last executing test programs: 26m55.818704075s ago: executing program 1 (id=125): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_tracing={0x1a, 0x22, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xe2bd}, [@exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @exit, @alu={0x7, 0x0, 0xb, 0x5, 0x8, 0xffffffffffffffff, 0xffffffffffffffff}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @jmp={0x5, 0x1, 0x0, 0x9, 0x3, 0x30, 0xffffffffffffffff}, @tail_call, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @ringbuf_query]}, &(0x7f0000000580)='syzkaller\x00', 0x48980000, 0x98, &(0x7f0000000780)=""/152, 0x40f00, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000980)={0x0, 0x10, 0x48, 0xaa00}, 0x10, 0x28c21, 0xffffffffffffffff, 0x6, &(0x7f00000009c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x3, 0x2, 0x9, 0xc}, {0x1, 0x5, 0x2, 0x9}, {0x2, 0x1, 0xc, 0xc}, {0x2, 0x5, 0xe, 0x8}, {0x3, 0x2, 0xb, 0x2}, {0x3, 0x3, 0xb, 0x1}], 0x10, 0xffffffff}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x34}, 0x0, 0x1, 0x0, 0x4, 0xfa, 0x9b0}, 0x20) 26m54.190354662s ago: executing program 1 (id=128): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x109001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00f287b5ffffffffffffaaaaaaaaaaaa08000700001c0000e000002f"], 0x2e) 26m52.054750994s ago: executing program 1 (id=136): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1e9c02, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getrlimit(0xe896177c859f8e86, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r5}, 0x10) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) syz_open_pts(r0, 0x0) 26m48.283584039s ago: executing program 1 (id=141): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', 0x0, 0x0, 0x101097, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x260) 26m47.562877169s ago: executing program 1 (id=143): syz_emit_ethernet(0xc1, &(0x7f0000000e40)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x2, 0x6, "96e26d", 0x8b, 0x73, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@dstopts={0x32}, @routing={0x88, 0x2, 0x2, 0x6e, 0x0, [@dev={0xfe, 0x80, '\x00', 0x26}]}, @srh={0x6c, 0x0, 0x4, 0x0, 0x6c, 0x10, 0x6}, @srh={0x88, 0x2, 0x4, 0x1, 0x7, 0x30, 0x6, [@mcast2]}, @hopopts={0x3b}, @hopopts={0x3c}], "4359acca4a6ccbfe47d149b06c9284debc624a02e27fba0adea7dd667300a0b26c492d9dd7fd020000009a7b7477a4a6e3ca412c27557c43232edf"}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) migrate_pages(0x0, 0x4, &(0x7f00000002c0)=0x7f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000240)=0x7) bind$ax25(r2, &(0x7f0000000540)={{0x3, @bcast, 0x100001}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @default, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) futimesat(0xffffffffffffffff, 0x0, 0x0) connect$ax25(r2, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x48) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0x0) 26m39.743417777s ago: executing program 1 (id=155): dup(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, 0x0, 0x8}, &(0x7f0000000080)={0x6, 0x0, 0x0, 0x0, 0x0, 0x90000, 0x40}, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800900010076657468000000", @ANYBLOB], 0x48}}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) 26m38.524167171s ago: executing program 32 (id=155): dup(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, 0x0, 0x8}, &(0x7f0000000080)={0x6, 0x0, 0x0, 0x0, 0x0, 0x90000, 0x40}, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800900010076657468000000", @ANYBLOB], 0x48}}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) 26m19.831745014s ago: executing program 0 (id=191): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) close(r4) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="340000001900150000000000000000000a0000000002000000020000180009801400e3fffe8000"/48], 0x34}], 0x1}, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) 26m15.553425517s ago: executing program 0 (id=194): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000160a0500000000000000000002000000300003802c00038004000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 26m14.193619934s ago: executing program 0 (id=197): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90010000060a0b0400000000000000000200000064010480600101800a0001006d617463680000005001028008000240000000000b000100706f6c696379000038010300ebae551382395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad51f6d123a616cf3eb44b275fe6bc6bf402a3f9335458bb7a92f23fc0aa88f2495ff70157ea6b29f7fab11ec362920cab3350208c749f342b38e0df9334cea6fe1e331d76beb7094102d5d409992dcd236e3fd7a8785f97ae9d01b0822c161a491bef0501f8e81ddd66d1b676e8c9f0b2159c2cc0b069669b5a4f159d6e5fe8e31627181d27d9c185aae5d910550f08822c6fec60302779b9e812403a2ff826781b4c761bd14eb7515ae224260c9534891afdd05d18b2ffe91f4052766a0b9fe3955bfb1866142e7c1caceb88de7d6e8a5c08ce052bb461469a72f0c7ee914ca5c98c19442d0262a6d04a8e3e29360a9b5871812e08542d54775f5843d70b15871bc247e30d66b87901a2e8f50900010073797a30000000000900020073797a32"], 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) setxattr$security_ima(0x0, &(0x7f0000000000), 0x0, 0xa, 0x3) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044081}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e08092320"], 0xb) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) 26m13.1248641s ago: executing program 0 (id=198): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) rmdir(0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE(r4, 0x5000940c, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0xf) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x40000000015, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) unshare(0x24060400) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1a000, 0x4, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x7ff, 0x2}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x1, 0xb, 0x7fffffff, 0x2}, 0x0, 0x0) ioctl$TCFLSH(r5, 0x400455c8, 0x40000000000) 26m10.030003731s ago: executing program 0 (id=203): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) close(r4) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="340000001900150000000000000000000a0000000002000000020000180009801400e3fffe8000"/48], 0x34}], 0x1}, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) 26m6.734517199s ago: executing program 0 (id=209): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x6c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3d, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0xfffffffffffffffe, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @void, @void, @val={0x25, 0x3, {0x0, 0x95}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xdcb}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000045}, 0x0) 25m51.013004224s ago: executing program 33 (id=209): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x6c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3d, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0xfffffffffffffffe, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @void, @void, @val={0x25, 0x3, {0x0, 0x95}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xdcb}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000045}, 0x0) 25m15.498376949s ago: executing program 3 (id=284): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = gettid() tkill(r3, 0xb) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r5) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r6, 0xe01, 0x70bd2d, 0x25dfdbfc}, 0x1c}}, 0x24048800) 25m14.299994795s ago: executing program 3 (id=286): syz_emit_ethernet(0xc1, &(0x7f0000000e40)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x2, 0x6, "96e26d", 0x8b, 0x73, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@dstopts={0x32}, @routing={0x88, 0x2, 0x2, 0x6e, 0x0, [@dev={0xfe, 0x80, '\x00', 0x26}]}, @srh={0x6c, 0x0, 0x4, 0x0, 0x6c, 0x10, 0x6}, @srh={0x88, 0x2, 0x4, 0x1, 0x7, 0x30, 0x6, [@mcast2]}, @hopopts={0x3b}, @hopopts={0x3c}], "4359acca4a6ccbfe47d149b06c9284debc624a02e27fba0adea7dd667300a0b26c492d9dd7fd020000009a7b7477a4a6e3ca412c27557c43232edf"}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) migrate_pages(0x0, 0x4, &(0x7f00000002c0)=0x7f, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000240)=0x7) bind$ax25(r2, &(0x7f0000000540)={{0x3, @bcast, 0x100001}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @default, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) futimesat(0xffffffffffffffff, 0x0, 0x0) connect$ax25(r2, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x48) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0x0) 25m13.291264696s ago: executing program 3 (id=287): r0 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0585611, &(0x7f00000000c0)={0xfffffffe, 0xc, 0x0, "3e58f67896b2f2098200a2aff604cb7ef87e7610bc39ef64257f5d3300"}) 25m13.017742396s ago: executing program 3 (id=288): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendto$inet(r3, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 25m10.454470495s ago: executing program 3 (id=291): openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socket$inet_smc(0x2b, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000206050000000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a30000000000500040000400000050005000a000000050001000600000014000780080006400000000008001340"], 0x64}}, 0x24002800) 25m9.270697367s ago: executing program 3 (id=294): unshare(0x66000080) r0 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) r2 = gettid() sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r1, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r2], 0x28}}, 0x0) 24m54.002058718s ago: executing program 34 (id=294): unshare(0x66000080) r0 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) r2 = gettid() sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r1, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r2], 0x28}}, 0x0) 4m39.561271857s ago: executing program 2 (id=2056): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x1, 0xffffffffffffffff, 0x0, 0x0}) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a83, 0x2c2) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r5, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, 0x4}, 0x1c) 4m38.392343999s ago: executing program 2 (id=2059): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000540), 0x0, 0xc0) recvmmsg(r4, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000740)=""/96, 0x7}, {&(0x7f0000000940)=""/53, 0x35}], 0x2}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000840)=""/116, 0x74}], 0x1}, 0x9}], 0x2, 0x10000, 0x0) 4m37.187787964s ago: executing program 2 (id=2061): r0 = syz_io_uring_setup(0x4b7, &(0x7f0000000480)={0x0, 0x773a, 0x80, 0x6, 0x377}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 4m36.526847037s ago: executing program 2 (id=2063): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100"/15], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002940), 0x40000000000017d, 0x811) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r5 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r5) 4m35.422381555s ago: executing program 2 (id=2066): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) setxattr$security_ima(0x0, &(0x7f0000000000), 0x0, 0xa, 0x3) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044081}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0xb) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) 4m32.135335961s ago: executing program 2 (id=2071): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$gtp(0x0, r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f0000000480)='y\x105\x14\xf8u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\x15]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xb4\x95\xd1\xc8s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV\x06\xee\x91\'\xae\x9c\x06\xb2\xd4\xfa,\xc0\xca\xd90$\xd7\xfe\xae\xddf?$\xb1\xeeE\b\xbc\xd1[\xd5tO`Z\x15 1\v\xa6\xd0[K!+>,FE\x10\t\xbb\x90Jj\xb8{', 0x2) fcntl$addseals(r3, 0x409, 0x7) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000100)={r3, 0x0, 0x0, 0x1000000}) r4 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f00000002c0)={r3, 0x1, 0x1000, 0x1000000}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x19, 0x0, 0x0) sendmmsg$inet(r5, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{0x0}], 0x1}}], 0x1, 0x20008000) openat$binderfs(0xffffffffffffff9c, 0x0, 0x801, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) 3m54.735273558s ago: executing program 6 (id=2136): r0 = openat$userio(0xffffffffffffff9c, 0x0, 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x1}, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) read(r0, &(0x7f0000000300)=""/4096, 0x1000) 3m54.148816723s ago: executing program 6 (id=2137): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x4b) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000000000004}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x10001400200bd2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x10800, 0x15) getdents(r0, 0x0, 0x58) read$msr(0xffffffffffffffff, &(0x7f0000002700)=""/102392, 0x18ff8) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000000)='./cgroup\x00', 0x0, 0x10008, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x24) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='map_files\x00') getdents(r1, &(0x7f0000000000)=""/159, 0x9f) 3m53.754413046s ago: executing program 6 (id=2138): openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x2) mount(0x0, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000080)='udf\x00', 0x2008087, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x102, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0902, 0x8004, '\x00', @p_u8=0x0}}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4c050) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000fc02000000000000"], 0xfc}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}}, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) getgroups(0x0, 0x0) mount$bpf(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), 0x800000, &(0x7f0000000800)=ANY=[]) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 3m52.408569502s ago: executing program 6 (id=2140): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) set_mempolicy_home_node(&(0x7f0000462000/0x1000)=nil, 0x1000, 0x200000000000004, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_dev$vbi(&(0x7f0000000280), 0x1, 0x2) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x24000050}, 0x44880) r3 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r3, &(0x7f0000001400)=""/4076, 0xfffffeea) 3m51.991493003s ago: executing program 6 (id=2141): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100"/15], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002940), 0x40000000000017d, 0x811) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r5 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r5) 3m50.771444143s ago: executing program 6 (id=2144): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) recvfrom$inet_nvme(r2, &(0x7f0000000480)=""/204, 0xcc, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r4 = add_key$keyring(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r4, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000400)='ex\x0f\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb\x8e1w\xfd') mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks']) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x58, r6, 0x1, 0x4, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x1) writev(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000080)='+', 0x1}], 0x2) 3m35.252924544s ago: executing program 35 (id=2144): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) recvfrom$inet_nvme(r2, &(0x7f0000000480)=""/204, 0xcc, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r4 = add_key$keyring(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r4, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000400)='ex\x0f\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb\x8e1w\xfd') mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks']) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x58, r6, 0x1, 0x4, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x1) writev(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000080)='+', 0x1}], 0x2) 2m19.149350355s ago: executing program 4 (id=2271): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x3, 0xff) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20044000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r2) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r4, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) ioctl$SIOCRSGCAUSE(r4, 0x89e0, &(0x7f0000000240)) 2m18.163190837s ago: executing program 4 (id=2272): r0 = creat(0x0, 0x0) gettid() ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0) listen(0xffffffffffffffff, 0x1ad72f7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r1 = socket$l2tp(0x2, 0x2, 0x73) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) recvfrom$l2tp(r1, 0x0, 0x0, 0x40010120, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x26) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = syz_open_dev$video4linux(0x0, 0x71, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc0585605, &(0x7f00000005c0)={0x0, 0x0, @raw_data=[0xb, 0x400008, 0x3007, 0x1, 0x8, 0x7f, 0xff, 0x6, 0x7, 0x8, 0x5, 0xd60, 0x80000004, 0x4, 0x1, 0xeb]}) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x1, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0xa2) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, 0x0, 0x14) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r4, &(0x7f0000000040)={0x24, @short={0x2, 0xffff, 0xfffe}}, 0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601040000000000000000070000001400078008001140000000000800124000040c8f0500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c706f7274"], 0x60}}, 0x20004000) 2m15.24002244s ago: executing program 4 (id=2277): syz_io_uring_setup(0x4f9, &(0x7f00000000c0)={0x0, 0x8d2dd, 0x8, 0xffffffff}, &(0x7f00000003c0), &(0x7f0000000040)) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000200), 0x3, r1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000540)={0x200, 0x1, &(0x7f00000005c0)=[r1], &(0x7f0000000600)=[0x3], &(0x7f0000000580)=[r2], &(0x7f0000000040), 0x0, 0x200}) 2m15.102995264s ago: executing program 4 (id=2279): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000b80)={0x0, 0x0, 0x10100, 0x0, 0x33a}, &(0x7f0000000300)=0x0, &(0x7f00000004c0)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x40, 0x0, 0x0) 2m14.910414999s ago: executing program 4 (id=2280): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000600)={r3, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r4, 0x0, 0x0, r5], [0x2b8]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000100)=r6) 2m14.863661535s ago: executing program 4 (id=2281): socket$inet6(0xa, 0x3, 0xff) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r1, 0x4, 0x40800) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f00000000c0), &(0x7f0000000100)=r3}, 0x20) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0xe) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events.local\x00', 0x275a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast1, @broadcast}, &(0x7f00000001c0)=0xc) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x20082, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x2c, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x00\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c000}, 0xc000) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="180000003c000bab956cb26f8c7d94f90324fc602f000000", 0x18}], 0x1}, 0x40) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCADDRT(r8, 0x890b, &(0x7f0000000300)={0x0, @ethernet={0x306, @random="fc06839d09fe"}, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x1, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)='bridge_slave_1\x00', 0x6, 0x7, 0x9}) 1m59.499507408s ago: executing program 36 (id=2281): socket$inet6(0xa, 0x3, 0xff) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r1, 0x4, 0x40800) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f00000000c0), &(0x7f0000000100)=r3}, 0x20) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0xe) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events.local\x00', 0x275a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast1, @broadcast}, &(0x7f00000001c0)=0xc) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x20082, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x2c, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x00\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c000}, 0xc000) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="180000003c000bab956cb26f8c7d94f90324fc602f000000", 0x18}], 0x1}, 0x40) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCADDRT(r8, 0x890b, &(0x7f0000000300)={0x0, @ethernet={0x306, @random="fc06839d09fe"}, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x1, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)='bridge_slave_1\x00', 0x6, 0x7, 0x9}) 10.195037604s ago: executing program 7 (id=2408): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40000000e, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0x3e, 0x2, 0x457f1c9146f8f874, "464905e100000000000000007f00", 0xb5315241}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="0202200012000000000000000000000004000300fcffffff00000000000000000000010000000043ca00000000000000030006000000000002004e206401010000000000000000000400040000000000feffffffffffffff000000000000000000000000000000000200010000000000b70002fa01000080030005000000000002"], 0x90}}, 0x0) r4 = socket(0x2a, 0x3, 0x5f) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000cc0)=[{0x0}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/97, 0x61}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}, {&(0x7f00000000c0)=""/26, 0x1a}, {&(0x7f0000000100)=""/21, 0x15}, {&(0x7f0000000880)=""/135, 0x87}, {&(0x7f0000000a00)=""/235, 0xeb}, {&(0x7f0000000b00)=""/174, 0xae}, {&(0x7f0000000300)=""/21, 0x15}, {&(0x7f0000000bc0)=""/194, 0xc2}], 0xf, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) syz_init_net_socket$ax25(0x3, 0x2, 0x7) fanotify_mark(0xffffffffffffffff, 0x10, 0x8000030, 0xffffffffffffffff, 0x0) socket$kcm(0x2c, 0x3, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r5, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() r6 = syz_open_dev$radio(&(0x7f0000000140), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r6, 0xc0405665, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socket$nl_route(0x10, 0x3, 0x0) 7.252043997s ago: executing program 7 (id=2411): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) pwritev(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x3, 0x6) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r3, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) 7.203502573s ago: executing program 5 (id=2412): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000640)={0x34, &(0x7f00000004c0)={0x0, 0x13, 0x4, "003f18ad"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.266203405s ago: executing program 7 (id=2413): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000540)={'icmp\x00'}, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x2001004, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x1000040, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative'}}}]}) 3.941788762s ago: executing program 7 (id=2414): r0 = creat(0x0, 0x0) gettid() ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) recvfrom$l2tp(r1, 0x0, 0x0, 0x40010120, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x26) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = syz_open_dev$video4linux(0x0, 0x71, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc0585605, &(0x7f00000005c0)={0x0, 0x0, @raw_data=[0xb, 0x400008, 0x3007, 0x1, 0x8, 0x7f, 0xff, 0x6, 0x7, 0x8, 0x5, 0xd60, 0x80000004, 0x4, 0x1, 0xeb]}) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x1, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0xa2) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, 0x0, 0x14) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r4, &(0x7f0000000040)={0x24, @short={0x2, 0xffff, 0xfffe}}, 0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601040000000000000000070000001400078008001140000000000800124000040c8f0500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c706f7274"], 0x60}}, 0x20004000) 3.795229681s ago: executing program 5 (id=2415): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x3f46137792f68265) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0xc0089364, &(0x7f00000001c0)) 3.323713682s ago: executing program 7 (id=2416): ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064d1, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) lremovexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_default\x00') bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x3, 0x1, @local, 0x3}, 0x1c) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f00000013c0)) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0xffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="00000000000010000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x205, 0x2581) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000040605000000000000000000020000010500010007"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 2.097419641s ago: executing program 5 (id=2417): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) 1.939665283s ago: executing program 5 (id=2418): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40000000e, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0x3e, 0x2, 0x457f1c9146f8f874, "464905e100000000000000007f00", 0xb5315241}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="0202200012000000000000000000000004000300fcffffff00000000000000000000010000000043ca00000000000000030006000000000002004e206401010000000000000000000400040000000000feffffffffffffff000000000000000000000000000000000200010000000000b70002fa01000080030005000000000002"], 0x90}}, 0x0) r4 = socket(0x2a, 0x3, 0x5f) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000cc0)=[{0x0}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/97, 0x61}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}, {&(0x7f00000000c0)=""/26, 0x1a}, {&(0x7f0000000100)=""/21, 0x15}, {&(0x7f0000000880)=""/135, 0x87}, {&(0x7f0000000a00)=""/235, 0xeb}, {&(0x7f0000000b00)=""/174, 0xae}, {&(0x7f0000000300)=""/21, 0x15}, {&(0x7f0000000bc0)=""/194, 0xc2}], 0xf, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) syz_init_net_socket$ax25(0x3, 0x2, 0x7) fanotify_mark(0xffffffffffffffff, 0x10, 0x8000030, 0xffffffffffffffff, 0x0) socket$kcm(0x2c, 0x3, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r5, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() r6 = syz_open_dev$radio(&(0x7f0000000140), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r6, 0xc0405665, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socket$nl_route(0x10, 0x3, 0x0) 168.819809ms ago: executing program 7 (id=2419): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\xfd\x89\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 131.98714ms ago: executing program 5 (id=2420): syz_io_uring_setup(0x4f9, 0x0, &(0x7f00000003c0), &(0x7f0000000040)) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000200), 0x3, r1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000540)={0x200, 0x1, &(0x7f00000005c0)=[r1], &(0x7f0000000600)=[0x3], &(0x7f0000000580)=[r2], &(0x7f0000000040), 0x0, 0x200}) 0s ago: executing program 5 (id=2421): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x12) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0xc00c0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYRES16=r0, @ANYBLOB=',group_id=', @ANYBLOB="852f68482a6e01909326a7f0642e7901337aa5b795006790971410972f2cc0d1a1dfe75e58c847620e7eed283f8ff5b4d5d5b050d0950635c4b68c74c9911bff50d97108526a3c676790a6549ef3d73681a5afbcdd977a9d2f19bd6de22e1f7a63faeaeb9ab89bc8e5558e96f75bf5821ab2146b15d4b8f8ef212f8cde3d2cc6b89765787d13b2a935207e379699198ef4392c5f4010e28210785ec9850a7fb8158b3aa0c0997bd587d4c1d971a671755581db76b5f8dd88cdd5fbbed670b7"]) syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0xff36, 0x8000, 0x2, 0x312}, &(0x7f00000029c0), &(0x7f00000003c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0, 0x1, 0x3}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket(0x40000000015, 0x5, 0x0) recvmmsg(r1, &(0x7f0000003a80), 0x0, 0x60010002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, 0x0) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) kernel console output (not intermixed with test programs): command tx timeout [ 1237.737555][T13527] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1238.674795][ T5839] Bluetooth: hci3: command tx timeout [ 1239.569022][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.569100][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.934112][ T3543] team0 (unregistering): Port device team_slave_1 removed [ 1241.284911][ T5839] Bluetooth: hci3: command tx timeout [ 1241.494292][ T3543] team0 (unregistering): Port device team_slave_0 removed [ 1241.904658][T13557] serio: Serial port ptm0 [ 1243.591439][T13565] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1244.384969][ T49] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1244.550240][ T49] usb 3-1: Using ep0 maxpacket: 8 [ 1244.552857][ T49] usb 3-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 1244.552918][ T49] usb 3-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1244.552945][ T49] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1244.552980][ T49] usb 3-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 1244.553003][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1244.616029][ T49] usb 3-1: config 0 descriptor?? [ 1248.312528][ T49] usbhid 3-1:0.0: can't add hid device: -71 [ 1248.312649][ T49] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1248.320946][ T49] usb 3-1: USB disconnect, device number 67 [ 1250.566090][T13603] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1702'. [ 1250.566163][T13603] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1702'. [ 1250.572160][T13596] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1254.698988][ C1] vkms_vblank_simulate: vblank timer overrun [ 1254.974386][ C1] vkms_vblank_simulate: vblank timer overrun [ 1254.999076][T13611] syz.4.1703 (13611): drop_caches: 2 [ 1255.886297][ C1] vkms_vblank_simulate: vblank timer overrun [ 1256.058287][ C1] vkms_vblank_simulate: vblank timer overrun [ 1256.104932][ T5992] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1256.189985][ C1] vkms_vblank_simulate: vblank timer overrun [ 1256.254995][ T5992] usb 5-1: Using ep0 maxpacket: 8 [ 1256.257916][ T5992] usb 5-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 1256.257964][ T5992] usb 5-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1256.257988][ T5992] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1256.258020][ T5992] usb 5-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 1256.258040][ T5992] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1256.338871][ T5992] usb 5-1: config 0 descriptor?? [ 1256.517740][ C1] vkms_vblank_simulate: vblank timer overrun [ 1256.629678][ C1] vkms_vblank_simulate: vblank timer overrun [ 1256.757006][ T5992] usbhid 5-1:0.0: can't add hid device: -71 [ 1256.757109][ T5992] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1256.779560][ T5992] usb 5-1: USB disconnect, device number 67 [ 1256.883278][ C1] vkms_vblank_simulate: vblank timer overrun [ 1257.323597][ C1] vkms_vblank_simulate: vblank timer overrun [ 1257.458255][ C1] vkms_vblank_simulate: vblank timer overrun [ 1257.528610][ C1] vkms_vblank_simulate: vblank timer overrun [ 1257.753872][ C1] vkms_vblank_simulate: vblank timer overrun [ 1257.942840][ C1] vkms_vblank_simulate: vblank timer overrun [ 1258.109045][ C1] vkms_vblank_simulate: vblank timer overrun [ 1258.521551][T13644] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1259.885343][T13298] bridge0: port 1(bridge_slave_0) entered blocking state [ 1259.886958][T13298] bridge0: port 1(bridge_slave_0) entered disabled state [ 1259.888987][T13298] bridge_slave_0: entered allmulticast mode [ 1260.142468][T13298] bridge_slave_0: entered promiscuous mode [ 1260.279698][T13298] bridge0: port 2(bridge_slave_1) entered blocking state [ 1260.279844][T13298] bridge0: port 2(bridge_slave_1) entered disabled state [ 1260.280059][T13298] bridge_slave_1: entered allmulticast mode [ 1260.309632][T13298] bridge_slave_1: entered promiscuous mode [ 1261.008735][ C0] vkms_vblank_simulate: vblank timer overrun [ 1261.039478][T13298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1261.094061][T13298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1261.129505][ C0] vkms_vblank_simulate: vblank timer overrun [ 1261.312803][ C0] vkms_vblank_simulate: vblank timer overrun [ 1261.470739][ C0] vkms_vblank_simulate: vblank timer overrun [ 1261.649568][ C0] vkms_vblank_simulate: vblank timer overrun [ 1261.944324][T13668] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1718'. [ 1262.375072][ C0] vkms_vblank_simulate: vblank timer overrun [ 1263.291058][ T3543] bridge_slave_1: left allmulticast mode [ 1263.291094][ T3543] bridge_slave_1: left promiscuous mode [ 1263.291341][ T3543] bridge0: port 2(bridge_slave_1) entered disabled state [ 1263.379855][ T3543] bridge_slave_0: left allmulticast mode [ 1263.380774][ T3543] bridge_slave_0: left promiscuous mode [ 1263.381060][ T3543] bridge0: port 1(bridge_slave_0) entered disabled state [ 1264.115122][T13684] fuse: Unknown parameter 'user_id00000000000000000000' [ 1264.286664][ C0] vkms_vblank_simulate: vblank timer overrun [ 1264.462443][ C0] vkms_vblank_simulate: vblank timer overrun [ 1264.717156][ C0] vkms_vblank_simulate: vblank timer overrun [ 1265.036317][ C0] vkms_vblank_simulate: vblank timer overrun [ 1266.676592][ T3543] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1267.146327][ T9089] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1267.159895][ T9089] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1267.164230][ T9089] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1267.168801][ T9089] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1267.169677][ T9089] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1268.472248][ C1] vkms_vblank_simulate: vblank timer overrun [ 1268.941214][ C1] vkms_vblank_simulate: vblank timer overrun [ 1269.016878][ T3543] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1269.082703][T13718] tmpfs: Bad value for 'mpol' [ 1269.137394][ T3543] bond0 (unregistering): Released all slaves [ 1269.237600][ T5839] Bluetooth: hci0: command tx timeout [ 1269.375337][T13721] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1728'. [ 1270.076843][T13724] fuse: Unknown parameter 'user_id00000000000000000000' [ 1270.644855][ T3543] hsr_slave_0: left promiscuous mode [ 1270.694943][ T3543] hsr_slave_1: left promiscuous mode [ 1270.695714][ T3543] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1270.725811][ T3543] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1271.322500][ T5839] Bluetooth: hci0: command tx timeout [ 1272.287716][ C1] vkms_vblank_simulate: vblank timer overrun [ 1273.394878][ T5839] Bluetooth: hci0: command tx timeout [ 1273.715443][ T3543] team0 (unregistering): Port device team_slave_1 removed [ 1273.896047][ T3543] team0 (unregistering): Port device team_slave_0 removed [ 1276.813875][ T5839] Bluetooth: hci0: command tx timeout [ 1276.887614][ C1] vkms_vblank_simulate: vblank timer overrun [ 1277.047842][ C1] vkms_vblank_simulate: vblank timer overrun [ 1277.403813][T13757] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1738'. [ 1277.883724][T13761] fuse: Unknown parameter 'user_id00000000000000000000' [ 1278.859729][T13765] 9pnet_fd: p9_fd_create_tcp (13765): problem connecting socket to 127.0.0.1 [ 1279.236837][ C1] vkms_vblank_simulate: vblank timer overrun [ 1279.585344][ C1] vkms_vblank_simulate: vblank timer overrun [ 1279.754869][ T5925] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1279.805572][T13782] Invalid logical block size (8192) [ 1279.997096][ T5925] usb 5-1: Using ep0 maxpacket: 8 [ 1280.000465][ T5925] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1280.001865][ T5925] usb 5-1: config 4 interface 0 has no altsetting 0 [ 1280.005421][ T5925] usb 5-1: string descriptor 0 read error: -22 [ 1280.005565][ T5925] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1280.005587][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.118602][ T5925] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1280.255576][ T5925] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1280.255946][ T5925] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1280.255996][ T5925] usb 5-1: media controller created [ 1280.281634][ C1] vkms_vblank_simulate: vblank timer overrun [ 1280.522598][ C1] vkms_vblank_simulate: vblank timer overrun [ 1280.619115][T13482] chnl_net:caif_netlink_parms(): no params data found [ 1280.818733][ T5925] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1281.284045][ T5925] zl10353_read_register: readreg error (reg=127, ret==0) [ 1282.320755][ T5925] usb 5-1: USB disconnect, device number 68 [ 1283.714358][T13482] bridge0: port 1(bridge_slave_0) entered blocking state [ 1283.714508][T13482] bridge0: port 1(bridge_slave_0) entered disabled state [ 1283.715546][T13482] bridge_slave_0: entered allmulticast mode [ 1283.727236][T13482] bridge_slave_0: entered promiscuous mode [ 1283.772308][T13482] bridge0: port 2(bridge_slave_1) entered blocking state [ 1283.772461][T13482] bridge0: port 2(bridge_slave_1) entered disabled state [ 1283.772679][T13482] bridge_slave_1: entered allmulticast mode [ 1283.994902][T13482] bridge_slave_1: entered promiscuous mode [ 1284.941169][ C1] vkms_vblank_simulate: vblank timer overrun [ 1285.377467][T13816] fuse: Bad value for 'fd' [ 1286.051529][ T3543] bridge_slave_1: left allmulticast mode [ 1286.051553][ T3543] bridge_slave_1: left promiscuous mode [ 1286.051731][ T3543] bridge0: port 2(bridge_slave_1) entered disabled state [ 1286.124299][ T3543] bridge_slave_0: left allmulticast mode [ 1286.124332][ T3543] bridge_slave_0: left promiscuous mode [ 1286.124611][ T3543] bridge0: port 1(bridge_slave_0) entered disabled state [ 1286.735743][ T3543] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1286.814818][T12159] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1286.988932][T12159] usb 5-1: config 0 has no interfaces? [ 1286.988970][T12159] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1286.988992][T12159] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1287.022628][T12159] usb 5-1: config 0 descriptor?? [ 1287.095141][ T3543] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1287.169879][ T3543] bond0 (unregistering): Released all slaves [ 1287.268402][T13482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1287.314585][ C1] vkms_vblank_simulate: vblank timer overrun [ 1287.408436][T13482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1287.460631][ T5952] usb 5-1: USB disconnect, device number 69 [ 1287.819724][ C1] vkms_vblank_simulate: vblank timer overrun [ 1288.500149][T13833] 9pnet_fd: p9_fd_create_tcp (13833): problem connecting socket to 127.0.0.1 [ 1288.632374][ C1] vkms_vblank_simulate: vblank timer overrun [ 1289.422875][T13701] chnl_net:caif_netlink_parms(): no params data found [ 1289.527238][ C1] vkms_vblank_simulate: vblank timer overrun [ 1290.033278][T13701] bridge0: port 1(bridge_slave_0) entered blocking state [ 1290.033508][T13701] bridge0: port 1(bridge_slave_0) entered disabled state [ 1290.033718][T13701] bridge_slave_0: entered allmulticast mode [ 1290.047192][T13701] bridge_slave_0: entered promiscuous mode [ 1290.051289][T13701] bridge0: port 2(bridge_slave_1) entered blocking state [ 1290.051465][T13701] bridge0: port 2(bridge_slave_1) entered disabled state [ 1290.051651][T13701] bridge_slave_1: entered allmulticast mode [ 1290.064893][T13701] bridge_slave_1: entered promiscuous mode [ 1290.300383][T13701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1290.333461][T13701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1291.654966][T13863] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1757'. [ 1291.705008][T13586] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1292.024804][T13586] usb 7-1: Using ep0 maxpacket: 8 [ 1292.027446][T13586] usb 7-1: config 0 has an invalid interface number: 33 but max is 1 [ 1292.027470][T13586] usb 7-1: config 0 has no interface number 1 [ 1292.027529][T13586] usb 7-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 1292.027568][T13586] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 247 [ 1292.030814][T13586] usb 7-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 1292.030839][T13586] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1292.030856][T13586] usb 7-1: Product: syz [ 1292.030869][T13586] usb 7-1: Manufacturer: syz [ 1292.030888][T13586] usb 7-1: SerialNumber: syz [ 1292.111018][T13586] usb 7-1: config 0 descriptor?? [ 1292.143679][T13586] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 1292.725026][T13701] team0: Port device team_slave_0 added [ 1292.883508][T13701] team0: Port device team_slave_1 added [ 1293.413248][ C0] vkms_vblank_simulate: vblank timer overrun [ 1293.546973][ T9089] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1293.553888][ T9089] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1293.565226][ T9089] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1293.601965][ T9089] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1293.639787][ T9089] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1294.096331][T13701] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1294.096347][T13701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1294.096370][T13701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1294.112641][T13701] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1294.112657][T13701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1294.112681][T13701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1294.756504][ T3543] bridge_slave_1: left allmulticast mode [ 1294.759765][ T3543] bridge_slave_1: left promiscuous mode [ 1294.760056][ T3543] bridge0: port 2(bridge_slave_1) entered disabled state [ 1294.876320][ T3543] bridge_slave_0: left allmulticast mode [ 1294.876368][ T3543] bridge_slave_0: left promiscuous mode [ 1294.876643][ T3543] bridge0: port 1(bridge_slave_0) entered disabled state [ 1295.795795][ T5839] Bluetooth: hci1: command tx timeout [ 1295.801250][ T3543] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1296.085916][ T3543] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1296.216483][ T3543] bond0 (unregistering): Released all slaves [ 1296.412686][T13701] hsr_slave_0: entered promiscuous mode [ 1296.414024][T13701] hsr_slave_1: entered promiscuous mode [ 1296.596175][ T2365] pvrusb2: Invalid read control endpoint [ 1296.600920][ T2365] usb 7-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 1296.600943][ T2365] usb 7-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 1296.611037][T13586] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 1296.804876][T13586] usb 7-1: USB disconnect, device number 33 [ 1297.583213][T13915] serio: Serial port ptm0 [ 1297.875023][ T5839] Bluetooth: hci1: command tx timeout [ 1299.427191][T13929] 9pnet_fd: p9_fd_create_tcp (13929): problem connecting socket to 127.0.0.1 [ 1299.954751][ T5839] Bluetooth: hci1: command tx timeout [ 1300.699270][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.699354][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.101702][ C0] vkms_vblank_simulate: vblank timer overrun [ 1301.462078][T13947] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1768'. [ 1302.034869][ T5839] Bluetooth: hci1: command tx timeout [ 1302.172178][ C0] vkms_vblank_simulate: vblank timer overrun [ 1302.334523][ C0] vkms_vblank_simulate: vblank timer overrun [ 1303.068743][ C0] vkms_vblank_simulate: vblank timer overrun [ 1303.504965][ T5925] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1303.654812][ T5925] usb 3-1: Using ep0 maxpacket: 8 [ 1303.657563][ T5925] usb 3-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 1303.657624][ T5925] usb 3-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1303.657649][ T5925] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1303.657680][ T5925] usb 3-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 1303.657700][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1303.733075][ T5925] usb 3-1: config 0 descriptor?? [ 1304.079913][ T5925] usbhid 3-1:0.0: can't add hid device: -71 [ 1304.080042][ T5925] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1304.102165][ T5925] usb 3-1: USB disconnect, device number 68 [ 1304.442402][T13878] chnl_net:caif_netlink_parms(): no params data found [ 1304.785586][T13993] fuse: Unknown parameter 'user_id00000000000000000000' [ 1305.124849][ T5925] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1305.201812][T13878] bridge0: port 1(bridge_slave_0) entered blocking state [ 1305.201931][T13878] bridge0: port 1(bridge_slave_0) entered disabled state [ 1305.202137][T13878] bridge_slave_0: entered allmulticast mode [ 1305.219430][T13878] bridge_slave_0: entered promiscuous mode [ 1305.224393][T13878] bridge0: port 2(bridge_slave_1) entered blocking state [ 1305.224525][T13878] bridge0: port 2(bridge_slave_1) entered disabled state [ 1305.227575][T13878] bridge_slave_1: entered allmulticast mode [ 1305.233860][T13878] bridge_slave_1: entered promiscuous mode [ 1305.336941][ T5925] usb 3-1: config 0 has no interfaces? [ 1305.336978][ T5925] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1305.336998][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1305.377318][ T5925] usb 3-1: config 0 descriptor?? [ 1305.537857][T13878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1305.542087][T13878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1305.713786][ T8816] usb 3-1: USB disconnect, device number 69 [ 1305.919080][ C0] vkms_vblank_simulate: vblank timer overrun [ 1306.108526][T14006] serio: Serial port ptm0 [ 1306.410867][ C0] vkms_vblank_simulate: vblank timer overrun [ 1306.520382][T14011] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1778'. [ 1306.687668][ C0] vkms_vblank_simulate: vblank timer overrun [ 1307.301837][ C0] vkms_vblank_simulate: vblank timer overrun [ 1307.345766][T13878] team0: Port device team_slave_0 added [ 1307.416523][T13878] team0: Port device team_slave_1 added [ 1308.069841][T13878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1308.069858][T13878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1308.069883][T13878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1308.136927][T13878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1308.136944][T13878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1308.136970][T13878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1308.313754][T13701] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1308.358868][T13701] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1308.548461][T13701] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1308.834909][T13701] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1308.983455][T13878] hsr_slave_0: entered promiscuous mode [ 1308.984463][T13878] hsr_slave_1: entered promiscuous mode [ 1309.000017][T13878] debugfs: 'hsr0' already exists in 'hsr' [ 1309.000036][T13878] Cannot create hsr debugfs directory [ 1309.838472][T14021] syz.2.1781 (14021): drop_caches: 2 [ 1310.355266][T14034] fuse: Unknown parameter 'user_id00000000000000000000' [ 1311.182251][T13878] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1311.369423][T13878] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1311.484914][T13878] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1312.387336][T13878] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1312.549872][T13701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1312.693524][T13701] 8021q: adding VLAN 0 to HW filter on device team0 [ 1312.789051][T14057] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1788'. [ 1313.343621][ T6676] bridge0: port 1(bridge_slave_0) entered blocking state [ 1313.344374][ T6676] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1313.374039][ T6676] bridge0: port 2(bridge_slave_1) entered blocking state [ 1313.374258][ T6676] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1313.866360][T13878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1313.908455][ C1] vkms_vblank_simulate: vblank timer overrun [ 1314.003921][T13878] 8021q: adding VLAN 0 to HW filter on device team0 [ 1314.117286][ T5963] bridge0: port 1(bridge_slave_0) entered blocking state [ 1314.117451][ T5963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1314.201168][ T5963] bridge0: port 2(bridge_slave_1) entered blocking state [ 1314.204458][ T5963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1314.934080][T13701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1315.812744][T13878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1316.639739][T13701] veth0_vlan: entered promiscuous mode [ 1316.741755][T13701] veth1_vlan: entered promiscuous mode [ 1316.893769][T13701] veth0_macvtap: entered promiscuous mode [ 1316.903635][T13701] veth1_macvtap: entered promiscuous mode [ 1317.007339][T13701] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1317.052514][T13701] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1317.091205][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1317.091873][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1317.092132][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1317.092167][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1317.515074][T14096] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1793'. [ 1317.515564][T14096] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1793'. [ 1318.784974][ T8732] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1318.888036][T13194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1318.888054][T13194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1318.944863][ T8732] usb 5-1: Using ep0 maxpacket: 8 [ 1318.948974][ T8732] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1318.953902][ T8732] usb 5-1: config 4 interface 0 has no altsetting 0 [ 1318.977427][ T8732] usb 5-1: string descriptor 0 read error: -22 [ 1318.977578][ T8732] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1318.977600][ T8732] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.985051][T13878] veth0_vlan: entered promiscuous mode [ 1319.038385][ T8732] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1319.057805][ T8732] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1319.058185][ T8732] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1319.058233][ T8732] usb 5-1: media controller created [ 1319.110772][ T8732] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1319.367337][ T6673] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1319.367357][ T6673] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1319.373079][T13878] veth1_vlan: entered promiscuous mode [ 1319.566027][T13878] veth0_macvtap: entered promiscuous mode [ 1319.571279][T13878] veth1_macvtap: entered promiscuous mode [ 1319.608032][T13878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1319.623879][T13878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1319.856848][ T3543] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1319.936898][ T3543] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1319.956950][ T3543] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1320.166736][ T3543] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1320.292909][ T8732] zl10353_read_register: readreg error (reg=127, ret==0) [ 1320.435594][ T8732] usb 5-1: USB disconnect, device number 70 [ 1321.803928][ T6676] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1321.803953][ T6676] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1322.159403][ T3543] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1322.159423][ T3543] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1322.409944][T14125] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1799'. [ 1330.796487][ C0] vkms_vblank_simulate: vblank timer overrun [ 1331.229811][ C0] vkms_vblank_simulate: vblank timer overrun [ 1331.629234][T14170] fuse: Unknown parameter '0x0000000000000004' [ 1331.854918][ C0] vkms_vblank_simulate: vblank timer overrun [ 1332.158617][T14177] serio: Serial port ptm0 [ 1333.135250][ C0] vkms_vblank_simulate: vblank timer overrun [ 1333.468342][ T9089] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1333.471583][ T9089] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1333.473982][ T9089] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1333.503662][ T9089] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1333.513252][ T9089] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1338.311766][ T5839] Bluetooth: hci3: command tx timeout [ 1339.689699][ C0] vkms_vblank_simulate: vblank timer overrun [ 1340.354872][ T9089] Bluetooth: hci3: command tx timeout [ 1340.445295][ C0] vkms_vblank_simulate: vblank timer overrun [ 1340.527498][ C0] vkms_vblank_simulate: vblank timer overrun [ 1341.526359][T14209] syz.6.1824 (14209): drop_caches: 2 [ 1341.912526][ C0] vkms_vblank_simulate: vblank timer overrun [ 1342.168140][T14217] serio: Serial port ptm0 [ 1342.176524][ C0] vkms_vblank_simulate: vblank timer overrun [ 1342.339328][ C0] vkms_vblank_simulate: vblank timer overrun [ 1342.449519][ T9089] Bluetooth: hci3: command tx timeout [ 1342.806098][ C0] vkms_vblank_simulate: vblank timer overrun [ 1343.241792][ T8816] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1343.445209][ C0] vkms_vblank_simulate: vblank timer overrun [ 1343.535601][ C0] vkms_vblank_simulate: vblank timer overrun [ 1343.633342][ C0] vkms_vblank_simulate: vblank timer overrun [ 1343.644990][ T8816] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1343.645020][ T8816] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1343.645057][ T8816] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1343.645077][ T8816] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1343.734273][ T8816] usb 6-1: config 0 descriptor?? [ 1343.763715][ C0] vkms_vblank_simulate: vblank timer overrun [ 1344.022159][ C0] vkms_vblank_simulate: vblank timer overrun [ 1344.485014][ C0] vkms_vblank_simulate: vblank timer overrun [ 1344.516138][ T9089] Bluetooth: hci3: command tx timeout [ 1344.589448][ T8816] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 1344.589485][ T8816] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 1344.589507][ T8816] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 1344.589528][ T8816] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 1344.589552][ T8816] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 1344.589577][ T8816] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 1344.589602][ T8816] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 1344.655392][ T8816] cp2112 0003:10C4:EA90.0009: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 1344.762857][ C0] vkms_vblank_simulate: vblank timer overrun [ 1344.806982][ T8816] cp2112 0003:10C4:EA90.0009: Part Number: 0x00 Device Version: 0x00 [ 1344.809466][ T6681] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1345.008903][ T8816] cp2112 0003:10C4:EA90.0009: error requesting SMBus config [ 1345.010714][ T8816] cp2112 0003:10C4:EA90.0009: probe with driver cp2112 failed with error -32 [ 1347.447456][ C0] vkms_vblank_simulate: vblank timer overrun [ 1347.729234][ C0] vkms_vblank_simulate: vblank timer overrun [ 1347.849683][ T9] usb 6-1: USB disconnect, device number 2 [ 1347.891330][ T6681] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1349.004135][ T6681] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1349.356935][ C0] vkms_vblank_simulate: vblank timer overrun [ 1350.099779][ C0] vkms_vblank_simulate: vblank timer overrun [ 1350.472611][ C0] vkms_vblank_simulate: vblank timer overrun [ 1351.055388][ C0] vkms_vblank_simulate: vblank timer overrun [ 1356.818579][ T2365] pvrusb2: request_firmware fatal error with code=-110 [ 1356.818629][ T2365] pvrusb2: Failure uploading firmware1 [ 1356.818638][ T2365] pvrusb2: Device initialization was not successful. [ 1356.818644][ T2365] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1356.818691][ T2365] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1356.818803][ T2365] pvrusb2: Failed to submit write-control URB status=-19 [ 1357.200947][ T6681] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1357.243706][ T2365] usb 7-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 1357.243732][ T2365] usb 7-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 1357.274934][T13586] pvrusb2: Device being rendered inoperable [ 1357.460373][T14183] chnl_net:caif_netlink_parms(): no params data found [ 1359.329848][T14183] bridge0: port 1(bridge_slave_0) entered blocking state [ 1359.330503][T14183] bridge0: port 1(bridge_slave_0) entered disabled state [ 1359.330681][T14183] bridge_slave_0: entered allmulticast mode [ 1359.351800][T14183] bridge_slave_0: entered promiscuous mode [ 1359.377057][T14183] bridge0: port 2(bridge_slave_1) entered blocking state [ 1359.393312][T14183] bridge0: port 2(bridge_slave_1) entered disabled state [ 1359.393530][T14183] bridge_slave_1: entered allmulticast mode [ 1359.418198][T14183] bridge_slave_1: entered promiscuous mode [ 1360.180161][T14302] serio: Serial port ptm0 [ 1360.661797][ C0] vkms_vblank_simulate: vblank timer overrun [ 1360.737508][ C0] vkms_vblank_simulate: vblank timer overrun [ 1361.714513][T14183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1361.773383][T14183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1361.884580][ C0] vkms_vblank_simulate: vblank timer overrun [ 1361.886860][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.886932][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.409916][T14183] team0: Port device team_slave_0 added [ 1362.423975][T14183] team0: Port device team_slave_1 added [ 1362.686097][ T6681] bridge0: port 3(batadv0) entered disabled state [ 1362.876937][ C0] vkms_vblank_simulate: vblank timer overrun [ 1363.063797][ C0] vkms_vblank_simulate: vblank timer overrun [ 1363.640005][ C0] vkms_vblank_simulate: vblank timer overrun [ 1363.851616][ T6681] bridge_slave_1: left allmulticast mode [ 1363.851648][ T6681] bridge_slave_1: left promiscuous mode [ 1363.851909][ T6681] bridge0: port 2(bridge_slave_1) entered disabled state [ 1363.989874][ T6681] bridge_slave_0: left allmulticast mode [ 1363.989904][ T6681] bridge_slave_0: left promiscuous mode [ 1363.990151][ T6681] bridge0: port 1(bridge_slave_0) entered disabled state [ 1365.989311][T14353] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1365.991345][T14353] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1366.443641][ C0] vkms_vblank_simulate: vblank timer overrun [ 1366.646628][ C0] vkms_vblank_simulate: vblank timer overrun [ 1367.005677][T14356] serio: Serial port ptm0 [ 1367.287920][ C0] vkms_vblank_simulate: vblank timer overrun [ 1367.577787][ C0] vkms_vblank_simulate: vblank timer overrun [ 1367.873449][ C0] vkms_vblank_simulate: vblank timer overrun [ 1368.055543][ C0] vkms_vblank_simulate: vblank timer overrun [ 1368.107681][ C0] vkms_vblank_simulate: vblank timer overrun [ 1369.099980][ C0] vkms_vblank_simulate: vblank timer overrun [ 1369.443562][ C0] vkms_vblank_simulate: vblank timer overrun [ 1379.775907][T14411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1877'. [ 1379.775969][T14411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1877'. [ 1379.777882][ C1] vkms_vblank_simulate: vblank timer overrun [ 1380.780759][ C1] vkms_vblank_simulate: vblank timer overrun [ 1380.881565][ T5205] udevd[5205]: worker [13775] /devices/platform/dummy_hcd.6/usb7/7-1 is taking a long time [ 1381.001768][ C1] vkms_vblank_simulate: vblank timer overrun [ 1381.107817][ C1] vkms_vblank_simulate: vblank timer overrun [ 1382.448322][ T6681] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1382.615193][ C1] vkms_vblank_simulate: vblank timer overrun [ 1382.672857][T14425] 9pnet_fd: p9_fd_create_tcp (14425): problem connecting socket to 127.0.0.1 [ 1382.687358][ T6681] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1382.752439][ T6681] bond0 (unregistering): Released all slaves [ 1383.032176][T14183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1383.032192][T14183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1383.032216][T14183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1383.034513][T14183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1383.034525][T14183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1383.034546][T14183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1383.123637][T14413] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1384.496877][T14413] usb 3-1: config 0 has no interfaces? [ 1384.496918][T14413] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1384.496999][T14413] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1384.569329][T14413] usb 3-1: config 0 descriptor?? [ 1385.030197][T14183] hsr_slave_0: entered promiscuous mode [ 1385.042148][T14183] hsr_slave_1: entered promiscuous mode [ 1385.043515][T14183] debugfs: 'hsr0' already exists in 'hsr' [ 1385.043540][T14183] Cannot create hsr debugfs directory [ 1385.098458][T14142] usb 3-1: USB disconnect, device number 70 [ 1385.907915][ T6681] hsr_slave_0: left promiscuous mode [ 1385.928606][ T6681] hsr_slave_1: left promiscuous mode [ 1385.929540][ T6681] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1385.929569][ T6681] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1386.260546][ T6681] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1386.260578][ T6681] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1387.230363][ T6681] veth1_macvtap: left promiscuous mode [ 1387.230493][ T6681] veth0_macvtap: left promiscuous mode [ 1387.230783][ T6681] veth1_vlan: left promiscuous mode [ 1387.231000][ T6681] veth0_vlan: left promiscuous mode [ 1388.235219][ C0] vkms_vblank_simulate: vblank timer overrun [ 1389.194750][ C0] vkms_vblank_simulate: vblank timer overrun [ 1389.349669][ T6681] team0 (unregistering): Port device batadv1 removed [ 1389.440699][ T6681] pim6reg (unregistering): left allmulticast mode [ 1389.586910][ T9089] Bluetooth: hci0: command 0x0406 tx timeout [ 1390.147206][ C0] vkms_vblank_simulate: vblank timer overrun [ 1390.263446][ C0] vkms_vblank_simulate: vblank timer overrun [ 1390.395343][ C0] vkms_vblank_simulate: vblank timer overrun [ 1390.484847][ C0] vkms_vblank_simulate: vblank timer overrun [ 1390.758700][ C0] vkms_vblank_simulate: vblank timer overrun [ 1391.936374][ C0] vkms_vblank_simulate: vblank timer overrun [ 1392.731581][ T9089] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1392.762975][ T9089] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1392.785165][ T9089] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1392.817921][ T9089] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1392.818589][ T9089] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1393.617498][ T6681] team0 (unregistering): Port device team_slave_1 removed [ 1394.005315][ T5925] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1394.736406][ T5925] usb 3-1: config 0 has no interfaces? [ 1394.736446][ T5925] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1394.736467][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1394.829264][ T5925] usb 3-1: config 0 descriptor?? [ 1394.952511][ T5839] Bluetooth: hci4: command tx timeout [ 1394.965210][ T6681] team0 (unregistering): Port device team_slave_0 removed [ 1395.209376][ T8732] usb 3-1: USB disconnect, device number 71 [ 1396.748370][ C1] vkms_vblank_simulate: vblank timer overrun [ 1396.931880][ C1] vkms_vblank_simulate: vblank timer overrun [ 1396.995391][ T5839] Bluetooth: hci4: command tx timeout [ 1397.545797][ C1] vkms_vblank_simulate: vblank timer overrun [ 1397.967718][ C1] vkms_vblank_simulate: vblank timer overrun [ 1398.032605][ C1] vkms_vblank_simulate: vblank timer overrun [ 1398.105390][ C1] vkms_vblank_simulate: vblank timer overrun [ 1398.155454][ C1] vkms_vblank_simulate: vblank timer overrun [ 1398.244467][ C1] vkms_vblank_simulate: vblank timer overrun [ 1398.284150][ C1] vkms_vblank_simulate: vblank timer overrun [ 1398.388635][ C1] vkms_vblank_simulate: vblank timer overrun [ 1398.753583][ C1] vkms_vblank_simulate: vblank timer overrun [ 1398.840249][ C1] vkms_vblank_simulate: vblank timer overrun [ 1399.049302][ C1] vkms_vblank_simulate: vblank timer overrun [ 1399.074787][ T5839] Bluetooth: hci4: command tx timeout [ 1399.109902][ C1] vkms_vblank_simulate: vblank timer overrun [ 1399.391169][ C1] vkms_vblank_simulate: vblank timer overrun [ 1399.696625][ C1] vkms_vblank_simulate: vblank timer overrun [ 1400.085995][ C1] vkms_vblank_simulate: vblank timer overrun [ 1400.619502][ C1] vkms_vblank_simulate: vblank timer overrun [ 1401.154781][ T5839] Bluetooth: hci4: command tx timeout [ 1404.708949][ C0] vkms_vblank_simulate: vblank timer overrun [ 1405.120330][ C0] vkms_vblank_simulate: vblank timer overrun [ 1406.307388][ C0] vkms_vblank_simulate: vblank timer overrun [ 1406.672730][ C0] vkms_vblank_simulate: vblank timer overrun [ 1407.397639][T14474] chnl_net:caif_netlink_parms(): no params data found [ 1407.506878][ C0] vkms_vblank_simulate: vblank timer overrun [ 1407.521020][ T8732] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1407.747443][ T8732] usb 6-1: Using ep0 maxpacket: 32 [ 1407.749481][ T8732] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1407.749499][ T8732] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1407.749521][ T8732] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1407.749532][ T8732] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1407.752711][ T8732] usb 6-1: config 0 descriptor?? [ 1407.755977][ T8732] hub 6-1:0.0: USB hub found [ 1407.962476][ T8732] hub 6-1:0.0: 1 port detected [ 1408.568097][T14413] hub 6-1:0.0: activate --> -90 [ 1408.648385][ C0] vkms_vblank_simulate: vblank timer overrun [ 1408.982312][ T5992] usb 6-1: USB disconnect, device number 3 [ 1409.219391][T14474] bridge0: port 1(bridge_slave_0) entered blocking state [ 1409.219606][T14474] bridge0: port 1(bridge_slave_0) entered disabled state [ 1409.219856][T14474] bridge_slave_0: entered allmulticast mode [ 1409.254716][T14474] bridge_slave_0: entered promiscuous mode [ 1409.281196][T14474] bridge0: port 2(bridge_slave_1) entered blocking state [ 1409.281469][T14474] bridge0: port 2(bridge_slave_1) entered disabled state [ 1409.281707][T14474] bridge_slave_1: entered allmulticast mode [ 1409.315286][T14474] bridge_slave_1: entered promiscuous mode [ 1410.563172][T14474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1410.605032][T14474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1410.960363][T14587] netlink: 'syz.6.1917': attribute type 4 has an invalid length. [ 1411.012017][T14589] netlink: 'syz.6.1917': attribute type 4 has an invalid length. [ 1411.317721][T14474] team0: Port device team_slave_0 added [ 1413.591668][ C1] vkms_vblank_simulate: vblank timer overrun [ 1413.670218][ C1] vkms_vblank_simulate: vblank timer overrun [ 1414.120933][T14474] team0: Port device team_slave_1 added [ 1414.121854][ T6681] bridge_slave_1: left allmulticast mode [ 1414.121873][ T6681] bridge_slave_1: left promiscuous mode [ 1414.122030][ T6681] bridge0: port 2(bridge_slave_1) entered disabled state [ 1414.356315][ T6681] bridge_slave_0: left allmulticast mode [ 1414.356337][ T6681] bridge_slave_0: left promiscuous mode [ 1414.356505][ T6681] bridge0: port 1(bridge_slave_0) entered disabled state [ 1414.635358][ T6681] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1414.735583][ T6681] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1414.799539][ T6681] bond0 (unregistering): Released all slaves [ 1414.849721][T14598] syz.7.1921: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1414.850000][T14598] CPU: 1 UID: 0 PID: 14598 Comm: syz.7.1921 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1414.850014][T14598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1414.850025][T14598] Call Trace: [ 1414.850030][T14598] [ 1414.850036][T14598] dump_stack_lvl+0x189/0x250 [ 1414.850061][T14598] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1414.850075][T14598] ? __pfx__printk+0x10/0x10 [ 1414.850086][T14598] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1414.850096][T14598] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1414.850108][T14598] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 1414.850120][T14598] warn_alloc+0x22e/0x3b0 [ 1414.850140][T14598] ? __pfx_warn_alloc+0x10/0x10 [ 1414.850158][T14598] ? __get_vm_area_node+0x2bc/0x350 [ 1414.850171][T14598] ? fq_pie_init+0x430/0x840 [ 1414.850183][T14598] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 1414.850212][T14598] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1414.850229][T14598] ? rcu_is_watching+0x15/0xb0 [ 1414.850245][T14598] __kvmalloc_node_noprof+0x330/0x550 [ 1414.850259][T14598] ? fq_pie_init+0x430/0x840 [ 1414.850267][T14598] ? fq_pie_init+0x430/0x840 [ 1414.850276][T14598] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 1414.850290][T14598] fq_pie_init+0x430/0x840 [ 1414.850300][T14598] ? __pfx_fq_pie_init+0x10/0x10 [ 1414.850310][T14598] qdisc_create+0x7a9/0xea0 [ 1414.850324][T14598] tc_modify_qdisc+0x1538/0x20e0 [ 1414.850347][T14598] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1414.850377][T14598] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1414.850390][T14598] rtnetlink_rcv_msg+0x779/0xb70 [ 1414.850403][T14598] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1414.850413][T14598] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1414.850423][T14598] ? ref_tracker_free+0x61e/0x7c0 [ 1414.850436][T14598] ? __asan_memcpy+0x40/0x70 [ 1414.850446][T14598] ? __pfx_ref_tracker_free+0x10/0x10 [ 1414.850457][T14598] ? __skb_clone+0x63/0x7a0 [ 1414.850475][T14598] netlink_rcv_skb+0x205/0x470 [ 1414.850487][T14598] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1414.850499][T14598] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1414.850517][T14598] ? netlink_deliver_tap+0x2e/0x1b0 [ 1414.850533][T14598] netlink_unicast+0x843/0xa10 [ 1414.850547][T14598] ? __pfx_netlink_unicast+0x10/0x10 [ 1414.850558][T14598] ? netlink_sendmsg+0x642/0xb30 [ 1414.850568][T14598] ? skb_put+0x11b/0x210 [ 1414.850582][T14598] netlink_sendmsg+0x805/0xb30 [ 1414.850598][T14598] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1414.850614][T14598] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1414.850623][T14598] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1414.850634][T14598] __sock_sendmsg+0x219/0x270 [ 1414.850647][T14598] ____sys_sendmsg+0x508/0x820 [ 1414.850662][T14598] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1414.850680][T14598] ? import_iovec+0x74/0xa0 [ 1414.850693][T14598] ___sys_sendmsg+0x21f/0x2a0 [ 1414.850706][T14598] ? __pfx____sys_sendmsg+0x10/0x10 [ 1414.850739][T14598] ? __fget_files+0x2a/0x420 [ 1414.850751][T14598] ? __fget_files+0x3a6/0x420 [ 1414.850769][T14598] __x64_sys_sendmsg+0x1a1/0x260 [ 1414.850783][T14598] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1414.850802][T14598] ? rcu_is_watching+0x15/0xb0 [ 1414.850818][T14598] ? do_syscall_64+0xbe/0x3b0 [ 1414.850832][T14598] do_syscall_64+0xfa/0x3b0 [ 1414.850843][T14598] ? lockdep_hardirqs_on+0x9c/0x150 [ 1414.850862][T14598] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1414.850873][T14598] ? clear_bhb_loop+0x60/0xb0 [ 1414.850886][T14598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1414.850899][T14598] RIP: 0033:0x7f9c562aebe9 [ 1414.850912][T14598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1414.850921][T14598] RSP: 002b:00007f9c5450e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1414.850931][T14598] RAX: ffffffffffffffda RBX: 00007f9c564d5fa0 RCX: 00007f9c562aebe9 [ 1414.850939][T14598] RDX: 000000002000400c RSI: 00002000000000c0 RDI: 0000000000000009 [ 1414.850946][T14598] RBP: 00007f9c56331e19 R08: 0000000000000000 R09: 0000000000000000 [ 1414.850952][T14598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1414.850959][T14598] R13: 00007f9c564d6038 R14: 00007f9c564d5fa0 R15: 00007ffe10934838 [ 1414.850976][T14598] [ 1414.850982][T14598] Mem-Info: [ 1414.850991][T14598] active_anon:281 inactive_anon:9544 isolated_anon:0 [ 1414.850991][T14598] active_file:6463 inactive_file:37277 isolated_file:0 [ 1414.850991][T14598] unevictable:768 dirty:123 writeback:0 [ 1414.850991][T14598] slab_reclaimable:7302 slab_unreclaimable:103559 [ 1414.850991][T14598] mapped:32716 shmem:4230 pagetables:1529 [ 1414.850991][T14598] sec_pagetables:0 bounce:0 [ 1414.850991][T14598] kernel_misc_reclaimable:0 [ 1414.850991][T14598] free:1327727 free_pcp:2786 free_cma:0 [ 1414.851028][T14598] Node 0 active_anon:1124kB inactive_anon:38176kB active_file:25648kB inactive_file:149108kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:130864kB dirty:492kB writeback:0kB shmem:15384kB kernel_stack:13540kB pagetables:5984kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1414.851052][T14598] Node 1 active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1414.851077][T14598] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1414.851108][T14598] lowmem_reserve[]: 0 2512 2513 2513 2513 [ 1414.851128][T14598] Node 0 DMA32 free:1387432kB boost:0kB min:3940kB low:6484kB high:9028kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1120kB inactive_anon:38132kB active_file:24632kB inactive_file:149040kB unevictable:1536kB writepending:492kB present:3129332kB managed:2572332kB mlocked:0kB bounce:0kB free_pcp:10732kB local_pcp:7852kB free_cma:0kB [ 1414.851157][T14598] lowmem_reserve[]: 0 0 1 1 1 [ 1414.851172][T14598] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:44kB active_file:1016kB inactive_file:68kB unevictable:0kB writepending:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1414.851199][T14598] lowmem_reserve[]: 0 0 0 0 0 [ 1414.851214][T14598] Node 1 Normal free:3908116kB boost:0kB min:6364kB low:10472kB high:14580kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:412kB local_pcp:412kB free_cma:0kB [ 1414.851241][T14598] lowmem_reserve[]: 0 0 0 0 0 [ 1414.851257][T14598] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1414.851314][T14598] Node 0 DMA32: 830*4kB (UE) 736*8kB (UME) 473*16kB (UME) 633*32kB (UME) 257*64kB (UME) 168*128kB (UME) 183*256kB (UME) 106*512kB (UME) 29*1024kB (UME) 3*2048kB (UME) 287*4096kB (M) = 1387496kB [ 1414.851388][T14598] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1414.851436][T14598] Node 1 Normal: 134*4kB (UE) 45*8kB (UME) 44*16kB (UME) 207*32kB (UME) 101*64kB (UME) 35*128kB (UME) 9*256kB (UM) 5*512kB (UME) 3*1024kB (UM) 3*2048kB (UME) 946*4096kB (M) = 3908064kB [ 1414.851513][T14598] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1414.851521][T14598] Node 0 hugepages_total=5 hugepages_free=5 hugepages_surp=2 hugepages_size=2048kB [ 1414.851529][T14598] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1414.851537][T14598] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1414.851544][T14598] 47966 total pagecache pages [ 1414.851551][T14598] 0 pages in swap cache [ 1414.851555][T14598] Free swap = 124996kB [ 1414.851559][T14598] Total swap = 124996kB [ 1414.851562][T14598] 2097051 pages RAM [ 1414.851566][T14598] 0 pages HighMem/MovableOnly [ 1414.851569][T14598] 422070 pages reserved [ 1414.851573][T14598] 0 pages cma reserved [ 1415.873255][ C1] vkms_vblank_simulate: vblank timer overrun [ 1416.054555][ C1] vkms_vblank_simulate: vblank timer overrun [ 1416.303491][ C1] vkms_vblank_simulate: vblank timer overrun [ 1416.968518][ C1] vkms_vblank_simulate: vblank timer overrun [ 1417.297288][T14474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1417.297306][T14474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1417.297328][T14474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1417.300215][T14474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1417.300231][T14474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1417.300255][T14474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1417.469329][ T6681] hsr_slave_0: left promiscuous mode [ 1417.504869][ T6681] hsr_slave_1: left promiscuous mode [ 1417.505553][ T6681] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1417.705931][ T6681] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1418.305253][ T2365] pvrusb2: request_firmware fatal error with code=-110 [ 1418.305275][ T2365] pvrusb2: Failure uploading firmware1 [ 1418.305283][ T2365] pvrusb2: Device initialization was not successful. [ 1418.305291][ T2365] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1418.305301][ T2365] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1418.305610][T13586] pvrusb2: Device being rendered inoperable [ 1418.964830][T13586] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1419.149612][T13586] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1419.149646][T13586] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1419.149685][T13586] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1419.149708][T13586] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1419.218840][T13586] usb 6-1: config 0 descriptor?? [ 1420.275026][T13057] Bluetooth: hci1: command 0x0406 tx timeout [ 1420.418073][T13586] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 1420.418110][T13586] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 1420.418134][T13586] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 1420.418157][T13586] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 1420.418180][T13586] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 1420.418203][T13586] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 1420.418227][T13586] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 1420.478818][T13586] cp2112 0003:10C4:EA90.000A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 1420.691414][T13586] cp2112 0003:10C4:EA90.000A: Part Number: 0x00 Device Version: 0x00 [ 1421.854426][T13586] cp2112 0003:10C4:EA90.000A: error reading lock byte: -71 [ 1421.873286][T13586] usb 6-1: USB disconnect, device number 4 [ 1421.885276][ T6681] team0 (unregistering): Port device team_slave_1 removed [ 1422.843612][ T6681] team0 (unregistering): Port device team_slave_0 removed [ 1423.319492][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.319538][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1426.778266][T14681] tmpfs: Bad value for 'mpol' [ 1430.524845][ T5839] Bluetooth: hci1: Malformed LE Event: 0x1b [ 1430.602111][T14701] Bluetooth: MGMT ver 1.23 [ 1430.753438][T14474] hsr_slave_0: entered promiscuous mode [ 1435.735710][T14474] hsr_slave_1: entered promiscuous mode [ 1435.736635][T14474] debugfs: 'hsr0' already exists in 'hsr' [ 1435.736667][T14474] Cannot create hsr debugfs directory [ 1436.901609][T14719] tmpfs: Unsupported parameter 'huge' [ 1437.545643][T14719] IPVS: Error connecting to the multicast addr [ 1441.394764][ T5925] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1442.276257][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1442.276295][ T5925] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 1442.276306][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1442.279516][ T5925] usb 3-1: config 0 descriptor?? [ 1442.887240][ T5925] lenovo 0003:17EF:6047.000B: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.2-1/input0 [ 1443.363204][T14749] netlink: 'syz.2.1957': attribute type 10 has an invalid length. [ 1443.415736][T14765] netlink: 'syz.2.1957': attribute type 10 has an invalid length. [ 1443.552527][ C1] vkms_vblank_simulate: vblank timer overrun [ 1444.098240][T14749] 8021q: adding VLAN 0 to HW filter on device team0 [ 1444.119035][T14749] bond0: (slave team0): Enslaving as an active interface with an up link [ 1444.403485][T14765] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1444.613254][ C1] vkms_vblank_simulate: vblank timer overrun [ 1445.643740][ C1] vkms_vblank_simulate: vblank timer overrun [ 1445.830167][ C1] vkms_vblank_simulate: vblank timer overrun [ 1446.986355][T14766] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1447.324457][T14766] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1448.548745][ T5925] lenovo 0003:17EF:6047.000B: Fn-lock setting failed: -110 [ 1448.550141][ T5925] lenovo 0003:17EF:6047.000B: Sensitivity setting failed: -32 [ 1452.062464][T14799] orangefs_mount: mount request failed with -4 [ 1453.365606][T14816] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1968'. [ 1453.773640][ T8732] usb 3-1: USB disconnect, device number 72 [ 1455.243501][T13057] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1455.299411][T13057] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1455.313315][T13057] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1455.326066][T13057] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1455.328139][T13057] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1455.638006][T14840] comedi comedi3: das16m1: I/O port conflict (0xb6,16) [ 1457.394892][ T5839] Bluetooth: hci3: command tx timeout [ 1459.475079][ T5839] Bluetooth: hci3: command tx timeout [ 1461.555010][ T5839] Bluetooth: hci3: command tx timeout [ 1463.634921][ T5839] Bluetooth: hci3: command tx timeout [ 1463.894994][T13194] bridge_slave_1: left allmulticast mode [ 1463.895029][T13194] bridge_slave_1: left promiscuous mode [ 1463.895319][T13194] bridge0: port 2(bridge_slave_1) entered disabled state [ 1464.067862][T13194] bridge_slave_0: left allmulticast mode [ 1464.067896][T13194] bridge_slave_0: left promiscuous mode [ 1464.068108][T13194] bridge0: port 1(bridge_slave_0) entered disabled state [ 1466.126644][T13194] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1466.350205][T13194] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1466.516788][T13194] bond0 (unregistering): Released all slaves [ 1466.574923][T14905] comedi comedi3: das16m1: I/O port conflict (0xb6,16) [ 1466.642250][T14834] chnl_net:caif_netlink_parms(): no params data found [ 1468.336140][T13194] hsr_slave_0: left promiscuous mode [ 1468.544958][T13194] hsr_slave_1: left promiscuous mode [ 1468.545912][T13194] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1468.782454][T13194] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1471.015786][T14958] 9pnet_fd: p9_fd_create_tcp (14958): problem connecting socket to 127.0.0.1 [ 1472.105640][T14966] nvme_fabrics: unknown parameter or missing value 'Ï 3`@‘“Þø*îÒÀ@é=Ø+ûÉLB¼Žä¼ÙÇËÏÙ•1ŒØòB5³öN°^ýaAû~Pžä¶˜(tñZ[’Áx' in ctrl creation request [ 1477.060068][T13194] team0 (unregistering): Port device team_slave_1 removed [ 1477.940453][T15024] nvme_fabrics: unknown parameter or missing value 'Ï 3`@‘“Þø*îÒÀ@é=Ø+ûÉLB¼Žä¼ÙÇËÏÙ•1ŒØòB5³öN°^ýaAû~Pžä¶˜(tñZ[’Áx' in ctrl creation request [ 1478.116827][T13194] team0 (unregistering): Port device team_slave_0 removed [ 1479.456503][ T8714] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1479.625909][ T8714] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1479.625965][ T8714] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1479.625985][ T8714] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1479.660966][ T8714] usb 3-1: config 0 descriptor?? [ 1479.666675][ T8714] pwc: Askey VC010 type 2 USB webcam detected. [ 1480.086201][ T8714] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1480.087337][ T8714] pwc: recv_control_msg error -32 req 02 val 2700 [ 1480.089688][ T8714] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1480.090691][ T8714] pwc: recv_control_msg error -32 req 04 val 1000 [ 1480.091835][ T8714] pwc: recv_control_msg error -32 req 04 val 1300 [ 1480.092656][ T8714] pwc: recv_control_msg error -32 req 04 val 1400 [ 1480.093662][ T8714] pwc: recv_control_msg error -32 req 02 val 2000 [ 1480.094425][ T8714] pwc: recv_control_msg error -32 req 02 val 2100 [ 1480.098947][ T8714] pwc: recv_control_msg error -71 req 04 val 1500 [ 1480.099655][ T8714] pwc: recv_control_msg error -71 req 02 val 2500 [ 1480.100547][ T8714] pwc: recv_control_msg error -71 req 02 val 2400 [ 1480.108188][ T8714] pwc: recv_control_msg error -71 req 02 val 2600 [ 1480.110268][ T8714] pwc: recv_control_msg error -71 req 02 val 2900 [ 1480.110736][ T8714] pwc: recv_control_msg error -71 req 02 val 2800 [ 1480.112148][ T8714] pwc: recv_control_msg error -71 req 04 val 1100 [ 1480.115525][ T8714] pwc: recv_control_msg error -71 req 04 val 1200 [ 1480.130466][ T8714] pwc: Registered as video103. [ 1480.142525][ T8714] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input44 [ 1480.209472][ T8714] usb 3-1: USB disconnect, device number 73 [ 1481.017844][T14834] bridge0: port 1(bridge_slave_0) entered blocking state [ 1481.017985][T14834] bridge0: port 1(bridge_slave_0) entered disabled state [ 1481.018223][T14834] bridge_slave_0: entered allmulticast mode [ 1481.054170][T14834] bridge_slave_0: entered promiscuous mode [ 1481.071600][T14834] bridge0: port 2(bridge_slave_1) entered blocking state [ 1481.225186][T14834] bridge0: port 2(bridge_slave_1) entered disabled state [ 1481.225422][T14834] bridge_slave_1: entered allmulticast mode [ 1481.235015][T14834] bridge_slave_1: entered promiscuous mode [ 1482.409172][T15056] nvme_fabrics: unknown parameter or missing value 'Ï 3`@‘“Þø*îÒÀ@é=Ø+ûÉLB¼Žä¼ÙÇËÏÙ•1ŒØòB5³öN°^ýaAû~Pžä¶˜(tñZ[’Áx' in ctrl creation request [ 1482.785232][T14834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1482.794343][T14834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1483.210000][T15071] 9pnet_fd: p9_fd_create_tcp (15071): problem connecting socket to 127.0.0.1 [ 1484.383166][T14834] team0: Port device team_slave_0 added [ 1484.758806][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.758860][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.779457][T14834] team0: Port device team_slave_1 added [ 1485.245804][T15080] netlink: set zone limit has 4 unknown bytes [ 1486.252703][T15082] autofs: Unknown parameter './file0' [ 1486.837877][T14834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1486.837890][T14834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1486.837904][T14834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1486.839327][T14834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1486.839336][T14834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1486.839349][T14834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1487.105556][ T8714] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1487.303281][T15089] nvme_fabrics: unknown parameter or missing value 'Ï 3`@‘“Þø*îÒÀ@é=Ø+ûÉLB¼Žä¼ÙÇËÏÙ•1ŒØòB5³öN°^ýaAû~Pžä¶˜(tñZ[’Áx' in ctrl creation request [ 1487.554756][ T8714] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1487.554791][ T8714] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1487.554803][ T8714] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1487.557888][ T8714] usb 3-1: config 0 descriptor?? [ 1487.561863][ T8714] pwc: Askey VC010 type 2 USB webcam detected. [ 1488.567060][ T8714] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1488.581486][ T8714] pwc: recv_control_msg error -32 req 02 val 2700 [ 1488.583626][ T8714] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1488.604439][ T8714] pwc: recv_control_msg error -32 req 04 val 1000 [ 1488.623839][ T8714] pwc: recv_control_msg error -32 req 04 val 1300 [ 1488.631344][ T8714] pwc: recv_control_msg error -32 req 04 val 1400 [ 1488.632024][ T8714] pwc: recv_control_msg error -32 req 02 val 2000 [ 1488.632737][ T8714] pwc: recv_control_msg error -32 req 02 val 2100 [ 1488.633209][ T8714] pwc: recv_control_msg error -71 req 04 val 1500 [ 1488.633746][ T8714] pwc: recv_control_msg error -71 req 02 val 2500 [ 1488.634203][ T8714] pwc: recv_control_msg error -71 req 02 val 2400 [ 1488.676011][ T8714] pwc: recv_control_msg error -71 req 02 val 2600 [ 1488.681241][T14834] hsr_slave_0: entered promiscuous mode [ 1488.682020][ T8714] pwc: recv_control_msg error -71 req 02 val 2900 [ 1488.682531][ T8714] pwc: recv_control_msg error -71 req 02 val 2800 [ 1488.683251][ T8714] pwc: recv_control_msg error -71 req 04 val 1100 [ 1488.683744][ T8714] pwc: recv_control_msg error -71 req 04 val 1200 [ 1488.724319][T14834] hsr_slave_1: entered promiscuous mode [ 1488.755041][T14834] debugfs: 'hsr0' already exists in 'hsr' [ 1488.755067][T14834] Cannot create hsr debugfs directory [ 1488.780357][ T8714] pwc: Registered as video103. [ 1488.835466][ T8714] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input45 [ 1488.859387][ T8714] usb 3-1: USB disconnect, device number 74 [ 1493.001480][T14834] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1493.070497][T14834] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1493.465843][T15141] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2049'. [ 1493.664256][T14834] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1493.752339][T14834] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1494.716577][T14834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1494.792677][T14834] 8021q: adding VLAN 0 to HW filter on device team0 [ 1494.833292][ T4552] bridge0: port 1(bridge_slave_0) entered blocking state [ 1494.833482][ T4552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1495.032580][T13194] bridge0: port 2(bridge_slave_1) entered blocking state [ 1495.033913][T13194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1495.482683][T14834] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1495.482699][T14834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1498.573988][T14834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1500.483505][T14834] veth0_vlan: entered promiscuous mode [ 1500.538918][T14834] veth1_vlan: entered promiscuous mode [ 1501.012070][T14834] veth0_macvtap: entered promiscuous mode [ 1501.030356][T14834] veth1_macvtap: entered promiscuous mode [ 1501.086890][T14834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1501.110776][T14834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1501.171004][ T6673] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1501.200111][ T3619] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1501.201031][ T3619] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1501.201145][ T3619] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1503.151738][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1503.151761][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1504.485418][T15246] 9pnet_fd: p9_fd_create_tcp (15246): problem connecting socket to 127.0.0.1 [ 1505.425162][ T6675] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1505.425182][ T6675] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1506.386360][T15262] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1810'. [ 1507.323547][T15265] nvme_fabrics: unknown parameter or missing value 'Ï 3`@‘“Þø*îÒÀ@é=Ø+ûÉLB¼Žä¼ÙÇËÏÙ•1ŒØòB5³öN°^ýaAû~Pžä¶˜(tñZ[’Áx' in ctrl creation request [ 1509.344813][ T9] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1510.309212][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 1510.327563][ T9] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1510.327581][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1510.327591][ T9] usb 7-1: Product: syz [ 1510.327598][ T9] usb 7-1: Manufacturer: syz [ 1510.327605][ T9] usb 7-1: SerialNumber: syz [ 1510.372728][ T9] usb 7-1: config 0 descriptor?? [ 1510.835368][ T9] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1512.918601][ T9] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1512.944688][ T9] usb 7-1: USB disconnect, device number 34 [ 1512.961684][T15303] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2085'. [ 1513.765660][ T5837] bond0: (slave syz_tun): Releasing backup interface [ 1513.930088][T13057] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1513.963754][T13057] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1513.972905][T13057] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1513.981357][T13057] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1513.998488][T13057] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1516.127509][T13057] Bluetooth: hci2: command tx timeout [ 1517.010561][ T3619] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1518.015871][ T3619] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1518.194846][T13057] Bluetooth: hci2: command tx timeout [ 1518.442448][T15344] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2097'. [ 1520.011936][T15354] tmpfs: Unsupported parameter 'huge' [ 1520.159693][ T3619] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1520.274948][T13057] Bluetooth: hci2: command tx timeout [ 1520.321957][T15354] IPVS: Error connecting to the multicast addr [ 1521.682035][ T3619] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1522.429187][T13057] Bluetooth: hci2: command tx timeout [ 1523.010294][T15313] chnl_net:caif_netlink_parms(): no params data found [ 1524.339261][T15393] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2108'. [ 1526.912325][T15313] bridge0: port 1(bridge_slave_0) entered blocking state [ 1526.912475][T15313] bridge0: port 1(bridge_slave_0) entered disabled state [ 1526.914236][T15313] bridge_slave_0: entered allmulticast mode [ 1526.917529][T15313] bridge_slave_0: entered promiscuous mode [ 1527.625893][T15313] bridge0: port 2(bridge_slave_1) entered blocking state [ 1527.626033][T15313] bridge0: port 2(bridge_slave_1) entered disabled state [ 1527.626287][T15313] bridge_slave_1: entered allmulticast mode [ 1527.629093][T15313] bridge_slave_1: entered promiscuous mode [ 1529.093937][T15313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1529.148268][T15313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1529.148687][ T3619] bridge_slave_1: left allmulticast mode [ 1529.148715][ T3619] bridge_slave_1: left promiscuous mode [ 1529.148971][ T3619] bridge0: port 2(bridge_slave_1) entered disabled state [ 1529.249879][ T3619] bridge_slave_0: left allmulticast mode [ 1529.249914][ T3619] bridge_slave_0: left promiscuous mode [ 1529.250218][ T3619] bridge0: port 1(bridge_slave_0) entered disabled state [ 1529.656746][T15422] tmpfs: Unsupported parameter 'huge' [ 1531.391872][T15435] 9pnet_fd: p9_fd_create_tcp (15435): problem connecting socket to 127.0.0.1 [ 1535.126700][ C0] vkms_vblank_simulate: vblank timer overrun [ 1535.328326][ C0] vkms_vblank_simulate: vblank timer overrun [ 1535.447722][ C0] vkms_vblank_simulate: vblank timer overrun [ 1535.571482][ C0] vkms_vblank_simulate: vblank timer overrun [ 1535.821437][ C0] vkms_vblank_simulate: vblank timer overrun [ 1536.663062][ C0] vkms_vblank_simulate: vblank timer overrun [ 1536.970214][ C0] vkms_vblank_simulate: vblank timer overrun [ 1537.181251][ C0] vkms_vblank_simulate: vblank timer overrun [ 1537.221443][ C0] vkms_vblank_simulate: vblank timer overrun [ 1537.345105][ C0] vkms_vblank_simulate: vblank timer overrun [ 1537.518812][T15471] 9pnet_fd: p9_fd_create_tcp (15471): problem connecting socket to 127.0.0.1 [ 1537.773174][ C0] vkms_vblank_simulate: vblank timer overrun [ 1537.841300][ C0] vkms_vblank_simulate: vblank timer overrun [ 1538.002134][ C0] vkms_vblank_simulate: vblank timer overrun [ 1538.076022][ C0] vkms_vblank_simulate: vblank timer overrun [ 1538.142736][ C0] vkms_vblank_simulate: vblank timer overrun [ 1538.258431][ C0] vkms_vblank_simulate: vblank timer overrun [ 1538.675774][ T3619] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1538.936291][ T3619] bond0 (unregistering): (slave team0): Releasing backup interface [ 1538.958448][ T3619] bond0 (unregistering): Released all slaves [ 1539.163157][ C0] vkms_vblank_simulate: vblank timer overrun [ 1539.264861][ C0] vkms_vblank_simulate: vblank timer overrun [ 1539.683038][ C0] vkms_vblank_simulate: vblank timer overrun [ 1539.719172][T15422] IPVS: Error connecting to the multicast addr [ 1540.844823][ T37] kauditd_printk_skb: 8 callbacks suppressed [ 1540.844841][ T37] audit: type=1326 audit(1756357160.712:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15487 comm="syz.7.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c562aebe9 code=0x7ffc0000 [ 1540.844887][ T37] audit: type=1326 audit(1756357160.712:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15487 comm="syz.7.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c562aebe9 code=0x7ffc0000 [ 1540.906727][ T37] audit: type=1326 audit(1756357160.842:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15487 comm="syz.7.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f9c562aebe9 code=0x7ffc0000 [ 1541.467805][T15490] pim6reg: entered allmulticast mode [ 1542.091628][T15500] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2134'. [ 1542.402976][T15313] team0: Port device team_slave_0 added [ 1542.910305][T15313] team0: Port device team_slave_1 added [ 1543.032507][T15515] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2138'. [ 1544.701104][T15313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1544.701122][T15313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1544.701145][T15313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1544.774674][T15313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1544.774692][T15313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1544.774715][T15313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1545.054841][ T3619] hsr_slave_0: left promiscuous mode [ 1545.101840][ T3619] hsr_slave_1: left promiscuous mode [ 1545.102757][ T3619] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1545.102783][ T3619] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1545.166927][ T3619] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1545.166958][ T3619] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1545.384485][ T3619] veth1_macvtap: left promiscuous mode [ 1545.398331][ T3619] veth0_macvtap: left promiscuous mode [ 1545.398670][ T3619] veth1_vlan: left promiscuous mode [ 1545.398883][ T3619] veth0_vlan: left promiscuous mode [ 1546.210988][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.211033][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.552967][T15549] tmpfs: Unsupported parameter 'huge' [ 1547.173220][T15562] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2148'. [ 1547.693971][ C1] vkms_vblank_simulate: vblank timer overrun [ 1548.534079][ C1] vkms_vblank_simulate: vblank timer overrun [ 1548.695791][ C1] vkms_vblank_simulate: vblank timer overrun [ 1549.020702][ C1] vkms_vblank_simulate: vblank timer overrun [ 1551.633870][T15589] misc userio: No port type given on /dev/userio [ 1563.661363][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1563.681538][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1563.682823][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1563.706933][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1563.769514][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1565.966839][T13057] Bluetooth: hci4: command tx timeout [ 1566.160105][ T3619] team0 (unregistering): Port device team_slave_1 removed [ 1568.063719][T13057] Bluetooth: hci4: command tx timeout [ 1568.225731][ T3619] team0 (unregistering): Port device team_slave_0 removed [ 1569.996396][T15682] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2181'. [ 1570.126256][T13057] Bluetooth: hci4: command tx timeout [ 1572.197118][T13057] Bluetooth: hci4: command tx timeout [ 1572.257804][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1572.263922][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1572.266116][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1572.269503][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1572.271709][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1572.336254][ T3619] team0 (unregistering): Port device dummy0 removed [ 1573.767601][T15549] IPVS: Error connecting to the multicast addr [ 1574.469078][T13057] Bluetooth: hci5: command tx timeout [ 1576.514680][T13057] Bluetooth: hci5: command tx timeout [ 1578.693710][ T5839] Bluetooth: hci5: command tx timeout [ 1579.893941][T15724] Bluetooth: hci3: command 0x0406 tx timeout [ 1581.294701][T13057] Bluetooth: hci5: command tx timeout [ 1583.568170][T15643] chnl_net:caif_netlink_parms(): no params data found [ 1586.266150][T15694] chnl_net:caif_netlink_parms(): no params data found [ 1589.166985][ T3619] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1589.195288][T11070] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1589.642969][T11070] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1589.643003][T11070] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1589.643041][T11070] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1589.643060][T11070] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1589.722562][T15795] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1589.733968][T11070] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1596.731068][T15786] sched: DL replenish lagged too much [ 1597.708941][ T3619] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1597.817584][T15836] netlink: 204 bytes leftover after parsing attributes in process `syz.7.2212'. [ 1597.971890][T13057] Bluetooth: hci3: unknown advertising packet type: 0x20 [ 1598.288845][ T8732] usb 6-1: USB disconnect, device number 5 [ 1601.348291][ T3619] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1601.496833][T15643] bridge0: port 1(bridge_slave_0) entered blocking state [ 1601.496999][T15643] bridge0: port 1(bridge_slave_0) entered disabled state [ 1601.497236][T15643] bridge_slave_0: entered allmulticast mode [ 1601.517507][T15643] bridge_slave_0: entered promiscuous mode [ 1601.527739][T15643] bridge0: port 2(bridge_slave_1) entered blocking state [ 1601.527977][T15643] bridge0: port 2(bridge_slave_1) entered disabled state [ 1601.528213][T15643] bridge_slave_1: entered allmulticast mode [ 1601.604886][T15643] bridge_slave_1: entered promiscuous mode [ 1603.246631][ T3619] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1606.807824][T15643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1606.812589][T15694] bridge0: port 1(bridge_slave_0) entered blocking state [ 1606.812676][T15694] bridge0: port 1(bridge_slave_0) entered disabled state [ 1606.812847][T15694] bridge_slave_0: entered allmulticast mode [ 1606.814475][T15694] bridge_slave_0: entered promiscuous mode [ 1606.945610][T15643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1606.949402][T15694] bridge0: port 2(bridge_slave_1) entered blocking state [ 1606.949559][T15694] bridge0: port 2(bridge_slave_1) entered disabled state [ 1606.949808][T15694] bridge_slave_1: entered allmulticast mode [ 1606.998537][T15694] bridge_slave_1: entered promiscuous mode [ 1607.665499][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.665575][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.785188][T15908] 9pnet_fd: p9_fd_create_tcp (15908): problem connecting socket to 127.0.0.1 [ 1609.676940][T15643] team0: Port device team_slave_0 added [ 1609.724649][T15694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1609.746794][T15643] team0: Port device team_slave_1 added [ 1609.754422][T15694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1615.556788][T15643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1615.556805][T15643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1615.556830][T15643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1615.559425][T15694] team0: Port device team_slave_0 added [ 1615.579485][T15694] team0: Port device team_slave_1 added [ 1615.586246][T15643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1615.586263][T15643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1615.586290][T15643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1618.011924][ T3619] bridge_slave_1: left allmulticast mode [ 1618.011951][ T3619] bridge_slave_1: left promiscuous mode [ 1618.012115][ T3619] bridge0: port 2(bridge_slave_1) entered disabled state [ 1618.101669][ T3619] bridge_slave_0: left allmulticast mode [ 1618.101703][ T3619] bridge_slave_0: left promiscuous mode [ 1618.101981][ T3619] bridge0: port 1(bridge_slave_0) entered disabled state [ 1618.456337][ T3619] bridge_slave_1: left allmulticast mode [ 1618.456486][ T3619] bridge_slave_1: left promiscuous mode [ 1618.461911][ T3619] bridge0: port 2(bridge_slave_1) entered disabled state [ 1619.525618][ T3619] bridge_slave_0: left allmulticast mode [ 1619.525639][ T3619] bridge_slave_0: left promiscuous mode [ 1619.525795][ T3619] bridge0: port 1(bridge_slave_0) entered disabled state [ 1620.484708][T11070] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1620.644025][T11070] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1620.644063][T11070] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1620.644075][T11070] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1620.647411][T11070] usb 6-1: config 0 descriptor?? [ 1620.692088][T11070] pwc: Askey VC010 type 2 USB webcam detected. [ 1621.100436][T11070] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1621.101663][T11070] pwc: recv_control_msg error -32 req 02 val 2700 [ 1621.102349][T11070] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1621.103198][T11070] pwc: recv_control_msg error -32 req 04 val 1000 [ 1621.103828][T11070] pwc: recv_control_msg error -32 req 04 val 1300 [ 1621.104959][T11070] pwc: recv_control_msg error -32 req 04 val 1400 [ 1621.105887][T11070] pwc: recv_control_msg error -32 req 02 val 2000 [ 1621.106723][T11070] pwc: recv_control_msg error -32 req 02 val 2100 [ 1621.107538][T11070] pwc: recv_control_msg error -32 req 04 val 1500 [ 1621.468323][T11070] pwc: recv_control_msg error -32 req 02 val 2400 [ 1621.522848][T15979] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2250'. [ 1621.834001][T11070] pwc: recv_control_msg error -71 req 02 val 2900 [ 1621.842591][T11070] pwc: recv_control_msg error -71 req 02 val 2800 [ 1621.844404][T11070] pwc: recv_control_msg error -71 req 04 val 1100 [ 1621.845038][T11070] pwc: recv_control_msg error -71 req 04 val 1200 [ 1621.857908][T11070] pwc: Registered as video103. [ 1621.909590][T11070] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input46 [ 1621.967432][T11070] usb 6-1: USB disconnect, device number 6 [ 1623.214132][T15724] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1623.242588][T15724] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1623.252310][T15724] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1623.263900][T15724] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1623.272875][T15724] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1625.394781][T13057] Bluetooth: hci2: command tx timeout [ 1625.675264][T11070] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1625.935245][T11070] usb 6-1: Using ep0 maxpacket: 8 [ 1626.630318][ C0] vkms_vblank_simulate: vblank timer overrun [ 1626.777128][T11070] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1626.777159][T11070] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1626.777197][T11070] usb 6-1: Product: syz [ 1626.777210][T11070] usb 6-1: Manufacturer: syz [ 1626.777223][T11070] usb 6-1: SerialNumber: syz [ 1626.797033][T11070] usb 6-1: config 0 descriptor?? [ 1626.895950][ T3619] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1626.996124][ T3619] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1627.011649][T11070] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1627.074100][ T3619] bond0 (unregistering): Released all slaves [ 1627.197315][ C0] vkms_vblank_simulate: vblank timer overrun [ 1627.466449][ T3619] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1627.474709][T13057] Bluetooth: hci2: command tx timeout [ 1627.648510][ T3619] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1627.727179][ T3619] bond0 (unregistering): Released all slaves [ 1627.831503][T15694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1627.831521][T15694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1627.831548][T15694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1627.901040][T15694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1627.901054][T15694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1627.901079][T15694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1628.254591][ C0] vkms_vblank_simulate: vblank timer overrun [ 1629.090376][T11070] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1629.112977][T11070] usb 6-1: USB disconnect, device number 7 [ 1629.443471][T15694] hsr_slave_0: entered promiscuous mode [ 1629.450735][T15694] hsr_slave_1: entered promiscuous mode [ 1629.451668][T15694] debugfs: 'hsr0' already exists in 'hsr' [ 1629.451692][T15694] Cannot create hsr debugfs directory [ 1629.562192][ C0] vkms_vblank_simulate: vblank timer overrun [ 1629.562383][T13057] Bluetooth: hci2: command tx timeout [ 1629.945137][ C0] vkms_vblank_simulate: vblank timer overrun [ 1630.034667][ C0] vkms_vblank_simulate: vblank timer overrun [ 1630.750057][ C0] vkms_vblank_simulate: vblank timer overrun [ 1631.143148][ C0] vkms_vblank_simulate: vblank timer overrun [ 1631.329322][T16029] 9pnet_fd: p9_fd_create_tcp (16029): problem connecting socket to 127.0.0.1 [ 1631.333671][ C0] vkms_vblank_simulate: vblank timer overrun [ 1631.649757][T13057] Bluetooth: hci2: command tx timeout [ 1633.937515][T14142] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1634.085565][T14142] usb 6-1: Using ep0 maxpacket: 16 [ 1634.088116][T14142] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 1634.088140][T14142] usb 6-1: config 0 has no interface number 0 [ 1634.088914][T14142] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1634.088940][T14142] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1634.095993][T14142] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1634.096021][T14142] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1634.096039][T14142] usb 6-1: Product: syz [ 1634.096052][T14142] usb 6-1: SerialNumber: syz [ 1634.173407][T15724] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1634.188497][T14142] usb 6-1: config 0 descriptor?? [ 1634.205611][T15724] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1634.234709][T11070] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1634.236764][T15724] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1634.282170][ C0] vkms_vblank_simulate: vblank timer overrun [ 1634.294123][T14142] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 1634.324939][T15724] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1634.332716][T15724] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1634.387870][T11070] usb 5-1: Using ep0 maxpacket: 8 [ 1634.392641][T14142] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input47 [ 1634.455460][T11070] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1634.455560][T11070] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1634.455579][T11070] usb 5-1: Product: syz [ 1634.455592][T11070] usb 5-1: Manufacturer: syz [ 1634.455604][T11070] usb 5-1: SerialNumber: syz [ 1634.465032][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 1634.552596][T11070] usb 5-1: config 0 descriptor?? [ 1635.129995][T11070] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1635.572593][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1635.572867][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1635.573102][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1635.573341][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1635.573583][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1635.573816][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1635.574051][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1635.574283][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1635.574593][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1635.575034][T15702] usb 6-1: USB disconnect, device number 8 [ 1635.575963][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1635.575987][ C1] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1635.775367][ T3619] hsr_slave_0: left promiscuous mode [ 1635.809252][ T3619] hsr_slave_1: left promiscuous mode [ 1635.810241][ T3619] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1635.810284][ T3619] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1635.909017][ T3619] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1635.909054][ T3619] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1635.917439][T15702] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1635.945527][ T3619] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1635.988811][ T3619] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1636.374694][ T3619] veth1_macvtap: left promiscuous mode [ 1636.374812][ T3619] veth0_macvtap: left promiscuous mode [ 1636.375105][ T3619] veth1_vlan: left promiscuous mode [ 1636.375321][ T3619] veth0_vlan: left promiscuous mode [ 1636.434680][T15724] Bluetooth: hci4: command tx timeout [ 1636.530210][ C0] vkms_vblank_simulate: vblank timer overrun [ 1636.615615][ C0] vkms_vblank_simulate: vblank timer overrun [ 1636.823833][T11070] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1636.866685][T11070] usb 5-1: USB disconnect, device number 71 [ 1637.278397][ C0] vkms_vblank_simulate: vblank timer overrun [ 1637.531220][ C0] vkms_vblank_simulate: vblank timer overrun [ 1637.912326][ C0] vkms_vblank_simulate: vblank timer overrun [ 1638.514828][T15724] Bluetooth: hci4: command tx timeout [ 1639.790183][T16083] 9pnet_fd: p9_fd_create_tcp (16083): problem connecting socket to 127.0.0.1 [ 1640.727982][T15724] Bluetooth: hci4: command tx timeout [ 1641.518131][ C0] vkms_vblank_simulate: vblank timer overrun [ 1641.594322][ C0] vkms_vblank_simulate: vblank timer overrun [ 1641.969536][ C0] vkms_vblank_simulate: vblank timer overrun [ 1642.069317][ C0] vkms_vblank_simulate: vblank timer overrun [ 1642.189753][ C0] vkms_vblank_simulate: vblank timer overrun [ 1642.259376][ C0] vkms_vblank_simulate: vblank timer overrun [ 1642.503377][ C0] vkms_vblank_simulate: vblank timer overrun [ 1642.601702][ C0] vkms_vblank_simulate: vblank timer overrun [ 1642.718277][ C0] vkms_vblank_simulate: vblank timer overrun [ 1642.864955][T15724] Bluetooth: hci4: command tx timeout [ 1642.929385][ C0] vkms_vblank_simulate: vblank timer overrun [ 1642.991342][ C0] vkms_vblank_simulate: vblank timer overrun [ 1643.041879][T16117] comedi comedi3: pcl724: I/O port conflict (0xd,4) [ 1643.106835][ C0] vkms_vblank_simulate: vblank timer overrun [ 1643.262489][ C0] vkms_vblank_simulate: vblank timer overrun [ 1643.709681][ C0] vkms_vblank_simulate: vblank timer overrun [ 1644.617941][ C0] vkms_vblank_simulate: vblank timer overrun [ 1644.817449][T16124] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2285'. [ 1645.964394][ C0] vkms_vblank_simulate: vblank timer overrun [ 1646.244192][ T3619] team0 (unregistering): Port device team_slave_1 removed [ 1646.390500][ C0] vkms_vblank_simulate: vblank timer overrun [ 1646.452090][ C0] vkms_vblank_simulate: vblank timer overrun [ 1646.498687][ T3619] team0 (unregistering): Port device team_slave_0 removed [ 1646.538092][ C0] vkms_vblank_simulate: vblank timer overrun [ 1646.602409][ C0] vkms_vblank_simulate: vblank timer overrun [ 1646.677028][ C0] vkms_vblank_simulate: vblank timer overrun [ 1646.735681][ C0] vkms_vblank_simulate: vblank timer overrun [ 1646.792365][ C0] vkms_vblank_simulate: vblank timer overrun [ 1646.846329][ C0] vkms_vblank_simulate: vblank timer overrun [ 1646.930606][ C0] vkms_vblank_simulate: vblank timer overrun [ 1647.058429][ C0] vkms_vblank_simulate: vblank timer overrun [ 1647.140066][ C0] vkms_vblank_simulate: vblank timer overrun [ 1647.255786][ C0] vkms_vblank_simulate: vblank timer overrun [ 1647.315843][ C0] vkms_vblank_simulate: vblank timer overrun [ 1647.375906][ C0] vkms_vblank_simulate: vblank timer overrun [ 1647.594288][ C0] vkms_vblank_simulate: vblank timer overrun [ 1647.649987][ C0] vkms_vblank_simulate: vblank timer overrun [ 1648.328033][ C0] vkms_vblank_simulate: vblank timer overrun [ 1648.519311][ C0] vkms_vblank_simulate: vblank timer overrun [ 1648.578306][ C0] vkms_vblank_simulate: vblank timer overrun [ 1648.646538][ C0] vkms_vblank_simulate: vblank timer overrun [ 1648.712718][ C0] vkms_vblank_simulate: vblank timer overrun [ 1648.770833][ C0] vkms_vblank_simulate: vblank timer overrun [ 1648.840218][ C0] vkms_vblank_simulate: vblank timer overrun [ 1648.928397][ C0] vkms_vblank_simulate: vblank timer overrun [ 1649.134734][T13586] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1649.329155][T13586] usb 6-1: config 0 has no interfaces? [ 1649.329197][T13586] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1649.329218][T13586] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1649.337848][T13586] usb 6-1: config 0 descriptor?? [ 1649.758821][ T9] usb 6-1: USB disconnect, device number 9 [ 1649.997174][ C0] vkms_vblank_simulate: vblank timer overrun [ 1650.056905][ C0] vkms_vblank_simulate: vblank timer overrun [ 1650.177368][ C0] vkms_vblank_simulate: vblank timer overrun [ 1650.296936][ C0] vkms_vblank_simulate: vblank timer overrun [ 1650.481055][ C0] vkms_vblank_simulate: vblank timer overrun [ 1650.547779][ C0] vkms_vblank_simulate: vblank timer overrun [ 1650.762377][ C0] vkms_vblank_simulate: vblank timer overrun [ 1651.672404][ C0] vkms_vblank_simulate: vblank timer overrun [ 1651.744298][ C0] vkms_vblank_simulate: vblank timer overrun [ 1651.825447][ T3619] team0 (unregistering): Port device team_slave_1 removed [ 1651.865548][ C0] vkms_vblank_simulate: vblank timer overrun [ 1651.956404][ C0] vkms_vblank_simulate: vblank timer overrun [ 1652.016708][ T3619] team0 (unregistering): Port device team_slave_0 removed [ 1652.060100][ C0] vkms_vblank_simulate: vblank timer overrun [ 1652.122171][ C0] vkms_vblank_simulate: vblank timer overrun [ 1652.478108][ C0] vkms_vblank_simulate: vblank timer overrun [ 1652.831919][T16165] tmpfs: Bad value for 'mpol' [ 1653.787176][T16109] bridge0: port 2(bridge_slave_1) entered disabled state [ 1653.795447][T16109] bridge0: port 1(bridge_slave_0) entered disabled state [ 1654.416039][T16109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1654.453340][T16109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1656.349502][T16181] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2301'. [ 1662.836423][T13057] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1663.044066][T13057] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1663.054822][T13057] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1663.057314][T13057] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1663.060381][T13057] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1664.150724][T16110] : entered promiscuous mode [ 1664.204781][ T3502] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1664.211129][ T3502] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1664.213006][ T3502] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1664.217575][ T3502] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1665.158556][T13057] Bluetooth: hci5: command tx timeout [ 1666.864578][ C1] vkms_vblank_simulate: vblank timer overrun [ 1667.285194][T13057] Bluetooth: hci5: command tx timeout [ 1667.399182][ C1] vkms_vblank_simulate: vblank timer overrun [ 1667.914943][T15984] chnl_net:caif_netlink_parms(): no params data found [ 1668.503828][T16227] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2311'. [ 1668.783088][ C1] vkms_vblank_simulate: vblank timer overrun [ 1669.081978][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.082075][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.277451][ C1] vkms_vblank_simulate: vblank timer overrun [ 1669.316772][T13057] Bluetooth: hci5: command tx timeout [ 1671.394999][T13057] Bluetooth: hci5: command tx timeout [ 1671.979247][T15984] bridge0: port 1(bridge_slave_0) entered blocking state [ 1671.979474][T15984] bridge0: port 1(bridge_slave_0) entered disabled state [ 1671.979723][T15984] bridge_slave_0: entered allmulticast mode [ 1671.983941][T15984] bridge_slave_0: entered promiscuous mode [ 1672.096297][T15984] bridge0: port 2(bridge_slave_1) entered blocking state [ 1672.096445][T15984] bridge0: port 2(bridge_slave_1) entered disabled state [ 1672.096703][T15984] bridge_slave_1: entered allmulticast mode [ 1672.106355][T15984] bridge_slave_1: entered promiscuous mode [ 1674.445752][ C0] vkms_vblank_simulate: vblank timer overrun [ 1674.470215][ C0] vkms_vblank_simulate: vblank timer overrun [ 1674.865691][ C0] vkms_vblank_simulate: vblank timer overrun [ 1674.910962][T15984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1675.003673][T15984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1675.004400][T16058] chnl_net:caif_netlink_parms(): no params data found [ 1675.326080][ C0] vkms_vblank_simulate: vblank timer overrun [ 1675.362049][T16197] chnl_net:caif_netlink_parms(): no params data found [ 1675.455738][ C0] vkms_vblank_simulate: vblank timer overrun [ 1675.949360][ C0] vkms_vblank_simulate: vblank timer overrun [ 1676.327003][ C0] vkms_vblank_simulate: vblank timer overrun [ 1676.346038][ C0] vkms_vblank_simulate: vblank timer overrun [ 1676.657432][ C0] vkms_vblank_simulate: vblank timer overrun [ 1676.709562][T15984] team0: Port device team_slave_0 added [ 1679.681896][ C0] vkms_vblank_simulate: vblank timer overrun [ 1681.337004][T15984] team0: Port device team_slave_1 added [ 1681.900763][T15984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1681.900778][T15984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1681.900797][T15984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1682.295850][T15984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1682.295866][T15984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1682.295891][T15984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1682.775776][T16058] bridge0: port 1(bridge_slave_0) entered blocking state [ 1682.775919][T16058] bridge0: port 1(bridge_slave_0) entered disabled state [ 1682.776185][T16058] bridge_slave_0: entered allmulticast mode [ 1682.779439][T16058] bridge_slave_0: entered promiscuous mode [ 1682.834793][T16197] bridge0: port 1(bridge_slave_0) entered blocking state [ 1682.837190][T16197] bridge0: port 1(bridge_slave_0) entered disabled state [ 1682.837450][T16197] bridge_slave_0: entered allmulticast mode [ 1682.840284][T16197] bridge_slave_0: entered promiscuous mode [ 1682.872326][T16058] bridge0: port 2(bridge_slave_1) entered blocking state [ 1682.872481][T16058] bridge0: port 2(bridge_slave_1) entered disabled state [ 1682.872726][T16058] bridge_slave_1: entered allmulticast mode [ 1682.915755][T16058] bridge_slave_1: entered promiscuous mode [ 1682.918304][T16197] bridge0: port 2(bridge_slave_1) entered blocking state [ 1682.918444][T16197] bridge0: port 2(bridge_slave_1) entered disabled state [ 1682.918639][T16197] bridge_slave_1: entered allmulticast mode [ 1682.921432][T16197] bridge_slave_1: entered promiscuous mode [ 1682.933312][ C1] vkms_vblank_simulate: vblank timer overrun [ 1683.837883][ C1] vkms_vblank_simulate: vblank timer overrun [ 1684.299502][T15724] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1684.310817][T15724] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1684.312405][T15724] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1684.333174][T15724] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1684.334005][T15724] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1684.527281][ C1] vkms_vblank_simulate: vblank timer overrun [ 1684.616638][T16306] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2329'. [ 1684.643188][ C1] vkms_vblank_simulate: vblank timer overrun [ 1684.992734][T16058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1685.123211][ C1] vkms_vblank_simulate: vblank timer overrun [ 1685.328969][T16197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1685.520107][T16058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1685.550655][T16197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1686.650156][T16058] team0: Port device team_slave_0 added [ 1686.668805][T16197] team0: Port device team_slave_0 added [ 1686.675315][T13057] Bluetooth: hci3: command tx timeout [ 1686.831323][T16058] team0: Port device team_slave_1 added [ 1686.857591][T16197] team0: Port device team_slave_1 added [ 1688.030882][T16058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1688.030898][T16058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1688.030922][T16058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1688.032291][T16197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1688.032302][T16197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1688.032326][T16197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1688.422781][T16197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1688.422796][T16197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1688.422821][T16197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1688.468675][T16058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1688.468687][T16058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1688.468702][T16058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1688.764993][T13057] Bluetooth: hci3: command tx timeout [ 1691.197124][T13057] Bluetooth: hci3: command tx timeout [ 1693.245331][T13057] Bluetooth: hci3: command tx timeout [ 1694.827412][T16197] hsr_slave_0: entered promiscuous mode [ 1694.843667][T16197] hsr_slave_1: entered promiscuous mode [ 1694.850615][T16197] debugfs: 'hsr0' already exists in 'hsr' [ 1694.850641][T16197] Cannot create hsr debugfs directory [ 1695.054768][T14413] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1695.208146][T14413] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1695.208204][T14413] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1695.208225][T14413] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1695.261408][T14413] usb 6-1: config 0 descriptor?? [ 1695.337957][T14413] pwc: Askey VC010 type 2 USB webcam detected. [ 1695.428424][T15724] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1695.449861][T15724] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1695.453692][T15724] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1695.477134][T15724] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1695.487684][T15724] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1695.700085][T14413] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1695.707200][T14413] pwc: recv_control_msg error -32 req 02 val 2700 [ 1695.716933][T14413] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1695.717949][T14413] pwc: recv_control_msg error -32 req 04 val 1000 [ 1695.729625][T14413] pwc: recv_control_msg error -32 req 04 val 1300 [ 1695.734866][T14413] pwc: recv_control_msg error -32 req 04 val 1400 [ 1695.739659][T14413] pwc: recv_control_msg error -32 req 02 val 2000 [ 1695.740821][T14413] pwc: recv_control_msg error -32 req 02 val 2100 [ 1695.745374][T14413] pwc: recv_control_msg error -32 req 04 val 1500 [ 1696.170378][T14413] pwc: recv_control_msg error -71 req 02 val 2600 [ 1696.171983][T14413] pwc: recv_control_msg error -71 req 02 val 2900 [ 1696.173175][T14413] pwc: recv_control_msg error -71 req 02 val 2800 [ 1696.175562][T14413] pwc: recv_control_msg error -71 req 04 val 1100 [ 1696.176215][T14413] pwc: recv_control_msg error -71 req 04 val 1200 [ 1696.183048][T14413] pwc: Registered as video103. [ 1696.213033][T14413] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input48 [ 1696.278086][T14413] usb 6-1: USB disconnect, device number 10 [ 1698.048535][T15724] Bluetooth: hci2: command tx timeout [ 1698.276561][T16373] overlayfs: failed to resolve './file1': -2 [ 1700.285601][T15724] Bluetooth: hci2: command tx timeout [ 1700.400122][ T3619] bridge_slave_1: left allmulticast mode [ 1700.400146][ T3619] bridge_slave_1: left promiscuous mode [ 1700.400296][ T3619] bridge0: port 2(bridge_slave_1) entered disabled state [ 1700.726657][ T3619] bridge_slave_0: left allmulticast mode [ 1700.726690][ T3619] bridge_slave_0: left promiscuous mode [ 1700.726971][ T3619] bridge0: port 1(bridge_slave_0) entered disabled state [ 1701.498505][T14101] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1701.597285][ T3619] bridge_slave_1: left allmulticast mode [ 1701.597318][ T3619] bridge_slave_1: left promiscuous mode [ 1701.597582][ T3619] bridge0: port 2(bridge_slave_1) entered disabled state [ 1702.044976][T14101] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1702.045013][T14101] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1702.045025][T14101] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1702.048134][ T3619] bridge_slave_0: left allmulticast mode [ 1702.048154][ T3619] bridge_slave_0: left promiscuous mode [ 1702.048321][ T3619] bridge0: port 1(bridge_slave_0) entered disabled state [ 1702.055509][T14101] usb 6-1: config 0 descriptor?? [ 1702.077530][T14101] pwc: Askey VC010 type 2 USB webcam detected. [ 1702.171954][ T3619] bridge_slave_1: left allmulticast mode [ 1702.172043][ T3619] bridge_slave_1: left promiscuous mode [ 1702.172411][ T3619] bridge0: port 2(bridge_slave_1) entered disabled state [ 1702.249663][ T3619] bridge_slave_0: left allmulticast mode [ 1702.249698][ T3619] bridge_slave_0: left promiscuous mode [ 1702.250061][ T3619] bridge0: port 1(bridge_slave_0) entered disabled state [ 1702.385273][T15724] Bluetooth: hci2: command tx timeout [ 1702.472335][T14101] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1702.473336][T14101] pwc: recv_control_msg error -32 req 02 val 2700 [ 1702.474286][T14101] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1702.475804][T14101] pwc: recv_control_msg error -32 req 04 val 1000 [ 1702.477029][T14101] pwc: recv_control_msg error -32 req 04 val 1300 [ 1702.478285][T14101] pwc: recv_control_msg error -32 req 04 val 1400 [ 1702.479272][T14101] pwc: recv_control_msg error -32 req 02 val 2000 [ 1702.684772][T14101] pwc: recv_control_msg error -71 req 04 val 1500 [ 1702.685283][T14101] pwc: recv_control_msg error -71 req 02 val 2500 [ 1702.726961][T14101] pwc: recv_control_msg error -71 req 02 val 2400 [ 1702.727487][T14101] pwc: recv_control_msg error -71 req 02 val 2600 [ 1702.727966][T14101] pwc: recv_control_msg error -71 req 02 val 2900 [ 1702.728472][T14101] pwc: recv_control_msg error -71 req 02 val 2800 [ 1702.729138][T14101] pwc: recv_control_msg error -71 req 04 val 1100 [ 1702.729599][T14101] pwc: recv_control_msg error -71 req 04 val 1200 [ 1702.775943][T14101] pwc: Registered as video103. [ 1702.779251][T14101] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input49 [ 1702.815392][T14101] usb 6-1: USB disconnect, device number 11 [ 1703.088420][T15103] udevd[15103]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 1703.319584][T16394] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1703.321820][T16394] IPv6: NLM_F_CREATE should be set when creating new route [ 1703.325870][T16394] IPv6: NLM_F_CREATE should be set when creating new route [ 1703.325947][T16394] IPv6: NLM_F_CREATE should be set when creating new route [ 1704.442716][T15724] Bluetooth: hci2: command tx timeout [ 1707.039668][T16407] binder: BINDER_SET_CONTEXT_MGR already set [ 1707.039703][T16407] binder: 16405:16407 ioctl 4018620d 200000000040 returned -16 [ 1709.455683][ T3619] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1709.733669][ T3619] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1709.765407][ T3619] bond0 (unregistering): Released all slaves [ 1711.498852][ T3619] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1711.575455][ T3619] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1711.680603][ T3619] bond0 (unregistering): Released all slaves [ 1712.506413][ T3619] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1712.544735][ T5952] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1712.615150][ T3619] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1712.704628][ T5952] usb 6-1: Using ep0 maxpacket: 8 [ 1712.706803][ T5952] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1712.706829][ T5952] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1712.706852][ T5952] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1712.706873][ T5952] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1712.706920][ T5952] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1712.706942][ T5952] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1712.711343][ T3619] bond0 (unregistering): Released all slaves [ 1712.920936][ T5952] usb 6-1: usb_control_msg returned -32 [ 1712.920966][ T5952] usbtmc 6-1:16.0: can't read capabilities [ 1712.994721][T16304] chnl_net:caif_netlink_parms(): no params data found [ 1713.056970][ T3619] : left promiscuous mode [ 1715.080456][T13191] usb 6-1: USB disconnect, device number 12 [ 1720.761719][T13057] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1720.784828][T13057] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1720.787839][T13057] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1720.789001][T13057] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1720.789748][T13057] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1724.834951][T13057] Bluetooth: hci4: command tx timeout [ 1725.930532][T16304] bridge0: port 1(bridge_slave_0) entered blocking state [ 1725.948382][T16304] bridge0: port 1(bridge_slave_0) entered disabled state [ 1725.950999][T16304] bridge_slave_0: entered allmulticast mode [ 1726.425934][ C1] vkms_vblank_simulate: vblank timer overrun [ 1726.449732][T16304] bridge_slave_0: entered promiscuous mode [ 1726.673034][T16304] bridge0: port 2(bridge_slave_1) entered blocking state [ 1726.673140][T16304] bridge0: port 2(bridge_slave_1) entered disabled state [ 1726.673305][T16304] bridge_slave_1: entered allmulticast mode [ 1726.675277][T16304] bridge_slave_1: entered promiscuous mode [ 1726.924930][ C1] vkms_vblank_simulate: vblank timer overrun [ 1726.925446][T15724] Bluetooth: hci4: command tx timeout [ 1727.137665][ C1] vkms_vblank_simulate: vblank timer overrun [ 1727.619694][ C1] vkms_vblank_simulate: vblank timer overrun [ 1728.708587][T16304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1728.897034][ C1] vkms_vblank_simulate: vblank timer overrun [ 1729.724894][T15724] Bluetooth: hci4: command tx timeout [ 1729.977228][ C1] vkms_vblank_simulate: vblank timer overrun [ 1730.709561][ C1] vkms_vblank_simulate: vblank timer overrun [ 1730.848725][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.848806][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.801139][T15724] Bluetooth: hci4: command tx timeout [ 1731.944762][ T3619] hsr_slave_0: left promiscuous mode [ 1731.985560][ T3619] hsr_slave_1: left promiscuous mode [ 1731.986486][ T3619] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1732.282632][ T3619] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1733.111507][ C0] vkms_vblank_simulate: vblank timer overrun [ 1733.254623][ C0] vkms_vblank_simulate: vblank timer overrun [ 1733.315177][ T3619] hsr_slave_0: left promiscuous mode [ 1733.355100][ T3619] hsr_slave_1: left promiscuous mode [ 1733.356062][ T3619] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1733.411450][ T3619] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1733.451756][ T3619] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1733.700756][ T3619] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1733.832698][ C0] vkms_vblank_simulate: vblank timer overrun [ 1734.387552][ C0] vkms_vblank_simulate: vblank timer overrun [ 1734.674388][ C0] vkms_vblank_simulate: vblank timer overrun [ 1734.826374][ C0] vkms_vblank_simulate: vblank timer overrun [ 1736.826182][ C0] vkms_vblank_simulate: vblank timer overrun [ 1740.499958][ C1] vkms_vblank_simulate: vblank timer overrun [ 1740.582006][ C1] vkms_vblank_simulate: vblank timer overrun [ 1740.628658][ C1] vkms_vblank_simulate: vblank timer overrun [ 1740.712761][ C1] vkms_vblank_simulate: vblank timer overrun [ 1740.826794][ C1] vkms_vblank_simulate: vblank timer overrun [ 1741.200100][ C1] vkms_vblank_simulate: vblank timer overrun [ 1741.947100][ C1] vkms_vblank_simulate: vblank timer overrun [ 1742.074250][ C1] vkms_vblank_simulate: vblank timer overrun [ 1742.805011][ C1] vkms_vblank_simulate: vblank timer overrun [ 1743.219770][ C1] vkms_vblank_simulate: vblank timer overrun [ 1743.399785][ C1] vkms_vblank_simulate: vblank timer overrun [ 1743.494586][T14413] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1743.565061][ C1] vkms_vblank_simulate: vblank timer overrun [ 1743.687035][T14413] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1743.687096][T14413] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1743.687117][T14413] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1743.693497][T14413] usb 6-1: config 0 descriptor?? [ 1743.699622][T14413] pwc: Askey VC010 type 2 USB webcam detected. [ 1744.061992][ C1] vkms_vblank_simulate: vblank timer overrun [ 1744.153635][T14413] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1744.155025][T14413] pwc: recv_control_msg error -32 req 02 val 2700 [ 1744.155936][T14413] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1744.160660][T14413] pwc: recv_control_msg error -32 req 04 val 1000 [ 1744.164824][T14413] pwc: recv_control_msg error -32 req 04 val 1300 [ 1744.165538][T14413] pwc: recv_control_msg error -32 req 04 val 1400 [ 1744.167517][T14413] pwc: recv_control_msg error -32 req 02 val 2000 [ 1744.168213][T14413] pwc: recv_control_msg error -32 req 02 val 2100 [ 1744.168952][T14413] pwc: recv_control_msg error -32 req 04 val 1500 [ 1744.169706][T14413] pwc: recv_control_msg error -32 req 02 val 2500 [ 1744.398802][T14413] pwc: recv_control_msg error -71 req 02 val 2600 [ 1744.399401][T14413] pwc: recv_control_msg error -71 req 02 val 2900 [ 1744.400101][T14413] pwc: recv_control_msg error -71 req 02 val 2800 [ 1744.424577][T14413] pwc: recv_control_msg error -71 req 04 val 1100 [ 1744.461308][T14413] pwc: recv_control_msg error -71 req 04 val 1200 [ 1744.594591][T14413] pwc: Registered as video103. [ 1744.658216][T14413] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input50 [ 1744.761887][T14413] usb 6-1: USB disconnect, device number 13 [ 1745.010917][ C1] vkms_vblank_simulate: vblank timer overrun [ 1745.098079][T13057] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1745.123455][T13057] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1745.134237][T13057] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1745.140243][T13057] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1745.141957][T13057] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1745.227467][ C1] vkms_vblank_simulate: vblank timer overrun [ 1746.971740][ C1] vkms_vblank_simulate: vblank timer overrun [ 1747.783972][T13057] Bluetooth: hci6: command tx timeout [ 1750.274601][T13057] Bluetooth: hci6: command tx timeout [ 1752.336369][ T3619] team0 (unregistering): Port device team_slave_1 removed [ 1752.384597][T13057] Bluetooth: hci6: command tx timeout [ 1754.583489][T13057] Bluetooth: hci6: command tx timeout [ 1755.204031][ T3619] team0 (unregistering): Port device team_slave_0 removed [ 1755.376106][T16601] tmpfs: Bad value for 'mpol' [ 1756.061116][T15724] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1756.087684][T15724] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1756.090271][T15724] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1756.094406][T15724] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1756.117255][T15724] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1758.227566][T15724] Bluetooth: hci7: command tx timeout [ 1760.275244][T15724] Bluetooth: hci7: command tx timeout [ 1761.014981][T14413] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1761.164802][T14413] usb 6-1: device descriptor read/64, error -71 [ 1761.404726][T14413] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1761.534620][T14413] usb 6-1: device descriptor read/64, error -71 [ 1761.649891][T14413] usb usb6-port1: attempt power cycle [ 1762.004732][T14413] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1762.025543][T14413] usb 6-1: device descriptor read/8, error -71 [ 1762.206953][ T3619] team0 (unregistering): Port device team_slave_1 removed [ 1762.264558][T14413] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1762.309680][T14413] usb 6-1: device descriptor read/8, error -71 [ 1762.354769][T15724] Bluetooth: hci7: command tx timeout [ 1762.377015][ T3619] team0 (unregistering): Port device team_slave_0 removed [ 1762.425270][T14413] usb usb6-port1: unable to enumerate USB device [ 1763.377664][T16635] tmpfs: Bad value for 'mpol' [ 1764.644507][T15724] Bluetooth: hci7: command tx timeout [ 1765.276696][ T3619] team0 (unregistering): Port device team_slave_1 removed [ 1765.465010][T16645] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2407'. [ 1765.747529][ T3619] team0 (unregistering): Port device team_slave_0 removed [ 1767.352459][T16304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1769.794619][T15702] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1769.926114][T15702] usb 6-1: device descriptor read/64, error -71 [ 1770.276266][T15702] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1770.404611][T15702] usb 6-1: device descriptor read/64, error -71 [ 1770.515088][T15702] usb usb6-port1: attempt power cycle [ 1770.746026][T16197] netdevsim netdevsim9: probe with driver netdevsim failed with error -12 [ 1770.885946][T15702] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1770.905428][T15702] usb 6-1: device descriptor read/8, error -71 [ 1771.144758][T15702] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1771.175810][T15702] usb 6-1: device descriptor read/8, error -71 [ 1771.285099][T15702] usb usb6-port1: unable to enumerate USB device [ 1771.876540][T16692] tmpfs: Bad value for 'mpol' [ 1773.633273][T16703] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2416'. [ 1774.192688][T16461] chnl_net:caif_netlink_parms(): no params data found [ 1775.083300][T16602] chnl_net:caif_netlink_parms(): no params data found [ 1776.078750][T16567] chnl_net:caif_netlink_parms(): no params data found [ 1776.136902][T16461] bridge0: port 1(bridge_slave_0) entered blocking state [ 1776.140657][T16461] bridge0: port 1(bridge_slave_0) entered disabled state [ 1776.140916][T16461] bridge_slave_0: entered allmulticast mode [ 1776.174268][T16461] bridge_slave_0: entered promiscuous mode [ 1776.239149][T16461] bridge0: port 2(bridge_slave_1) entered blocking state [ 1776.239318][T16461] bridge0: port 2(bridge_slave_1) entered disabled state [ 1776.239672][T16461] bridge_slave_1: entered allmulticast mode [ 1776.267706][T16461] bridge_slave_1: entered promiscuous mode [ 1776.824303][ C0] vkms_vblank_simulate: vblank timer overrun [ 1776.905423][T16747] [ 1776.905436][T16747] ====================================================== [ 1776.905446][T16747] WARNING: possible circular locking dependency detected [ 1776.905459][T16747] syzkaller #0 Not tainted [ 1776.905470][T16747] ------------------------------------------------------ [ 1776.905478][T16747] syz.7.2419/16747 is trying to acquire lock: [ 1776.905490][T16747] ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1776.905543][T16747] [ 1776.905543][T16747] but task is already holding lock: [ 1776.905551][T16747] ffffffff8efa6848 (smc_v6_hashinfo.lock){++.+}-{3:3}, at: smc_diag_dump_proto+0x174/0x1fb0 [ 1776.905593][T16747] [ 1776.905593][T16747] which lock already depends on the new lock. [ 1776.905593][T16747] [ 1776.905600][T16747] [ 1776.905600][T16747] the existing dependency chain (in reverse order) is: [ 1776.905608][T16747] [ 1776.905608][T16747] -> #1 (smc_v6_hashinfo.lock){++.+}-{3:3}: [ 1776.905632][T16747] lock_acquire+0x120/0x360 [ 1776.905654][T16747] rt_write_lock+0x6a/0x110 [ 1776.905671][T16747] smc_hash_sk+0x8f/0x2a0 [ 1776.905687][T16747] smc_sk_init+0x5a1/0x7f0 [ 1776.905703][T16747] __smc_create+0x10d/0x280 [ 1776.905724][T16747] __sock_create+0x4b3/0x9f0 [ 1776.905742][T16747] __sys_socket+0xd7/0x1b0 [ 1776.905758][T16747] __x64_sys_socket+0x7a/0x90 [ 1776.905776][T16747] do_syscall_64+0xfa/0x3b0 [ 1776.905796][T16747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1776.905813][T16747] [ 1776.905813][T16747] -> #0 ((softirq_ctrl.lock)){+.+.}-{3:3}: [ 1776.905838][T16747] validate_chain+0xb9b/0x2140 [ 1776.905860][T16747] __lock_acquire+0xab9/0xd20 [ 1776.905880][T16747] reacquire_held_locks+0x127/0x1d0 [ 1776.905902][T16747] lock_release+0x1b4/0x3e0 [ 1776.905921][T16747] __local_bh_enable_ip+0x10c/0x270 [ 1776.905940][T16747] sock_i_ino+0xa9/0xc0 [ 1776.905961][T16747] smc_diag_dump_proto+0xa4c/0x1fb0 [ 1776.905979][T16747] smc_diag_dump+0x59/0xa0 [ 1776.905996][T16747] netlink_dump+0x6e4/0xe90 [ 1776.906014][T16747] __netlink_dump_start+0x5cb/0x7e0 [ 1776.906031][T16747] smc_diag_handler_dump+0x178/0x210 [ 1776.906047][T16747] sock_diag_rcv_msg+0x4c9/0x600 [ 1776.906065][T16747] netlink_rcv_skb+0x205/0x470 [ 1776.906082][T16747] netlink_unicast+0x843/0xa10 [ 1776.906098][T16747] netlink_sendmsg+0x805/0xb30 [ 1776.906116][T16747] __sock_sendmsg+0x219/0x270 [ 1776.906132][T16747] ____sys_sendmsg+0x508/0x820 [ 1776.906153][T16747] ___sys_sendmsg+0x21f/0x2a0 [ 1776.906173][T16747] __x64_sys_sendmsg+0x1a1/0x260 [ 1776.906194][T16747] do_syscall_64+0xfa/0x3b0 [ 1776.906214][T16747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1776.906230][T16747] [ 1776.906230][T16747] other info that might help us debug this: [ 1776.906230][T16747] [ 1776.906237][T16747] Possible unsafe locking scenario: [ 1776.906237][T16747] [ 1776.906243][T16747] CPU0 CPU1 [ 1776.906250][T16747] ---- ---- [ 1776.906256][T16747] rlock(smc_v6_hashinfo.lock); [ 1776.906269][T16747] lock((softirq_ctrl.lock)); [ 1776.906284][T16747] lock(smc_v6_hashinfo.lock); [ 1776.906303][T16747] lock((softirq_ctrl.lock)); [ 1776.906314][T16747] [ 1776.906314][T16747] *** DEADLOCK *** [ 1776.906314][T16747] [ 1776.906321][T16747] 3 locks held by syz.7.2419/16747: [ 1776.906332][T16747] #0: ffff88802e1ce908 (nlk_cb_mutex-SOCK_DIAG){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 1776.906378][T16747] #1: ffffffff8efa6848 (smc_v6_hashinfo.lock){++.+}-{3:3}, at: smc_diag_dump_proto+0x174/0x1fb0 [ 1776.906425][T16747] #2: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rt_read_lock+0x1f8/0x360 [ 1776.906467][T16747] [ 1776.906467][T16747] stack backtrace: [ 1776.906480][T16747] CPU: 0 UID: 0 PID: 16747 Comm: syz.7.2419 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1776.906501][T16747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1776.906514][T16747] Call Trace: [ 1776.906522][T16747] [ 1776.906531][T16747] dump_stack_lvl+0x189/0x250 [ 1776.906559][T16747] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1776.906583][T16747] ? __pfx__printk+0x10/0x10 [ 1776.906604][T16747] ? print_lock_name+0xde/0x100 [ 1776.906624][T16747] print_circular_bug+0x2ee/0x310 [ 1776.906644][T16747] check_noncircular+0x134/0x160 [ 1776.906672][T16747] validate_chain+0xb9b/0x2140 [ 1776.906696][T16747] ? validate_chain+0x897/0x2140 [ 1776.906728][T16747] __lock_acquire+0xab9/0xd20 [ 1776.906753][T16747] reacquire_held_locks+0x127/0x1d0 [ 1776.906777][T16747] ? __local_bh_disable_ip+0x264/0x400 [ 1776.906800][T16747] lock_release+0x1b4/0x3e0 [ 1776.906822][T16747] ? __local_bh_enable_ip+0x100/0x270 [ 1776.906844][T16747] __local_bh_enable_ip+0x10c/0x270 [ 1776.906865][T16747] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1776.906889][T16747] ? rt_read_unlock+0x65/0xa0 [ 1776.906907][T16747] ? sock_i_ino+0x24/0xc0 [ 1776.906930][T16747] sock_i_ino+0xa9/0xc0 [ 1776.906954][T16747] smc_diag_dump_proto+0xa4c/0x1fb0 [ 1776.906984][T16747] ? __pfx_smc_diag_dump_proto+0x10/0x10 [ 1776.907005][T16747] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 1776.907033][T16747] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 1776.907060][T16747] ? __phys_addr+0xd3/0x180 [ 1776.907083][T16747] ? __kasan_kmalloc_large+0x85/0xa0 [ 1776.907106][T16747] ? rcu_is_watching+0x15/0xb0 [ 1776.907132][T16747] ? rcu_is_watching+0x15/0xb0 [ 1776.907155][T16747] ? trace_kmalloc+0x1f/0xd0 [ 1776.907175][T16747] ? __kmalloc_node_track_caller_noprof+0x213/0x450 [ 1776.907202][T16747] ? __build_skb_around+0x257/0x3e0 [ 1776.907226][T16747] smc_diag_dump+0x59/0xa0 [ 1776.907245][T16747] netlink_dump+0x6e4/0xe90 [ 1776.907269][T16747] ? __pfx_netlink_dump+0x10/0x10 [ 1776.907288][T16747] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1776.907317][T16747] ? lockdep_hardirqs_on+0x9c/0x150 [ 1776.907350][T16747] __netlink_dump_start+0x5cb/0x7e0 [ 1776.907373][T16747] smc_diag_handler_dump+0x178/0x210 [ 1776.907394][T16747] ? __pfx_smc_diag_handler_dump+0x10/0x10 [ 1776.907415][T16747] ? __pfx_smc_diag_dump+0x10/0x10 [ 1776.907435][T16747] ? sock_diag_lock_handler+0x19/0x290 [ 1776.907454][T16747] ? sock_diag_lock_handler+0x19/0x290 [ 1776.907475][T16747] sock_diag_rcv_msg+0x4c9/0x600 [ 1776.907496][T16747] netlink_rcv_skb+0x205/0x470 [ 1776.907516][T16747] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 1776.907536][T16747] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1776.907560][T16747] ? netlink_deliver_tap+0x2e/0x1b0 [ 1776.907584][T16747] netlink_unicast+0x843/0xa10 [ 1776.907606][T16747] ? __pfx_netlink_unicast+0x10/0x10 [ 1776.907625][T16747] ? netlink_sendmsg+0x642/0xb30 [ 1776.907644][T16747] ? skb_put+0x11b/0x210 [ 1776.907666][T16747] netlink_sendmsg+0x805/0xb30 [ 1776.907691][T16747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1776.907715][T16747] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1776.907732][T16747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1776.907753][T16747] __sock_sendmsg+0x219/0x270 [ 1776.907773][T16747] ____sys_sendmsg+0x508/0x820 [ 1776.907798][T16747] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1776.907825][T16747] ? import_iovec+0x74/0xa0 [ 1776.907846][T16747] ___sys_sendmsg+0x21f/0x2a0 [ 1776.907870][T16747] ? __pfx____sys_sendmsg+0x10/0x10 [ 1776.907908][T16747] ? __fget_files+0x2a/0x420 [ 1776.907930][T16747] ? __fget_files+0x3a6/0x420 [ 1776.907957][T16747] __x64_sys_sendmsg+0x1a1/0x260 [ 1776.907981][T16747] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1776.908009][T16747] ? rcu_is_watching+0x15/0xb0 [ 1776.908035][T16747] ? do_syscall_64+0xbe/0x3b0 [ 1776.908058][T16747] do_syscall_64+0xfa/0x3b0 [ 1776.908079][T16747] ? lockdep_hardirqs_on+0x9c/0x150 [ 1776.908100][T16747] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1776.908118][T16747] ? clear_bhb_loop+0x60/0xb0 [ 1776.908137][T16747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1776.908155][T16747] RIP: 0033:0x7f9c562aebe9 [ 1776.908172][T16747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1776.908189][T16747] RSP: 002b:00007f9c53c86038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1776.908208][T16747] RAX: ffffffffffffffda RBX: 00007f9c564d6360 RCX: 00007f9c562aebe9 [ 1776.908223][T16747] RDX: 0000000000004000 RSI: 0000200000000140 RDI: 0000000000000009 [ 1776.908236][T16747] RBP: 00007f9c56331e19 R08: 0000000000000000 R09: 0000000000000000 [ 1776.908249][T16747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1776.908261][T16747] R13: 00007f9c564d63f8 R14: 00007f9c564d6360 R15: 00007ffe10934838 [ 1776.908282][T16747] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1778.254260][T16567] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR [ 1778.824726][T13057] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1778.874710][T13057] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1778.874976][T13057] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1778.875698][T13057] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1778.876182][T13057] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1779.296294][ C0] vkms_vblank_simulate: vblank timer overrun [ 1779.369442][ C0] vkms_vblank_simulate: vblank timer overrun [ 1779.547245][ C0] vkms_vblank_simulate: vblank timer overrun [ 1779.653663][ C0] vkms_vblank_simulate: vblank timer overrun [ 1779.707447][ C0] vkms_vblank_simulate: vblank timer overrun [ 1779.764112][ C0] vkms_vblank_simulate: vblank timer overrun [ 1780.914669][T13057] Bluetooth: hci1: command tx timeout [ 1780.986604][T15346] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1781.213793][T15346] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1781.268891][T16761] chnl_net:caif_netlink_parms(): no params data found [ 1781.525926][T15346] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1781.786712][T15346] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1781.806350][T16761] bridge0: port 1(bridge_slave_0) entered blocking state [ 1781.806486][T16761] bridge0: port 1(bridge_slave_0) entered disabled state [ 1781.806671][T16761] bridge_slave_0: entered allmulticast mode [ 1781.808012][T16761] bridge_slave_0: entered promiscuous mode [ 1781.810097][T16761] bridge0: port 2(bridge_slave_1) entered blocking state [ 1781.810223][T16761] bridge0: port 2(bridge_slave_1) entered disabled state [ 1781.810388][T16761] bridge_slave_1: entered allmulticast mode [ 1781.811745][T16761] bridge_slave_1: entered promiscuous mode [ 1781.993017][T16761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1782.000800][T16761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1782.177981][T16761] team0: Port device team_slave_0 added [ 1782.201957][T16761] team0: Port device team_slave_1 added [ 1782.438479][T16761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1782.438495][T16761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1782.438520][T16761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1782.443825][T16761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1782.443838][T16761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1782.443853][T16761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1782.590782][T15346] bridge_slave_1: left allmulticast mode [ 1782.590802][T15346] bridge_slave_1: left promiscuous mode [ 1782.590931][T15346] bridge0: port 2(bridge_slave_1) entered disabled state [ 1782.675398][T15346] bridge_slave_0: left allmulticast mode [ 1782.675427][T15346] bridge_slave_0: left promiscuous mode [ 1782.675603][T15346] bridge0: port 1(bridge_slave_0) entered disabled state [ 1782.766576][T15346] bridge_slave_1: left allmulticast mode [ 1782.766603][T15346] bridge_slave_1: left promiscuous mode [ 1782.766762][T15346] bridge0: port 2(bridge_slave_1) entered disabled state [ 1782.825314][T15346] bridge_slave_0: left allmulticast mode [ 1782.825344][T15346] bridge_slave_0: left promiscuous mode [ 1782.825514][T15346] bridge0: port 1(bridge_slave_0) entered disabled state [ 1782.886749][T15346] bridge_slave_1: left allmulticast mode [ 1782.886769][T15346] bridge_slave_1: left promiscuous mode [ 1782.886870][T15346] bridge0: port 2(bridge_slave_1) entered disabled state [ 1782.954963][T15346] bridge_slave_0: left allmulticast mode [ 1782.954982][T15346] bridge_slave_0: left promiscuous mode [ 1782.955086][T15346] bridge0: port 1(bridge_slave_0) entered disabled state [ 1782.994671][T13057] Bluetooth: hci1: command tx timeout [ 1783.026491][T15346] bridge_slave_1: left allmulticast mode [ 1783.026518][T15346] bridge_slave_1: left promiscuous mode [ 1783.026670][T15346] bridge0: port 2(bridge_slave_1) entered disabled state [ 1783.086870][T15346] bridge_slave_0: left allmulticast mode [ 1783.086897][T15346] bridge_slave_0: left promiscuous mode [ 1783.087057][T15346] bridge0: port 1(bridge_slave_0) entered disabled state [ 1783.166955][T15346] bridge_slave_1: left allmulticast mode [ 1783.166973][T15346] bridge_slave_1: left promiscuous mode [ 1783.167068][T15346] bridge0: port 2(bridge_slave_1) entered disabled state [ 1783.249998][T15346] bridge_slave_0: left allmulticast mode [ 1783.250016][T15346] bridge_slave_0: left promiscuous mode [ 1783.250124][T15346] bridge0: port 1(bridge_slave_0) entered disabled state [ 1784.564922][T15346] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1784.625099][T15346] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1784.645778][T15346] bond0 (unregistering): Released all slaves [ 1784.815180][T15346] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1784.894955][T15346] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1784.955959][T15346] bond0 (unregistering): Released all slaves [ 1785.074656][T13057] Bluetooth: hci1: command tx timeout [ 1785.145209][T15346] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1785.225105][T15346] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1785.296031][T15346] bond0 (unregistering): Released all slaves [ 1785.435088][T15346] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1785.556520][T15346] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1785.616009][T15346] bond0 (unregistering): Released all slaves [ 1785.765076][T15346] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1785.855252][T15346] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1785.937642][T15346] bond0 (unregistering): Released all slaves [ 1786.150421][T16761] hsr_slave_0: entered promiscuous mode [ 1786.151173][T16761] hsr_slave_1: entered promiscuous mode [ 1786.151657][T16761] debugfs: 'hsr0' already exists in 'hsr' [ 1786.151674][T16761] Cannot create hsr debugfs directory [ 1786.591343][T16761] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1786.629512][T16761] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1786.658364][T16761] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1786.698766][T16761] netdevsim netdevsim9 netdevsim3: renamed from eth3