filter on device eth2 [ 520.453425][ T9242] netlink: 'syz.2.907': attribute type 1 has an invalid length. [ 528.101843][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 528.153498][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 528.205457][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 528.239993][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 528.261349][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 529.711755][ T5492] 8021q: adding VLAN 0 to HW filter on device eth3 [ 530.343873][ T60] Bluetooth: hci2: command tx timeout [ 531.123375][ T9318] netlink: 'syz.1.917': attribute type 1 has an invalid length. [ 532.487989][ T60] Bluetooth: hci2: command tx timeout [ 535.109731][ T60] Bluetooth: hci2: command tx timeout [ 536.263280][ T5492] 8021q: adding VLAN 0 to HW filter on device eth4 [ 537.143928][ T60] Bluetooth: hci2: command tx timeout [ 537.263882][ T9362] netlink: 'syz.1.936': attribute type 1 has an invalid length. [ 542.338555][ T9277] chnl_net:caif_netlink_parms(): no params data found [ 543.750253][ T9277] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.750515][ T9277] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.750790][ T9277] bridge_slave_0: entered allmulticast mode [ 543.768332][ T9277] bridge_slave_0: entered promiscuous mode [ 543.993650][ T9277] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.994657][ T9277] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.994919][ T9277] bridge_slave_1: entered allmulticast mode [ 544.048857][ T9277] bridge_slave_1: entered promiscuous mode [ 546.496022][ T9277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 546.534567][ T9277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 546.712695][ T1401] bridge_slave_1: left allmulticast mode [ 546.712721][ T1401] bridge_slave_1: left promiscuous mode [ 546.712980][ T1401] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.822485][ T1401] bridge_slave_0: left allmulticast mode [ 546.822512][ T1401] bridge_slave_0: left promiscuous mode [ 546.822770][ T1401] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.300687][ T1401] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 549.420800][ T1401] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 549.447116][ T9453] netlink: 40 bytes leftover after parsing attributes in process `syz.2.957'. [ 549.447147][ T9453] netlink: 40 bytes leftover after parsing attributes in process `syz.2.957'. [ 549.447170][ T9453] netlink: 40 bytes leftover after parsing attributes in process `syz.2.957'. [ 549.685391][ T1401] bond0 (unregistering): Released all slaves [ 550.632000][ T9277] team0: Port device team_slave_0 added [ 550.655856][ T9277] team0: Port device team_slave_1 added [ 550.915662][ T9277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 550.915677][ T9277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 550.915700][ T9277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 550.980544][ T9277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 550.980560][ T9277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 550.980583][ T9277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 552.736372][ T9480] 9p: Bad value for 'rfdno' [ 552.892559][ T9277] hsr_slave_0: entered promiscuous mode [ 552.918201][ T9277] hsr_slave_1: entered promiscuous mode [ 552.945600][ T5816] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 554.287993][ T5816] usb 3-1: config 1 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 554.288026][ T5816] usb 3-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 554.288048][ T5816] usb 3-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 554.288073][ T5816] usb 3-1: config 1 interface 0 has no altsetting 0 [ 554.293030][ T5816] usb 3-1: string descriptor 0 read error: -22 [ 554.293120][ T5816] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.40 [ 554.293143][ T5816] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 555.756064][ T32] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 555.919683][ T5816] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0 [ 555.919720][ T5816] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0 [ 555.919746][ T5816] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0 [ 555.919769][ T5816] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0 [ 555.919791][ T5816] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0 [ 555.919813][ T5816] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0 [ 555.919844][ T5816] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0 [ 555.919867][ T5816] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0 [ 555.919890][ T5816] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0 [ 555.919913][ T5816] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0 [ 555.983652][ T32] usb 5-1: Using ep0 maxpacket: 32 [ 556.436056][ T9516] Invalid source name [ 556.482799][ T32] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 556.488202][ T32] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 556.488233][ T32] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 556.488255][ T32] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 556.488280][ T32] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 556.497472][ T32] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 556.497498][ T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.497514][ T32] usb 5-1: Product: syz [ 556.497525][ T32] usb 5-1: Manufacturer: syz [ 556.497536][ T32] usb 5-1: SerialNumber: syz [ 556.555868][ T5816] lenovo 0003:17EF:6047.0001: hidraw0: USB HID v0.01 Device [HID 17ef:6047] on usb-dummy_hcd.2-1/input0 [ 556.582624][ T32] usb 5-1: config 0 descriptor?? [ 556.735377][ T1401] hsr_slave_0: left promiscuous mode [ 556.774911][ T5816] lenovo 0003:17EF:6047.0001: Fn-lock setting failed: -71 [ 556.775448][ T5816] lenovo 0003:17EF:6047.0001: Sensitivity setting failed: -71 [ 556.828939][ T5816] usb 3-1: USB disconnect, device number 7 [ 557.023160][ T1401] hsr_slave_1: left promiscuous mode [ 557.057012][ T1401] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 557.149128][ T9526] netlink: 'syz.1.971': attribute type 1 has an invalid length. [ 557.851114][ T1401] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 557.936134][ T32] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 557.936190][ T32] input input19: Device does not respond to id packet M [ 557.938443][ T32] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 557.938486][ T32] input input19: Device does not respond to id packet P [ 557.938896][ T32] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 557.938937][ T32] input input19: Device does not respond to id packet B [ 557.978837][ T32] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 558.198172][ T32] input input19: Device does not respond to id packet N [ 558.211156][ T32] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 558.211602][ T32] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 558.212019][ T32] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 558.213567][ T32] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 558.467981][ T9522] fido_id[9522]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 558.757157][ T32] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input19 [ 559.404940][ T32] usb 5-1: USB disconnect, device number 8 [ 561.625056][ T9562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.983'. [ 561.625102][ T9562] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 561.777171][ T9563] netlink: 'syz.2.981': attribute type 1 has an invalid length. [ 563.240865][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.240955][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.900127][ T1401] team0 (unregistering): Port device team_slave_1 removed [ 565.125135][ T1401] team0 (unregistering): Port device team_slave_0 removed [ 566.694019][ T5492] 8021q: adding VLAN 0 to HW filter on device eth5 [ 566.706173][ T9595] team0: Device gtp0 is up. Set it down before adding it as a team port [ 572.263867][ T5920] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 572.525168][ T5920] usb 4-1: Using ep0 maxpacket: 16 [ 572.532760][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 572.532787][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 572.532807][ T5920] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 572.532845][ T5920] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 572.532865][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.623326][ T5920] usb 4-1: config 0 descriptor?? [ 574.028618][ T5920] microsoft 0003:045E:07DA.0002: item fetching failed at offset 30/34 [ 574.029115][ T5920] microsoft 0003:045E:07DA.0002: parse failed [ 574.029169][ T5920] microsoft 0003:045E:07DA.0002: probe with driver microsoft failed with error -22 [ 574.496926][ T5920] usb 4-1: USB disconnect, device number 6 [ 578.653892][ T5920] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 578.811935][ T5920] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 578.811961][ T5920] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 578.817609][ T5920] usb 4-1: New USB device found, idVendor=0e41, idProduct=4642, bcdDevice= 0.40 [ 578.817635][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.817665][ T5920] usb 4-1: Product: syz [ 578.817677][ T5920] usb 4-1: Manufacturer: syz [ 578.817690][ T5920] usb 4-1: SerialNumber: syz [ 579.159435][ T9687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.159986][ T9687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.106146][ T5920] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 583.786848][ T5962] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 583.945077][ T5962] usb 2-1: Using ep0 maxpacket: 8 [ 583.960668][ T5962] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 583.960700][ T5962] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 583.960723][ T5962] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 583.960745][ T5962] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 583.960785][ T5962] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 583.960806][ T5962] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.997941][ T9277] netdevsim netdevsim5: probe with driver netdevsim failed with error -12 [ 584.332732][ T5962] usb 2-1: GET_CAPABILITIES returned 0 [ 584.332777][ T5962] usbtmc 2-1:16.0: can't read capabilities [ 585.119492][ T5920] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 585.198650][ T5920] snd_usb_pod 4-1:1.0: Line 6 BassPODxt Live found [ 585.198674][ T5920] usb 4-1: selecting invalid altsetting 1 [ 585.198689][ T5920] snd_usb_pod 4-1:1.0: set_interface failed [ 585.240426][ T5920] snd_usb_pod 4-1:1.0: Line 6 BassPODxt Live now disconnected [ 585.240627][ T5920] snd_usb_pod 4-1:1.0: probe with driver snd_usb_pod failed with error -22 [ 585.527211][ T5920] usb 4-1: USB disconnect, device number 7 [ 585.738389][ T5962] usb 2-1: USB disconnect, device number 8 [ 585.824846][ T5834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 586.000884][ T5834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 586.864164][ T5834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 586.897538][ T5834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 586.898293][ T5834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 587.065727][ T7804] udevd[7804]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 587.380678][ T9745] kvm: kvm [9744]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x80000000 [ 587.380764][ T9745] kvm: kvm [9744]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 587.382021][ T9745] kvm: kvm [9744]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xe0 [ 588.740682][ T9764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1030'. [ 590.202555][ T60] Bluetooth: hci5: command tx timeout [ 590.301383][ T1472] bridge_slave_1: left allmulticast mode [ 590.301410][ T1472] bridge_slave_1: left promiscuous mode [ 590.313585][ T1472] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.722032][ T9782] netlink: 'syz.4.1031': attribute type 2 has an invalid length. [ 591.364781][ T1472] bridge_slave_0: left allmulticast mode [ 591.364807][ T1472] bridge_slave_0: left promiscuous mode [ 591.365053][ T1472] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.764591][ T1472] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 591.921025][ T1472] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 592.029328][ T1472] bond0 (unregistering): Released all slaves [ 592.242236][ T9782] : entered promiscuous mode [ 592.273564][ T60] Bluetooth: hci5: command tx timeout [ 592.803621][ T9813] syz.4.1040 uses obsolete (PF_INET,SOCK_PACKET) [ 593.087435][ T9813] syzkaller1: entered promiscuous mode [ 593.087459][ T9813] syzkaller1: entered allmulticast mode [ 594.343818][ T60] Bluetooth: hci5: command tx timeout [ 596.635521][ T60] Bluetooth: hci5: command tx timeout [ 597.945461][ T1472] hsr_slave_0: left promiscuous mode [ 597.986292][ T1472] hsr_slave_1: left promiscuous mode [ 597.987339][ T1472] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 598.030706][ T1472] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 598.947982][ T1472] team0 (unregistering): Port device team_slave_1 removed [ 599.144543][ T1472] team0 (unregistering): Port device team_slave_0 removed [ 600.338913][ T9879] libceph: resolve '0..' (ret=-3): failed [ 600.745631][ T9880] gfs2: error -5 reading superblock [ 606.940914][ T9895] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 606.941025][ T9895] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 606.941084][ T9895] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 608.413245][ T9915] tmpfs: Bad value for 'uid' [ 608.413262][ T9915] tmpfs: Bad value for 'uid' [ 610.951578][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 611.018392][ T9932] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 611.031877][ T9932] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 611.045032][ T9932] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 611.048102][ T9932] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 611.259153][ T9731] chnl_net:caif_netlink_parms(): no params data found [ 613.150578][ T60] Bluetooth: hci2: command tx timeout [ 614.244832][ T9731] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.245218][ T9731] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.245480][ T9731] bridge_slave_0: entered allmulticast mode [ 614.269102][ T9731] bridge_slave_0: entered promiscuous mode [ 614.522071][ T9731] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.522333][ T9731] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.522613][ T9731] bridge_slave_1: entered allmulticast mode [ 614.542407][ T9731] bridge_slave_1: entered promiscuous mode [ 615.233820][ T60] Bluetooth: hci2: command tx timeout [ 616.524244][ T9731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 616.670673][ T9731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 617.303896][ T60] Bluetooth: hci2: command tx timeout [ 617.803078][ T9731] team0: Port device team_slave_0 added [ 617.845523][ T9731] team0: Port device team_slave_1 added [ 618.557547][ T9731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 618.557562][ T9731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 618.557585][ T9731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 618.603063][ T9731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 618.603078][ T9731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 618.603102][ T9731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 619.396542][ T60] Bluetooth: hci2: command tx timeout [ 620.617579][ T9731] hsr_slave_0: entered promiscuous mode [ 620.661489][ T9731] hsr_slave_1: entered promiscuous mode [ 621.051905][T10045] vivid-008: kernel_thread() failed [ 622.473834][ T9792] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 623.189126][ T9792] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 623.189159][ T9792] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 623.189183][ T9792] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 623.189222][ T9792] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 623.189243][ T9792] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.272399][ T9792] usb 5-1: config 0 descriptor?? [ 623.273175][T10061] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 623.723314][ T9923] chnl_net:caif_netlink_parms(): no params data found [ 623.728178][ T9792] hid_parser_main: 4007 callbacks suppressed [ 623.728201][ T9792] gt683r_led 0003:1770:FF00.0003: unknown main item tag 0x3 [ 623.728230][ T9792] gt683r_led 0003:1770:FF00.0003: unknown main item tag 0x0 [ 623.728253][ T9792] gt683r_led 0003:1770:FF00.0003: unknown main item tag 0x0 [ 623.728274][ T9792] gt683r_led 0003:1770:FF00.0003: unknown main item tag 0x0 [ 623.728293][ T9792] gt683r_led 0003:1770:FF00.0003: unknown main item tag 0x0 [ 623.728313][ T9792] gt683r_led 0003:1770:FF00.0003: unknown main item tag 0x0 [ 623.728335][ T9792] gt683r_led 0003:1770:FF00.0003: unknown main item tag 0x0 [ 623.728355][ T9792] gt683r_led 0003:1770:FF00.0003: unknown main item tag 0x0 [ 623.841118][ T9792] gt683r_led 0003:1770:FF00.0003: hidraw0: USB HID v0.04 Device [HID 1770:ff00] on usb-dummy_hcd.4-1/input0 [ 624.435858][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.435943][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.914590][ T5920] usb 5-1: USB disconnect, device number 9 [ 626.052961][ T5816] gt683r_led 0003:1770:FF00.0003: failed to send set report request: -19 [ 626.363158][ T5816] gt683r_led 0003:1770:FF00.0003: failed to send set report request: -19 [ 626.594237][ T5816] gt683r_led 0003:1770:FF00.0003: failed to send set report request: -19 [ 628.665327][ T5920] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 628.679510][ T9923] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.679832][ T9923] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.680080][ T9923] bridge_slave_0: entered allmulticast mode [ 628.684954][ T9923] bridge_slave_0: entered promiscuous mode [ 628.689096][ T9923] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.689429][ T9923] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.689659][ T9923] bridge_slave_1: entered allmulticast mode [ 628.692423][ T9923] bridge_slave_1: entered promiscuous mode [ 629.240923][ T5920] usb 5-1: Using ep0 maxpacket: 8 [ 629.251784][ T5920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 629.251830][ T5920] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 629.251851][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.262079][ T5920] usb 5-1: config 0 descriptor?? [ 629.526662][ T5920] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 629.726481][ T9731] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 631.044750][ T9731] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 631.079982][ T9923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 631.121863][ T9731] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 631.320740][ T9731] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 631.354422][ T9923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 631.354883][ T9731] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 631.631927][ T9731] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 631.734472][ T9731] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 632.042461][ T5816] usb 5-1: USB disconnect, device number 10 [ 632.101631][ T9731] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 632.311384][ T9923] team0: Port device team_slave_0 added [ 632.370142][ T9923] team0: Port device team_slave_1 added [ 633.567486][ T9923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 633.567496][ T9923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 633.567509][ T9923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 633.912930][T10152] Invalid source name [ 634.047771][ T9923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 634.047786][ T9923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 634.047810][ T9923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 634.936258][ T9923] hsr_slave_0: entered promiscuous mode [ 634.937986][ T9923] hsr_slave_1: entered promiscuous mode [ 634.942227][ T9923] debugfs: 'hsr0' already exists in 'hsr' [ 634.942251][ T9923] Cannot create hsr debugfs directory [ 634.984259][ T9792] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 636.433824][ T9792] usb 5-1: Using ep0 maxpacket: 8 [ 636.437515][ T9792] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 636.445724][ T9792] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 636.445751][ T9792] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.445769][ T9792] usb 5-1: Product: syz [ 636.445786][ T9792] usb 5-1: Manufacturer: syz [ 636.445799][ T9792] usb 5-1: SerialNumber: syz [ 636.527384][ T9792] usb 5-1: config 0 descriptor?? [ 636.547188][ T9792] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 636.547242][ T9792] usb 5-1: setting power ON [ 636.564309][ T9792] dvb-usb: bulk message failed: -22 (2/0) [ 636.623761][T10162] sp0: Synchronizing with TNC [ 636.739639][T10156] dvb-usb: bulk message failed: -22 (3/0) [ 636.739665][T10156] dvb-usb: bulk message failed: -22 (3/0) [ 636.740736][T10156] dvb-usb: bulk message failed: -22 (4/0) [ 636.740754][T10156] cxusb: i2c read failed [ 636.877743][ T9792] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 636.883419][ T9792] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 636.883494][ T9792] usb 5-1: media controller created [ 637.002002][ T9792] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 637.295657][ T9792] usb 5-1: selecting invalid altsetting 6 [ 637.295681][ T9792] usb 5-1: digital interface selection failed (-22) [ 637.295701][ T9792] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 637.299519][ T9792] usb 5-1: setting power OFF [ 637.299716][ T9792] dvb-usb: bulk message failed: -22 (2/0) [ 637.299733][ T9792] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 637.299745][ T9792] (NULL device *): no alternate interface [ 637.758503][ T9792] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 637.778423][ T9792] usb 5-1: USB disconnect, device number 11 [ 639.021000][ T9731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 640.327090][T10184] Invalid source name [ 640.465655][T10190] fuse: blksize only supported for fuseblk [ 641.962947][ T9731] 8021q: adding VLAN 0 to HW filter on device team0 [ 642.006546][ T2943] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.016118][ T2943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 642.215888][ T2943] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.216023][ T2943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 642.334195][ T9923] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 642.389232][ T9923] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 642.605253][ T9923] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 644.657872][ T9923] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 644.741991][ T9923] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 644.867672][ T9923] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 644.897444][ T9932] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 644.951301][ T9932] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 644.951525][ T9923] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 644.963002][ T9932] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 645.013334][T10199] block device autoloading is deprecated and will be removed. [ 645.045983][ T9932] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 645.049049][ T9932] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 645.187841][ T9923] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 645.664786][T10231] Invalid source name [ 648.171969][ T9932] Bluetooth: hci6: command tx timeout [ 648.709960][T10237] kernel read not supported for file /cpuacct.usage_percpu (pid: 10237 comm: syz.3.1139) [ 648.778333][ T37] audit: type=1800 audit(1776414782.107:12): pid=10237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1139" name="cpuacct.usage_percpu" dev="mqueue" ino=26223 res=0 errno=0 [ 650.265866][ T60] Bluetooth: hci6: command tx timeout [ 652.358361][ T60] Bluetooth: hci6: command tx timeout [ 653.484654][ T9923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 653.695035][ T9923] 8021q: adding VLAN 0 to HW filter on device team0 [ 653.760834][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.777530][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 653.822490][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.822688][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 654.438233][ T60] Bluetooth: hci6: command tx timeout [ 665.102587][T10216] chnl_net:caif_netlink_parms(): no params data found [ 668.524567][ T9932] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 668.558962][ T9932] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 668.576918][ T9932] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 668.651514][ T9932] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 668.662475][ T9932] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 669.073913][T10216] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.074185][T10216] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.074496][T10216] bridge_slave_0: entered allmulticast mode [ 669.077834][T10216] bridge_slave_0: entered promiscuous mode [ 669.703763][T10216] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.703976][T10216] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.704240][T10216] bridge_slave_1: entered allmulticast mode [ 669.711998][T10216] bridge_slave_1: entered promiscuous mode [ 670.746061][ T60] Bluetooth: hci5: command tx timeout [ 671.083582][T10216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 672.563992][T10216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 672.832988][ T60] Bluetooth: hci5: command tx timeout [ 673.763515][T10216] team0: Port device team_slave_0 added [ 674.040373][T10216] team0: Port device team_slave_1 added [ 675.022606][ T60] Bluetooth: hci5: command tx timeout [ 675.935436][ T1401] bridge_slave_1: left allmulticast mode [ 675.935464][ T1401] bridge_slave_1: left promiscuous mode [ 675.935717][ T1401] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.166137][ T1401] bridge_slave_0: left allmulticast mode [ 676.166161][ T1401] bridge_slave_0: left promiscuous mode [ 676.166337][ T1401] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.074989][ T60] Bluetooth: hci5: command tx timeout [ 678.595465][T10405] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 678.637367][T10405] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 678.847907][T10405] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 678.879847][T10405] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 678.980369][T10405] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 679.005119][T10405] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 679.058003][T10405] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 679.072374][T10405] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 679.072538][T10405] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 679.499920][T10402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1181'. [ 679.499933][T10402] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1181'. [ 681.035202][ T1401] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 681.094393][ T1401] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 681.155542][ T1401] bond0 (unregistering): Released all slaves [ 681.184692][ T5816] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 681.186990][T10216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 681.187000][T10216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 681.187013][T10216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 681.367244][ T5816] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 681.367276][ T5816] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 681.367300][ T5816] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 681.375519][ T5816] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 681.375549][ T5816] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.375568][ T5816] usb 5-1: Product: syz [ 681.375582][ T5816] usb 5-1: Manufacturer: syz [ 681.375595][ T5816] usb 5-1: SerialNumber: syz [ 681.825396][T10216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 681.825407][T10216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 681.825420][T10216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 682.425566][ T5816] usb 5-1: config 0 descriptor?? [ 682.430215][T10414] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 682.430433][T10414] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 682.474542][ T5816] usb 5-1: ucan: probing device on interface #0 [ 683.354917][ T5816] ucan 5-1:0.0: probe with driver ucan failed with error -71 [ 683.511970][ T5816] usb 5-1: USB disconnect, device number 12 [ 683.772665][T10216] hsr_slave_0: entered promiscuous mode [ 683.801373][T10216] hsr_slave_1: entered promiscuous mode [ 683.818155][T10216] debugfs: 'hsr0' already exists in 'hsr' [ 683.818181][T10216] Cannot create hsr debugfs directory [ 685.882035][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.882122][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.783059][ T1401] hsr_slave_0: left promiscuous mode [ 689.232008][ T1401] hsr_slave_1: left promiscuous mode [ 689.244545][ T1401] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 689.285705][ T1401] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 693.194731][ T1401] team0 (unregistering): Port device team_slave_1 removed [ 693.263973][ T1401] team0 (unregistering): Port device team_slave_0 removed [ 693.751236][T10453] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.336578][T10352] chnl_net:caif_netlink_parms(): no params data found [ 699.879180][T10526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1211'. [ 700.181557][T10525] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 701.641552][T10538] 9p: Bad value for 'rfdno' [ 701.815876][ T5492] 8021q: adding VLAN 0 to HW filter on device eth5 [ 703.806542][T10352] bridge0: port 1(bridge_slave_0) entered blocking state [ 703.806790][T10352] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.807087][T10352] bridge_slave_0: entered allmulticast mode [ 703.809664][T10352] bridge_slave_0: entered promiscuous mode [ 703.844753][T10352] bridge0: port 2(bridge_slave_1) entered blocking state [ 703.845019][T10352] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.845315][T10352] bridge_slave_1: entered allmulticast mode [ 703.863338][T10352] bridge_slave_1: entered promiscuous mode [ 703.903859][ T32] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 703.958989][T10352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 703.975816][T10352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 704.113726][ T32] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 704.113750][ T32] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 704.117448][ T32] usb 4-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 704.117474][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.117490][ T32] usb 4-1: Product: syz [ 704.117502][ T32] usb 4-1: Manufacturer: syz [ 704.117514][ T32] usb 4-1: SerialNumber: syz [ 705.169911][ T32] usb 4-1: config 0 descriptor?? [ 705.300336][ T32] usb 4-1: can't set config #0, error -71 [ 705.346839][ T32] usb 4-1: USB disconnect, device number 8 [ 705.461720][T10352] team0: Port device team_slave_0 added [ 705.581430][T10352] team0: Port device team_slave_1 added [ 706.720070][ T9932] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 706.780584][ T9932] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 706.784401][ T9932] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 706.819586][ T9932] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 706.820690][ T9932] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 707.662203][T10587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1222'. [ 708.040553][T10586] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 708.154305][T10589] 9p: Bad value for 'rfdno' [ 708.444134][T10352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 708.444148][T10352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 708.444165][T10352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 709.095957][ T9932] Bluetooth: hci2: command tx timeout [ 709.414414][T10602] netlink: 'syz.1.1227': attribute type 1 has an invalid length. [ 709.561708][T10352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 709.561724][T10352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 709.561748][T10352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 711.176611][ T9932] Bluetooth: hci2: command tx timeout [ 711.304119][T10610] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 712.934090][T10352] hsr_slave_0: entered promiscuous mode [ 712.940886][T10352] hsr_slave_1: entered promiscuous mode [ 713.224491][T10578] Bluetooth: hci2: command tx timeout [ 713.470504][T10626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1232'. [ 713.879549][T10624] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 714.434048][T10629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1233'. [ 715.395697][T10578] Bluetooth: hci2: command tx timeout [ 719.729086][T10656] fuse: Bad value for 'rootmode' [ 720.258224][T10663] tipc: Enabling of bearer rejected, failed to enable media [ 722.401590][T10678] libceph: resolve '0..' (ret=-3): failed [ 722.594325][T10678] gfs2: error -5 reading superblock [ 723.370400][ T1401] bridge_slave_1: left allmulticast mode [ 723.370420][ T1401] bridge_slave_1: left promiscuous mode [ 723.370609][ T1401] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.554857][ T1401] bridge_slave_0: left allmulticast mode [ 723.554893][ T1401] bridge_slave_0: left promiscuous mode [ 723.555075][ T1401] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.815054][ T1401] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 725.009683][ T1401] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 725.124026][ T1401] bond0 (unregistering): Released all slaves [ 725.151396][T10685] kthread_run failed with err -4 [ 730.848046][ T1401] hsr_slave_0: left promiscuous mode [ 730.921235][ T1401] hsr_slave_1: left promiscuous mode [ 730.922336][ T1401] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 730.941104][ T9932] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 731.019091][ T9932] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 731.020792][ T9932] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 731.048458][ T9932] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 731.049183][ T9932] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 731.055763][ T1401] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 732.561199][T10746] libceph: resolve '0..' (ret=-3): failed [ 732.656284][ T5905] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 732.879555][T10748] gfs2: error -5 reading superblock [ 733.217968][ T9932] Bluetooth: hci6: command tx timeout [ 733.474414][ T5905] usb 5-1: Using ep0 maxpacket: 16 [ 733.479983][ T5905] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 733.480035][ T5905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 733.480054][ T5905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 733.480065][ T5905] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 733.480089][ T5905] usb 5-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 733.480100][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.495782][ T5905] usb 5-1: config 0 descriptor?? [ 734.163822][ T5816] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 734.164078][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 734.299269][ T5905] usbhid 5-1:0.0: can't add hid device: -71 [ 734.299342][ T5905] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 734.326462][ T5816] usb 2-1: device descriptor read/64, error -32 [ 734.410881][ T5905] usb 5-1: USB disconnect, device number 13 [ 734.615404][ T5816] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 734.704438][ T1401] team0 (unregistering): Port device team_slave_1 removed [ 734.773798][ T5816] usb 2-1: Using ep0 maxpacket: 8 [ 734.776556][ T5816] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 734.776595][ T5816] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 734.776630][ T5816] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 734.776644][ T5816] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 734.776656][ T5816] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 734.776669][ T5816] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 734.776682][ T5816] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 734.776695][ T5816] usb 2-1: config 168 interface 0 has no altsetting 0 [ 734.777784][ T5816] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 734.777817][ T5816] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 734.777862][ T5816] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 734.777884][ T5816] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 734.777896][ T5816] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 734.777909][ T5816] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 734.777922][ T5816] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 734.777935][ T5816] usb 2-1: config 168 interface 0 has no altsetting 0 [ 734.779040][ T5816] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 734.779072][ T5816] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 734.779114][ T5816] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 734.779132][ T5816] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 734.779145][ T5816] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 734.779161][ T5816] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 734.779185][ T5816] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 734.779210][ T5816] usb 2-1: config 168 interface 0 has no altsetting 0 [ 734.782514][ T5816] usb 2-1: string descriptor 0 read error: -22 [ 734.782626][ T5816] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 734.782639][ T5816] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.786955][ T1401] team0 (unregistering): Port device team_slave_0 removed [ 735.304533][ T9932] Bluetooth: hci6: command tx timeout [ 735.989320][T10755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 736.048023][T10755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 736.075746][ T5816] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 736.475867][ T5816] usb 2-1: USB disconnect, device number 10 [ 736.744399][T10756] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1262'. [ 736.744422][T10756] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1262'. [ 737.960335][ T9932] Bluetooth: hci6: command tx timeout [ 737.987559][T10573] chnl_net:caif_netlink_parms(): no params data found [ 739.902898][T10573] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.905707][T10573] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.906007][T10573] bridge_slave_0: entered allmulticast mode [ 739.983139][T10789] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1271'. [ 740.052056][T10578] Bluetooth: hci6: command tx timeout [ 741.019801][T10573] bridge_slave_0: entered promiscuous mode [ 741.029445][T10573] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.029733][T10573] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.030034][T10573] bridge_slave_1: entered allmulticast mode [ 741.035084][T10573] bridge_slave_1: entered promiscuous mode [ 741.484358][T10573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 741.519161][T10573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 741.878166][T10573] team0: Port device team_slave_0 added [ 741.899081][T10573] team0: Port device team_slave_1 added [ 741.904985][ T5905] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 742.017275][T10573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 742.017291][T10573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 742.017315][T10573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 742.077282][ T5905] usb 4-1: Using ep0 maxpacket: 32 [ 742.079679][ T5905] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 742.079709][ T5905] usb 4-1: config 0 has no interface number 0 [ 742.079758][ T5905] usb 4-1: config 0 interface 12 has no altsetting 0 [ 742.082341][ T5905] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 742.082369][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.082389][ T5905] usb 4-1: Product: syz [ 742.082403][ T5905] usb 4-1: Manufacturer: syz [ 742.082417][ T5905] usb 4-1: SerialNumber: syz [ 742.171569][T10573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 742.171585][T10573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 742.171611][T10573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 742.542887][ T5905] usb 4-1: config 0 descriptor?? [ 744.088644][ T5905] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 744.088712][ T5905] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 744.088729][ T5905] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 744.088814][ T5905] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 744.181494][ T5905] usb 4-1: USB disconnect, device number 9 [ 744.542838][T10573] hsr_slave_0: entered promiscuous mode [ 744.552396][T10573] hsr_slave_1: entered promiscuous mode [ 744.560014][T10573] debugfs: 'hsr0' already exists in 'hsr' [ 744.560041][T10573] Cannot create hsr debugfs directory [ 744.697468][T10734] chnl_net:caif_netlink_parms(): no params data found [ 745.010922][ T1401] bridge_slave_1: left allmulticast mode [ 745.010950][ T1401] bridge_slave_1: left promiscuous mode [ 745.011214][ T1401] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.324617][ T1401] bridge_slave_0: left allmulticast mode [ 745.324637][ T1401] bridge_slave_0: left promiscuous mode [ 745.324824][ T1401] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.375048][T10824] netlink: 'syz.4.1281': attribute type 1 has an invalid length. [ 745.727550][ T1401] bridge_slave_1: left allmulticast mode [ 745.743830][ T1401] bridge_slave_1: left promiscuous mode [ 746.403503][ T1401] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.694012][ T1401] bridge_slave_0: left allmulticast mode [ 746.694042][ T1401] bridge_slave_0: left promiscuous mode [ 746.694318][ T1401] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.470146][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.475558][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.126365][ T1401] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 750.634876][ T38] INFO: task syz-executor:5831 blocked for more than 143 seconds. [ 750.634925][ T38] Tainted: G L syzkaller #0 [ 750.634936][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 750.634954][ T38] task:syz-executor state:D stack:21160 pid:5831 tgid:5831 ppid:1 task_flags:0x400140 flags:0x00080002 [ 750.635002][ T38] Call Trace: [ 750.635009][ T38] [ 750.635022][ T38] __schedule+0x169e/0x54f0 [ 750.635071][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 750.635095][ T38] ? rt_spin_lock+0x1e0/0x400 [ 750.635121][ T38] ? __pfx___schedule+0x10/0x10 [ 750.635157][ T38] ? schedule+0x90/0x360 [ 750.635186][ T38] schedule+0x164/0x360 [ 750.635213][ T38] fuse_chan_wait_aborted+0x15b/0x250 [ 750.635238][ T38] ? __pfx_fuse_chan_wait_aborted+0x10/0x10 [ 750.635259][ T38] ? __pfx_autoremove_wake_function+0x10/0x10 [ 750.635282][ T38] ? __pfx_fuse_chan_abort+0x10/0x10 [ 750.635301][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 750.635328][ T38] fuse_conn_destroy+0x1e7/0x3e0 [ 750.635354][ T38] ? __pfx_fuse_conn_destroy+0x10/0x10 [ 750.635376][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 750.635394][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 750.635413][ T38] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 750.635439][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 750.635464][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 750.635482][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 750.635500][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 750.635521][ T38] fuse_kill_sb_anon+0x1ef/0x270 [ 750.635549][ T38] deactivate_locked_super+0xbc/0x130 [ 750.635572][ T38] cleanup_mnt+0x437/0x4d0 [ 750.635597][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 750.635619][ T38] task_work_run+0x1d9/0x270 [ 750.635647][ T38] ? __pfx_task_work_run+0x10/0x10 [ 750.635678][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.635698][ T38] exit_to_user_mode_loop+0xed/0x480 [ 750.635720][ T38] ? rcu_is_watching+0x15/0xb0 [ 750.635746][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.635766][ T38] do_syscall_64+0x33e/0xf80 [ 750.635784][ T38] ? trace_irq_disable+0x3b/0x140 [ 750.635806][ T38] ? clear_bhb_loop+0x40/0x90 [ 750.635828][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.635846][ T38] RIP: 0033:0x7fd5cde7da57 [ 750.635885][ T38] RSP: 002b:00007ffc4d012278 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 750.635904][ T38] RAX: 0000000000000000 RBX: 00007fd5cdf12048 RCX: 00007fd5cde7da57 [ 750.635917][ T38] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc4d012330 [ 750.635929][ T38] RBP: 00007ffc4d012330 R08: 00007ffc4d013330 R09: 00000000ffffffff [ 750.635949][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc4d0133c0 [ 750.635961][ T38] R13: 00007fd5cdf12048 R14: 0000000000090139 R15: 00007ffc4d013400 [ 750.635990][ T38] [ 750.636050][ T38] [ 750.636050][ T38] Showing all locks held in the system: [ 750.636063][ T38] 1 lock held by khungtaskd/38: [ 750.636074][ T38] #0: ffffffff8dfc8100 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 750.636124][ T38] 3 locks held by kworker/u8:2/40: [ 750.636134][ T38] #0: ffff88813fe7c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x890/0x1710 [ 750.636177][ T38] #1: ffffc90000b17c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710 [ 750.636247][ T38] #2: ffffffff8f381a38 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 750.636306][ T38] 4 locks held by kworker/u8:9/1401: [ 750.636316][ T38] #0: ffff88801b686138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x890/0x1710 [ 750.636356][ T38] #1: ffffc90006e7fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710 [ 750.636397][ T38] #2: ffffffff8f3729c0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 750.636438][ T38] #3: ffffffff8f381a38 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x940 [ 750.636494][ T38] 2 locks held by getty/5587: [ 750.636504][ T38] #0: ffff8880377850a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 750.636547][ T38] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 750.636596][ T38] 1 lock held by syz-executor/5831: [ 750.636606][ T38] #0: ffff888031f7a0d0 (&type->s_umount_key#58){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 750.636654][ T38] 2 locks held by syz-executor/5833: [ 750.636664][ T38] #0: ffff888036f3e480 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 750.636714][ T38] #1: ffffffff8dfc8100 (rcu_read_lock){....}-{1:3}, at: percpu_ref_put+0x19/0x180 [ 750.636767][ T38] 3 locks held by kworker/1:6/5905: [ 750.636783][ T38] #0: ffff88813fe3b938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x890/0x1710 [ 750.636825][ T38] #1: ffffc90004c87c40 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710 [ 750.636865][ T38] #2: ffffffff8f381a38 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 750.636914][ T38] 2 locks held by syz-executor/10573: [ 750.636924][ T38] #0: ffffffff8ead3568 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 750.636977][ T38] #1: ffffffff8f381a38 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 750.637019][ T38] 2 locks held by syz-executor/10734: [ 750.637029][ T38] #0: ffffffff8f8d5538 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 750.637076][ T38] #1: ffffffff8f381a38 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 750.637118][ T38] 2 locks held by syz.3.1280/10818: [ 750.637178][ T38] #0: ffffffff8f3f1600 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 750.637225][ T38] #1: ffffffff8f381a38 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5f/0x8d0 [ 750.637273][ T38] [ 750.637278][ T38] ============================================= [ 750.637278][ T38] [ 750.637294][ T38] NMI backtrace for cpu 1 [ 750.637309][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 750.637334][ T38] Tainted: [L]=SOFTLOCKUP [ 750.637340][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 750.637349][ T38] Call Trace: [ 750.637356][ T38] [ 750.637364][ T38] dump_stack_lvl+0xe8/0x150 [ 750.637384][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 750.637406][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 750.637426][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 750.637451][ T38] sys_info+0x135/0x170 [ 750.637471][ T38] watchdog+0xfd3/0x1030 [ 750.637498][ T38] ? watchdog+0x1c9/0x1030 [ 750.637523][ T38] kthread+0x388/0x470 [ 750.637545][ T38] ? __pfx_watchdog+0x10/0x10 [ 750.637562][ T38] ? __pfx_kthread+0x10/0x10 [ 750.637585][ T38] ret_from_fork+0x514/0xb70 [ 750.637608][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 750.637628][ T38] ? __switch_to+0xc79/0x1410 [ 750.637654][ T38] ? __pfx_kthread+0x10/0x10 [ 750.637677][ T38] ret_from_fork_asm+0x1a/0x30 [ 750.637712][ T38] [ 750.637719][ T38] Sending NMI from CPU 1 to CPUs 0: [ 750.637745][ C0] NMI backtrace for cpu 0 [ 750.637760][ C0] CPU: 0 UID: 0 PID: 10851 Comm: syz.1.1288 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 750.637780][ C0] Tainted: [L]=SOFTLOCKUP [ 750.637784][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 750.637792][ C0] RIP: 0010:__lock_acquire+0xa54/0x2cf0 [ 750.637813][ C0] Code: c7 c6 c1 3f 76 8d 67 48 0f b9 3a 90 31 c0 48 83 78 40 00 0f 84 5f 1d 00 00 41 8b 45 20 25 ff 1f 00 00 48 0f a3 05 9c ae dd 11 <73> 10 48 69 c0 c8 00 00 00 48 8d 80 30 23 1f 93 eb 32 83 3d a3 3e [ 750.637826][ C0] RSP: 0018:ffffc90005ee74c8 EFLAGS: 00000007 [ 750.637838][ C0] RAX: 000000000000084b RBX: 00000000761fb457 RCX: 0000000002194efd [ 750.637848][ C0] RDX: 0000000055502949 RSI: 00000000305708f4 RDI: ffff88802dc03d80 [ 750.637859][ C0] RBP: e880cab800000000 R08: ffffffff89d402f2 R09: ffff88803cd25ff0 [ 750.637869][ C0] R10: ffffc90005ee7780 R11: fffff52000bdcef4 R12: ffff88802dc04978 [ 750.637880][ C0] R13: ffff88802dc04978 R14: ffff88802dc03d80 R15: 0000000000000000 [ 750.637890][ C0] FS: 00007f4d52e0d6c0(0000) GS:ffff888125eba000(0000) knlGS:0000000000000000 [ 750.637903][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 750.637913][ C0] CR2: 000020000035e030 CR3: 000000004162c000 CR4: 00000000003526f0 [ 750.637926][ C0] Call Trace: [ 750.637932][ C0] [ 750.637939][ C0] ? put_pid+0xd8/0x130 [ 750.637957][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 750.637975][ C0] ? __unix_dgram_recvmsg+0x1e2/0xd60 [ 750.637988][ C0] lock_acquire+0x106/0x350 [ 750.638004][ C0] ? __unix_dgram_recvmsg+0x1e2/0xd60 [ 750.638020][ C0] ? __unix_dgram_recvmsg+0x1e2/0xd60 [ 750.638035][ C0] ? __unix_dgram_recvmsg+0x1e2/0xd60 [ 750.638047][ C0] mutex_lock_nested+0x5a/0x1d0 [ 750.638064][ C0] ? __unix_dgram_recvmsg+0x1e2/0xd60 [ 750.638079][ C0] __unix_dgram_recvmsg+0x1e2/0xd60 [ 750.638096][ C0] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 750.638111][ C0] ? irqentry_exit+0x218/0x730 [ 750.638124][ C0] ? trace_irq_disable+0x3b/0x140 [ 750.638141][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 750.638159][ C0] ? unix_dgram_recvmsg+0xae/0xd0 [ 750.638174][ C0] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 750.638191][ C0] sock_recvmsg_nosec+0x10c/0x140 [ 750.638216][ C0] ____sys_recvmsg+0x23d/0x4f0 [ 750.638236][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 750.638259][ C0] ? import_iovec+0x73/0xa0 [ 750.638275][ C0] ___sys_recvmsg+0x215/0x590 [ 750.638294][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 750.638312][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 750.638325][ C0] ? irqentry_exit+0x218/0x730 [ 750.638349][ C0] do_recvmmsg+0x33a/0x800 [ 750.638369][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 750.638390][ C0] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 750.638408][ C0] ? rt_spin_lock+0x1e0/0x400 [ 750.638425][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 750.638446][ C0] __x64_sys_recvmmsg+0x198/0x250 [ 750.638465][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 750.638485][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.638499][ C0] do_syscall_64+0x15f/0xf80 [ 750.638513][ C0] ? trace_irq_disable+0x3b/0x140 [ 750.638527][ C0] ? clear_bhb_loop+0x40/0x90 [ 750.638542][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.638555][ C0] RIP: 0033:0x7f4d54bdc819 [ 750.638567][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 750.638578][ C0] RSP: 002b:00007f4d52e0d028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 750.638592][ C0] RAX: ffffffffffffffda RBX: 00007f4d54e56090 RCX: 00007f4d54bdc819 [ 750.638603][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 750.638611][ C0] RBP: 00007f4d54c72c91 R08: 0000000000000000 R09: 0000000000000000 [ 750.638620][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 750.638628][ C0] R13: 00007f4d54e56128 R14: 00007f4d54e56090 R15: 00007fff6e630f18 [ 750.638645][ C0] [ 750.638752][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 750.638767][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 750.638790][ T38] Tainted: [L]=SOFTLOCKUP [ 750.638796][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 750.638805][ T38] Call Trace: [ 750.638813][ T38] [ 750.638820][ T38] vpanic+0x56c/0xa60 [ 750.638844][ T38] ? __pfx_vpanic+0x10/0x10 [ 750.638873][ T38] panic+0xc5/0xd0 [ 750.638892][ T38] ? __pfx_panic+0x10/0x10 [ 750.638920][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 750.638952][ T38] watchdog+0x102c/0x1030 [ 750.638978][ T38] ? watchdog+0x1c9/0x1030 [ 750.639003][ T38] kthread+0x388/0x470 [ 750.639026][ T38] ? __pfx_watchdog+0x10/0x10 [ 750.639044][ T38] ? __pfx_kthread+0x10/0x10 [ 750.639067][ T38] ret_from_fork+0x514/0xb70 [ 750.639089][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 750.639108][ T38] ? __switch_to+0xc79/0x1410 [ 750.639135][ T38] ? __pfx_kthread+0x10/0x10 [ 750.639158][ T38] ret_from_fork_asm+0x1a/0x30 [ 750.639192][ T38] [ 750.639784][ T38] Kernel Offset: disabled