last executing test programs: 14m25.056582891s ago: executing program 0 (id=127): r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x0}, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r0, r0, r0}, 0x0, 0x0, &(0x7f0000000280)={0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000040)={'\x00', 0x2, 0x5, 0x5e, 0x7, 0x0, 0x0}) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000080)={r2}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000000180)) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000540)={0x6, {{0xa, 0x4e21, 0x7ff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3ff}}}, 0x84) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='t=\x00\x00\x00\x00', @ANYRESHEX=r5, @ANYRESHEX, @ANYBLOB]) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x35a71, 0x51a23}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x20044060) 14m23.944177401s ago: executing program 0 (id=131): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40088a01, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000007080)="f5201a6b6542be6cbad26e239346ffe3dbc7125e4eb0daba2e9ba73337e45b1a2c2828afbe1d99c856f2d7c9b91364a83e3c477d5e9569cf8787de2fd830003be5c3bbb4a246c4e13764c6e255ef511c263c70adb80380cc2b3247fb61ebddd2b945820fc646375953f1322be813b875bf64256ac7a8debe881f8352dc9fd70b9473bf07932110a5d1a94144b2ab0b4cd92458041eef085b29b5c115df0d7db2bea67006c66b64015fc980343e5ff451373afc63f2ae21d63cddeb3b0c53bbb4e0e31663f5b1b53de22517869df6114ac9047ee98a692b4f0e3e7cfc4e42368f217cc705f2bc5d10454ab30eda651c6ee29f0cc5a6ca7b384949955785844742121b5734a8cf3f3fe1d3e5c2085da26a028ba6c84d5cbce6afbe13cbb179d4c251e1d2d68e8c7d9c34eee698ceeb6e40aed55c62c45d8c7fcb2cfe95ce261238ca5c4458647ed7a001788e991e3d2ecfc77bedec164efda9e4a5d5f03043628fd8b5f906371c52e7de2e760b820dce5c3629610a48a036cd54f23ec3ef274f8da724f45c482505864c87359d4411cad79d7434c9a9d79323410b671880a344b933a47d735abd0e63308cf7f6e15790a50ccbcce072526952c763775066125af0fcde57ba3c514301aef17391c76adfc2419829a88e0d91b947d278cd03d94ce98ec639a6163eaa9755b1813685080ce588251fbd4240a7f65cdc1074503b0fe49b24996e52c6899ac90014d9a58566e841bcac357ed59f7e7274b6e94f7a526a5b420c5d6ababab7e7f8ba6ef6f3455a5aed80f4aaadb58fb38f725d524b4fd63238dc7936d62e81ef46bb7346d7f55c4fdbe7606b1053f6faf6d80612311823efe1e6522fd5bbb77c52c868362f263e56ea1447b612d681828561adefdd28fb855fd81f27e2698cc02bbcf7d653cf8dc9eea252f2b1f48c0d2ab70ece454daf9b5829d7106eb8ca8807eebd07d1bf6af6a4523577db893995778759e1be294aea8edb9226a9acbd44f98f60641f87195521491e621b10cc2032434f319e76743601a0bcc99fb3636389172a790e25260de7cb58961f9ad44d16c7604402bbca8cf82be528a64107c0dd114fd3458c0f1e97888c1c739dc678b43b202c603946cb5720a1e7331282a48afb12b461c41b6fd92b97c6960ac9f664f509b02c8267d722f372b007befada669d4cc36fb931763ffd8744b10e78cb849d40f88d190778a70f902faa4f34cae0b9e163b59b1bae96a933afecbc6a768f1d7ae20bf2771f28c1a3d333ae0b6f691d2f985e1ed6d0e1c29d7db36234b9bec18a1ee98b9ae90e4706d1c952f6059cc4d64bfc14152a88443f260d179c705df71e006a60981fefaa8a51c9c368680b830967b01b60734b9924335d7700b083bd7e87b3ad2f3d497e914368a15c5456d08861fb7513e96acb49935dc3f46fcaa297cdbdc759cb8a5a2515a482ca60440da8b7d5a8c79659d99e3892f9086b372d78622d3689267652c4dd60754cb8eb45028b0c237adff5ffaeaf78ed5a541c57feeb014a53e2a98042d5712d5f7a779b7a12bc120b8cf6df35b258fe1ad7ebdbee88d25355560fad504dce4bd878df5e43c55e765ac324dd8d65ce29c2a93f9e085bb51ff75dbbf314ed6aa3a36330fd146d28654c659f1c6c5089c3619be1c7707be835500fb15bf873ab35517b743207621346db75d16fb21624c04ceddda2d607642004f611db7414e1c593ef38c62e4d27a8b7833436609c284a46edc9b973e790aba0bf4c6bc0069ce9372c6c7b93d15740771ddf9c704338f4af870c649ecdaeab106b1242dbb74c284bfb5d87aa688d27befe1dc0d1019fde1842e89eee67e11f925672ebff47e4503e02fa989297e9461d540000b5e0ed2d957efc3b77a10181597c7fb2c94e62db50e46c46d10c1127573bae01166170467b7641d7e07dcd879f04b8dc08dcf460bef8e83aae33151a72eddf9ccac4eb95c48cb4008ba3fea542b2e3c6c4c07850cd4ca551536a20d18ed18852baaaf7339908583aae41f08f3c6f5811cd730e849dc8382e8bdf3519ab900d38a0a9822400d619b52a957b1bbe8384619e5d65588a2ca6bf068ca27fce9aa0448a60d04b3b230db3a939409ec7df45d70a944b34baaf0bf951d205667c8281e9e87468d1a2f6edf79a7d5df12a8564e56d3a952efa4c4be2b09be2c3d699b05268e8cfe998a9f37b8714c92647ada8a8129bc4084624c6f1059f834193deef961f5dbfe500c1bf781f45441984d52800d81d814a82ec4f859c7217146ac447c8462612574a1a8603148ed46bf3e195d417bbe43aa6bf83ea8fb525941ef8dd56149bd6fdcbf626609ddb699e40e83fa4792b39384eb0d1b78c97c6798537b192753caed3a5eaa4a33d54b473b43851cb282cd857ae11a4d34c6b53fc1c334f8ec42672295b88a326b65d338a70bb3d5d866ff55a9ce0345c7a890cd6dee36012c76d862802c9cbaf1abbab99dc898eb432f50474ae6c202121d19f8d0467fcb1279457accf9b777c75390756762dde795d94aaba4c1729f559adc33966fbf517fc91fae21bd8ef22e914bbe6bae774246749ad63d8d16f21c9aebc80a97be408443ae60af610dd3ad9964b2401e049b09dbb46f6126d3d534a7786bb3663719943111231d18e51ed534b1e28807c062280924e5d53a8a1316ca2b5936911a267d5b799fd7d8e5e725271d5b8eb90e3dd9ef9eb1400c68eb8f88622f548af7df4846758cfb74aeb48588d1820f504e97ae1d818feb7113175b04e7c0bae6239672c987253cdf0e9845119f3f200d40f586ab986312144c3525acb78a5784f5707217105bae651e0c000792f4e88c1a924d33fbe5474a71b1e193a8d3a6a65dc485f2a299e7d07a6cf621260dcfc5d79c9243618f57507ca025baa53b3e684667f33dfb8ab9065cc548ad5c881bceb5d937462ea850fc197f5ae8c9489815b2cff853895e987e684195a094d8460ee52ef9d8f6fa0ba01092f0cdffcc7a682ca3125058ce9ed0064d7d0a868b0419b49ded3d93f0c7e1d700288350ff4c130cf6e0b507ce6064623294536c8fc4011b9b40299bfe02144806411d5b36997db26033a5ddeecd6bf3faefd3ca0a6cb70b0561106b2dabb06cf88bb6fa283e43dcd2fa1f33063183e15450385ba6fed4436502211d3181351db793a76ae11ebde2b23f340b7522748a4602ec469b88eb7f3d1325baa536ab8096c58c6f2b4863a541f618112643e194a5873cdae4172bb3005743782d8af22dbf23ab60e7d0f4ceb3ef0c46e23e1ecee1839558bc5c146dd97aba7651dfd2401fb8aec4eda71b1b15a2570130f0f5ff489ad4355a708a6eafa9752eb5c9f7a83f43c3e3b317e7e68133573f585fc27c5cfc0d90016f5be8594e1cfac36b24570cebb5be46d3f5917441ccadc355536b8b9b455b87667edd802b77178251afdefe9a4b5f0ff7e59fa5cf9b449e18bc4bf8154f15913128a2584f7d60a3c09f467233783690df422d3d9982200eb604ec2ef50830bba6f82e8b91823808fac0b07bc0e51a671c32dea0f2f9aa2cfbbc91cdf54b719b6009ce750bab1680cac77398b2a619d550161fa70e7e8b86fb535f8797fca75708efba7f0d95da4ac235d9de68a50c998a72c0c2da90f511ea456f776c881b8416b894cd835ad13c62b035ef4d220a66c86c1c00de534690e42d064bf4fff946af98aec3f9490d6f0586e891d272a4bfb776ab84bd693af6526c4b09beab2460634d929bcc61cf75b041f067e7b503ecd6a80934e169ebb0ac926a85b53cb1d7b63eee6abcd9e250834da6e4da23b3b3d90c2f726861760ca14b78d5e895eb7fa2e8b39f724a0371412b1c94c6a42f1beeae2328e353971531bddcda730b6a0d90f7c58e3ce5953cf5a6c9e3fd657c92fe4b5b8b0b659353944afa5c69c309527d6d4039e78c675c8d2f527fbcb2b765864fed987f785221862bd7deb66e6676ddebdd19cf4cb26869f562928dc98088bb69281615fc6a2dafc466e70ff9ea1a411e1a3ba3f94ed7d429796afc9f0c95da19a4db691c36407985e5f08473dd8afd9de88b2c26b6ebd2ea35177238e18dfc36d579a80074c06f5cca60cf6d64d27eeb121c6c8e5e09aa3165c101068cb748694695e803540d947f33740d30616001448173ef57bbcb82fcb213348a2a58e2d14480b1ce1ad346729631b91f7e343e37abd8e787274ff4598acc99cc58f3578979e6e6a1926333bd8818a256b58e67c6f77145ee26f24998cab89021423e03326c175adaa8ea905122553948ece311cbcb770222e7f4f373398497c8c301480d031fc53c2a7018d91777cec253e89e28a82d15e01c12c0ccae1b56ecff35b90b19769bff4b786d4624679abe852780e9e4b9985e0564ee604027dc2a60f65d2fcf1d354e163a8465f77eb67e2a6c9fa89ea0768f9cf117fd1ea8969e592da11d34f6f9b7adb24f3261dd14199fea6da6b5d31f825b3706492b3305cbf6ef553fadfcad51a0484f09a8d2491c8a937fdd36d9e0b94fb6bdca6e80a6079739cc1d455fd735e89fe89938a7132dc0c9f181953dd9cf2d106a3f1478b46ddf35aae9bc6932227d79ac4f534967be2cbc30fa254658b61752b534257fc10bd8db219ec394b41e7fe541f9086ce19d28e13d2b3c384745fc88ed0cb5ef414e23e8782f99307c49121a733875e9fb9c8559d8ad6bab256dde2bfdee4286c1419b80acf55dd09da71116c0fa902d8e89465c313c311f272a11cd17417372dc74e01f3ba1a9afd8bcb9fad57cde63ad59a6999caaa359e6e5b4216dd3b0bc8d310e28c8a1232cefcbd5070d0537097e370433bc1017b7b1c4efa694a25b4385bccbdf79affb0b6d203b3cefe637fd6f7b51f5ec297471c874a57145b254bd14b89fe62709c94ca3cae304739294c7b4a871768e11cb7a2db0aaeff4abbd00c70b4d4e5e8f8c6d34afe3d619404e20ccf628f7902c17ab1200644fe465751587800d59acb3abd1f8ad9cbd8bfa64c94c44fb3086fd21c046d7430a1faadbd9b1625ee70c1071bede890f1c07113aed9b1a35ab0fb823e2cb38d2ee6376800f63d28326ec3be129333e1024d17c46198e329779a79f4ee69b56374268fefdd29995e411052bcc92318c636aa9fa634f3e537712f720a52cd95d5472cdd6b4eb66bd1ed2c41cb37c615eb486855671d964ba46ee44eb61ffcb0b22b20632ce3222e4c3037f348d5dec196f9e2bcc2335284f5529e4de9e6b4b84fc559de63357bc8ca0a00c16bdea79372b13abb251fd4bc52f1f732811b65b4c51715da133b20caba229244060fdec0ad4c47fdf1963b6aa1acf998585c59867b5afcd08958dceb9937a97e87b2153f45970ca77e5524c5160c69963717630795e3a4768e2521617bc211926e5cb08edea70cae99c6d7eff4c1e041c7ab0d3473d6ceb3cbc24a9f45c5818896463360490911b1fb77a24aa3b394e3ee1155ea2fbc6686db2c715670dc9187b33f3051b4b894b616bdf7fb287113c315413d83e0540676fe9a48d523bef3280611165fb77c7bb33c0a087fc06e7702fc7d8ea4f7aa264c7ed332af03ae3e392bc0f96ec11e3bca6604ccb7941043fb043b4880de676efaf3f0fba185e90db8e8e6718058fd1d26c49d0a163264d4aaf7094d02d6898f75c6edf2e49edf7b0a645018220535e8694baa1e910df6e493c0812c2cbb16966cb22af208279947f9490f2f5d3a49596050604f920af8fa41c5a339609659f331f24fa0aec3787d052a02541137dd1ccdc30970a879e4a42e491137bb3cddf2c87ea6368bc4d9aad9089af50b71d56bd296d891ac2fbec84303486739a44850680353efa2203d7fcfa00d9cd81433adcad3e6aac009784b63a3b7aca58155b24274b2d41de998321bdf0229ce74a0c61a24d74ceb30d4ba766632c4a48d9db4e3b3334830b12f3136158fb16fa745c2ebad16b65b279d28332894755de3e7ae2aa88f9e2af8a46200c427540eb68907152ee7d53212b55c170ab67c47c884db89757b09dc035ea59fe2be1f384b3edef6925c399753832d32296100ca4e2699154d6ed86bc145e92d699e43c2269ed359a004aee75ac5e730dffec87f239328bc95cc281a9c0bba661f6d36ac11d1151851c70cf39fbbabff2190b619294db73008e3d32acb0b29aa3d28d1e50784dbe35eb911d838bd710336612170666ea5f42b72c32be4d83c4ff61987acd1b1f0cebe281806af8ad4b6e7041c31bcb8a93cf0f44826821b0bb9c053468b4d8d034c084ba1c8dfcad9fac6ec379da5425492dc6f770000000050bd9a930ead9e4faf5b557eebe4461320476a7ae12b0dcc9d171f6d2737b824db7259e62915779dc5e8a08bc69c0c68784202aa3462bdff06af76bdf9f106dd6228211534c4433717947dfaca4b7b61a21d706217e3718b5ccac40c3c4692bd59f222d0c2e98af1ff1919256d7b0540ed69b11f212a9598c7499ba634d1677ecf17517e207d40baed5aa0e25b7e70b6b16f6d6f0c36a146db0644ababd31bc50f5039b3bc4f12b603da2675e121b09fe92c69548dfb9df18d0e50c1387280b7bb1366bf5bbabfcef5557a05ce24df1a02f22f791e06c5e3e21e5fd6db7f2c90ffb83b154b0fd9866c46609dc10b274954caf80e83693f5581f23fd765a18aa4e294bbf7a8721015ea6a6e1ba64f79f6609924d43757fd0752024af79e296415b42de3428f14d9d89f84c2e076a0821cc8921fff677ec7b91178bcbd755ece28477a6bd01fd429d824ddfb62edcdab7c4495edc5a3d27826ea4bddaeacfa7cb17632cee0095ca55d3973812033d96ec5e5ed6880b3a998b4998fb7441e11dd060515bdbfd5aa32aac6ae1fceb8e92d7e8985949946a458ca2f69637de6b92410986f8fa5ba4b1598d8383fdbff2e004dee71500302e3e9270371b39237260bde0888702c7b2bcff69192bd381cfe59b197b9dbe5e2eee27b64c17e95a1dade453a6f29dc8bef1bdd34a92a5275972a2cb18f6f553f99c6098f50198b68cd35d2877d9cdd15074422b43b03170f23138dda44b62b5e161705405d2e9a007f8cc9ec7920d1a6e947ccc57b1a51a728fe1afcb84115fe48be15c894cce96391ab3cdc1bd9aa4cf58213c15d1a849c3f38c8ee34b208766129bbb493558c139f2bfc39df29fc73422127823fc9c993f20d9df9e0acaf0b1729437458e0a857ebfe4a373fd491952a475e9c391b7ee02b79554807c0f12293aa385a3c6b18bfbfc690a7aa9bc85d8adb705eac642ec8611ac62d09d2a6892cd671629d457c2191eb5940114113ed8cd4e8411d96200d3d66f947baa7915610c396402d38f109837d29c8e937fb6223a9d0d605a3d91312908fb5a7df36122c35f7e47855d526915c3a7cea432ca4524fcae3b5c6fbad196c1efef0d129d9b3f9d23104fc3c8a90dbcea0400311e51de50c5abb62fcbedf998ebc1cf23fd76bcc2aea2451f6d0d3b8fdd337ce8d24d7ce2a5b29318df58adb0006d4295c138b4b03060134802626e31a5da92b5a7a8677132523affbdc8d958b955eb4615370497429cd3767f2f708c2cadc233bc3e5efc8c837385749da08c6dd573e3b105ce459d659f790dcaf53c1d0b4d8e0c64b6bce15559e59e66b3b0b2695703e9bd5b1c5bb3c5b1028441391f8fbeadc032e890fe5e3be78569056d147a891f4bc85406e78f962b532eb436b0e047a7d3c88bb89455ffbf1da360207af5d827e9fbbedd8393a828a92382329ff444d9a8128c40e302453550426de4babcdee45108e79533b9747fd21b8f775a76e1d4d54a8a98a65ee3c183be34172877c26e600c89949ced85004d69c24d4fee6f87d2ff24900d41577c78dfbff698d438c0e26ebe15d7b75b49a5b2a5c627da3b13f6458aeff3f0a1944a339b4be5e13d58a71928bb77053beaf7b68568205b62f5a4a9b3c0fef441ede90f012047b0cf2228481fab85d94219ce9f417e4e2b6018b319270a6b6f0de93d0147842f582bd4e41f00720626be2b2f9116875ea4f92e380bcfc33058505ee0336e10c71a5abf6f32c72fe68c68c166454db8e101b3a271f04e4dda8947743e0ac408c73cff69c10e7c015c6b078bab0a1c7aab14a26df087b2b4c859e684aebadff5033d1ebd6c6589a27ac75a075e6ef801f5dece0dbd1e477bb70d2b8553a88b13e304e00735e183feab89edf469cb90c0a5bbf778809a9996f4e72b16417672cd97bdd1c0baa64ea2d782aea9d58ea357b54d06f316076b5c413417061b3c7485b534fcc8bf25d2adf043b47a3d47f0755fe6225bba7569fe672d3507c8e15f7139ef7f606c616c52733413befb248eee53c4a9a16f952ac56e18e221626c4f51eb90c1314167c9677a7eb7004b9b42fd6ec21dd38d5b9032c441166be3f8e9dfed39fb0e654ca3126003decf8e50bf8ace994e16fdbe3f53a36a11ed6f06d1bb8e54f574a83035eba379f2453f2346d11414cafbde87cb5d66b650a5e25ebaced402188c1b4b941e788e1af908fff3ef84c1dadef0550687f0b6aeef6063dc1c8c8efe09d611253efb4d288ea407ef3c043aacc3dfc19a18449b38fb97d9fc0bb67de3e1744f782d3a9d1fc449c3a902b1ec8789e336f731a51cc7fefc43736e04942167fbfdac9f15c5b3f921aaa3df0c9709c21339ce890cd4054828615f18fd12548258440a06dbec3d72719b3e9f5f9967525f90f16993cab09c9eab2b27b29c959c002dbb028cc96297d40822772c16b4b786cc57cd581c02f143d6e728eeac1ab4eca6170748002c0e2269611a2b402f9fa8190d9216b1e1b7de8f81074b8dbb665f0d69c52cf573d07ca0752fd6fe7da88dcf4a915ab1533f5686b766393fe9bf1aeef9d17414d1803708e61973dd205097eb1ed466c8dcfb2c7710caf9df713a11c774fd0469880534ae2ccd1e40216ffa145f0fc832b166896810a678f3a47dd24bc2e6835c16e405a444971068dbd47926f430871121be8f19c8ac4fd0a9e3ff7cd961f90f24265de455694cc291de76437953ac314b1791acbe96d3fcae4fa397287a02eac86f13c931f4d4f49ad52cf1db0efdf7027ee8e468d64d316a2208ae33d8fc3274861b41f2e064c99fbba37b7a0c46a3df8dc4589de7ac28df63ed697a48011c863049345c371f10f7d53a56947e348d07e4ff71eaaaf9aaa09bf1147b80d62a60dcec6d7dd4cbf52f2b0b89d2c7de1f16d63ccc0260b0982fcf105736b50001c19eda998426284713670aab21ce128a80b57920d8c3436edb859d4afd7ed835985b5bec01df5447e66ee8511b28671646e71c0669ab2203c4c9a020000279ba87f089d04924cb33ff82f59da9399ce3f20932c073289938e4e7101d357cce920a2aae72f94d6e1aaf9a3905f4da18a7ee849a39f0d1e83adc67ffab826490d4bfff1f80e8c2c180b08e013daf6d054be660390fc4f872b8d60f14951f05ac0dcb4c4281f71ac2d4cb4d68ffdfe8f5c43160d99ea0077486219bb9400a8fc1faacf12878379a7ea5eae2adbbe2871c1664bea1985d594963935019446d605a61ff79802e114a34610d002cf27e0f4b96c6ff880785307161813f48b68c6f9130a6faee6f332e77755fb68b68248ec113030575b1c262c2430c000d11b269ce4e98a32eea3af403630e83aeaaed1420c9fd66eadcf34d6d1fbe457c5216481ddaf6b397912630999fbc5298eab15ab3cce9de7741367264a4e30a61ff7f1d5e7e64290218d9f6f5c9898cd23ee1ac35ab8d3691bf3df31cef54c161bdf3093390ad2322b6f71f22199ac68c5eab4aa7523b4957202751b675fe82c9d42432c92c2fec148da6e5514e9d5f2618d5a616cdbc4a560b3e36eb6cb8baca3251d8e819ea8f552f07ecca0664e7ef22a3a6c11d023eade70f1b872cf58e89c625f561e4858877e39d324dd448b041e4435b676ce0e86de9045e8b9e8305ae60cb7a41c01ce2318af7f9fa011d24aac2b2d31360ce7b437c46df5756d94d1005a0359b57534c49d1e8e173ba183666a19ff6e6c63388250985249eb40f0f981a2bc34e8196e9c468b1bf329c4ac9cf5f19e46734b1238f99f1e6d8c95ecca9cfafc15c756bb4780b675ec9781bfdb583bd91a7df33ed49daec1d65d14f26d7cfadb9e1de06e922939e924b034e4d128cd66a2f7a87c9399c622922e6e33af68c5115053f42c519a054e295b5f8e420630dc116bb2562ac87a6402e4635bd6c6b95943820f86acd5f48ac519b06f1b0bf1c7a70d69e84c95600e017a67e64536197447b810c21cf86a9d09c37aaf6cc39333b414844ce883cec0ffb23e36d5560e9ff6922a9237a6503c72346ebebf57e59c13e7320f670e1826c802b9cc674b55284ddb061e6e38b16c58532497709028ccc4c000604d4a72b3255170a217ac411ea68e64fb3b63653b985abc42bf21629775a05812ef159992320c3cb93805bbebb250e2f9f92b2c8795c388fea24de5e70d45f8ad1764a6e39a1d588191f77fd7bd0408252c784deef806464edc1b4d3de83df34f1b615e10ba20948ca9f28c4f435163e1f5a6fdd0bc8ef397c25b7d704e1ff1dca065022b99778c05ad39f806c3f7ae4278b768eac09b7d317ec5e07db3fc5579a29fb42658ba66c68afb3b8401b2e09c13bc0652309b26cfab2febc3e96a6da6341e6e860468aca74caf06bfc576124594c3f123d5e987319862b0700bd257cff3ea8abff23ebf1a62e575741db2902761578de5c72f4d37bf9186c2391dfff0fcdf2969df27ac0c34d3f07feb0d1887de871e96916add75c15ce2f795749ceadacca94df5808a1629ccd906b3776e7c2a9e94393243de87656432ec21be389731be9821fc035859fffd503f9c8279bd4a36f3be1e3ba0beecaaf6ee44203d8b76c4ca97da38f63fd07ed7812601ab9095a77d52397ecc31819b91d3c28f639bda94c46a5d527abe34bc579338a4db395c57dbeec31a37685ee8121284b63583e026783e47d58deaad78a17e9a946ae7a3db89d8d78d9f37ee5861de7ca92e7335dade99819ecfd63770413b17de97bf403a6d97e163f7eead7d8c182b77cc3d0e0f28f30839445ef751bcf4f21b5803a4e8754fd9a3addb2553ad1d81879addbdc2668e5f2e15926ed805ce7b4ae01be9677c322d59d619cfc806a4946f59010aac481e49d0a0b2ccd0fbd88abf07d4912a081c81633f4a6e0e68eceee686d58a43c45d3bec1046d3bb8d7fc727dda7cfe22af174219bc8e928ca15ff9ce2c707bcea190f8fdeb86a2dc99d7ca81b78efdb0062f1967bb66132164d227e149aa52f39af5e763705373c864323a5885dc6061b5a2ee5501d0b1aa465d93052f29d033a750b1b9cc85fddc0cf168ddc62fb2d1570458d246906fbb689bc8ee3864901eb43f96c19482a7ba7a52fe08b241a32aa9a2774359132b5e1905a08ba37244265070f6d69a428a5834f10d9ba45f476f9e88e856ac223d8cf6ff04894faa2590ecd0a3f6938d661d8aecf6223ae99c414962a86fdc1c2599cee39e9f0153a57ed809bd90023c8d688cc1aa7b5eec5fcd01d07d00100", 0x2000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 14m22.094173213s ago: executing program 0 (id=137): socket$netlink(0x10, 0x3, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x6a6f396b, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x30, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f0000001100)={0x3, 0x10, [0x0, 0x0, 0x0, 0x0]}) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000009c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x4, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in6=@mcast2, @in=@private=0xa010100, @in=@private=0xa010100, @in=@rand_addr=0x6, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}}, 0x0) 14m17.520701504s ago: executing program 0 (id=147): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(0x0, 0x0) r5 = fsmount(r4, 0x0, 0xa) r6 = syz_open_procfs(0x0, &(0x7f0000000280)='gid_map\x00') pread64(r6, 0x0, 0x0, 0x5) pipe2$9p(0x0, 0x4000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x0, 0x1000000002, 0x0, 0x0, 0x6}, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r7, 0xc018643a, &(0x7f0000000040)={0x4000000, 0x8, 0x40d}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x400}, 0x885) 14m16.134503617s ago: executing program 0 (id=151): socket$netlink(0x10, 0x3, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x6a6f396b, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x30, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f0000001100)={0x3, 0x10, [0x0, 0x0, 0x0, 0x0]}) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000009c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x4, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in6=@mcast2, @in=@private=0xa010100, @in=@private=0xa010100, @in=@rand_addr=0x6, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}}, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000300)='./cgroup\x00', &(0x7f0000000040)='romfs\x00', 0x200440, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)=ANY=[@ANYBLOB="380000001214010002bd7000fddbdf250800010000000000080015000000000008004f000000000008004b0013000000080003"], 0x38}, 0x1, 0x0, 0x0, 0x40084}, 0x810) 14m15.659989982s ago: executing program 0 (id=152): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet(0x2, 0x3, 0x9) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x4b, 0x1, 0xffffffff, 0x6, 0x0) shutdown(r2, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(r3, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) r4 = epoll_create(0x10000e9) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r6 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7\x88\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7`\x9b=\xec\x9f\x1d\x9b@$\x8c\bb\x1a\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\'\xffO,4\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2\x01G\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\rr\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\xc6\x8a=\x04\xa35\x9b\xf5\x80E\x8f\x1e\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x10\x00'/276, 0x2) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000100)={r6, 0x0, 0x0, 0x1000}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r7, &(0x7f0000000080)={0x30000009}) r8 = socket(0x15, 0x5, 0x0) bind$inet(r8, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6, 0x4, 0x4, 0x376}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2085}}) r11 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r11, 0x0, 0x0, 0x1000f4) read$FUSE(r11, 0x0, 0x0) 13m59.521479945s ago: executing program 32 (id=152): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet(0x2, 0x3, 0x9) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x4b, 0x1, 0xffffffff, 0x6, 0x0) shutdown(r2, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(r3, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) r4 = epoll_create(0x10000e9) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r6 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7\x88\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7`\x9b=\xec\x9f\x1d\x9b@$\x8c\bb\x1a\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\'\xffO,4\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2\x01G\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\rr\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\xc6\x8a=\x04\xa35\x9b\xf5\x80E\x8f\x1e\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x10\x00'/276, 0x2) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000100)={r6, 0x0, 0x0, 0x1000}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r7, &(0x7f0000000080)={0x30000009}) r8 = socket(0x15, 0x5, 0x0) bind$inet(r8, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6, 0x4, 0x4, 0x376}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2085}}) r11 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r11, 0x0, 0x0, 0x1000f4) read$FUSE(r11, 0x0, 0x0) 13m43.251920654s ago: executing program 2 (id=190): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0xfffffffe, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x80000, 0x0, 0x0, 0x1}, [@mark={0xc, 0x15, {0x35075a, 0x82}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000044}, 0x2c000010) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 13m42.620839913s ago: executing program 2 (id=191): ioctl$TCSETS(0xffffffffffffffff, 0x40204706, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r3}, 0x20) recvmmsg(r3, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) 13m40.071883385s ago: executing program 2 (id=197): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000000080)=0x7) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r3, 0x10e, 0x5, 0x0, &(0x7f0000000100)) gettid() bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x46}, 0x28) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 13m38.457633495s ago: executing program 2 (id=199): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000202, 0x0, 0x0) munlockall() r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10) rt_sigaction(0x34, 0x0, 0x0, 0x0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x42782, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000180)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) write$dsp(r3, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000180), 0x0) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) io_setup(0x20000000001005, &(0x7f0000000200)) sendmsg$alg(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x24040004}, 0x24000090) 13m28.712294065s ago: executing program 2 (id=217): ioctl$TCSETS(0xffffffffffffffff, 0x40204706, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r3}, 0x20) recvmmsg(r3, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) 13m27.686815459s ago: executing program 2 (id=220): socket$nl_xfrm(0x10, 0x3, 0x6) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008200000018080000", @ANYRES32, @ANYBLOB="0000000000000000b70800001cda00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) close(0x3) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x0, 0x39d}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xb}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}}, 0x8000) io_uring_enter(r3, 0x47ba, 0x3e80, 0xa, 0x0, 0x0) 13m12.234939746s ago: executing program 33 (id=220): socket$nl_xfrm(0x10, 0x3, 0x6) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008200000018080000", @ANYRES32, @ANYBLOB="0000000000000000b70800001cda00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) close(0x3) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x0, 0x39d}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xb}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}}, 0x8000) io_uring_enter(r3, 0x47ba, 0x3e80, 0xa, 0x0, 0x0) 12m52.749360796s ago: executing program 3 (id=282): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) 12m52.678290494s ago: executing program 3 (id=284): ioctl$TCSETS(0xffffffffffffffff, 0x40204706, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r3}, 0x20) recvmmsg(r3, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) 12m46.096218808s ago: executing program 3 (id=288): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 12m45.551532746s ago: executing program 3 (id=291): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, 0x0, 0x0) 12m45.41485387s ago: executing program 3 (id=292): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) 12m45.2686975s ago: executing program 3 (id=293): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rt_sigqueueinfo(0x0, 0x7, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(0x0, 0x7) r2 = gettid() sched_setattr(r2, &(0x7f00000000c0)={0x38, 0x5, 0x50, 0xf9cf, 0x4ae4, 0x4, 0x1ff, 0x1, 0x7, 0x8}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$l2tp6(0xa, 0x2, 0x73) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4020054) r3 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) ppoll(&(0x7f0000000580)=[{r3, 0x8f9b6401ac07941b}], 0x1, 0x0, 0x0, 0x0) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000100)='#', 0x1}], 0x1) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r4, 0x40043d14, &(0x7f0000000080)={{0xffffffffffffffff, 0x4}, {0x6, 0x571}}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002980)={&(0x7f00000028c0)=ANY=[@ANYBLOB="30000000120009162dbd7000fbdbdf2507000000", @ANYRES32=0x0, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000004) 12m29.269818131s ago: executing program 34 (id=293): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rt_sigqueueinfo(0x0, 0x7, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(0x0, 0x7) r2 = gettid() sched_setattr(r2, &(0x7f00000000c0)={0x38, 0x5, 0x50, 0xf9cf, 0x4ae4, 0x4, 0x1ff, 0x1, 0x7, 0x8}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$l2tp6(0xa, 0x2, 0x73) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4020054) r3 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) ppoll(&(0x7f0000000580)=[{r3, 0x8f9b6401ac07941b}], 0x1, 0x0, 0x0, 0x0) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000100)='#', 0x1}], 0x1) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r4, 0x40043d14, &(0x7f0000000080)={{0xffffffffffffffff, 0x4}, {0x6, 0x571}}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002980)={&(0x7f00000028c0)=ANY=[@ANYBLOB="30000000120009162dbd7000fbdbdf2507000000", @ANYRES32=0x0, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000004) 12m5.063133674s ago: executing program 4 (id=353): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) socket(0x10, 0x3, 0x9) r0 = gettid() r1 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r1, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x60010002, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) 12m3.99366904s ago: executing program 4 (id=355): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) setfsgid(0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getrlimit(0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setrlimit(0xa, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000200)={0x2040c2, 0x100, 0x18}, 0x18) r0 = dup(0xffffffffffffffff) io_setup(0x19, &(0x7f00000009c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000500)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}]) 12m2.56229766s ago: executing program 4 (id=357): socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r0], 0x0, 0x9, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0xd33638f234726102, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 12m2.457361089s ago: executing program 4 (id=359): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000001180)=ANY=[@ANYBLOB='quota,usrquota_inode_hardlimit=7']) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x8000, 0x0) chdir(&(0x7f0000000140)='./bus\x00') symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 12m1.807865048s ago: executing program 4 (id=362): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) socket(0x10, 0x3, 0x9) r0 = gettid() r1 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r1, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x60010002, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000300)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) 12m0.820831305s ago: executing program 4 (id=363): socket$l2tp(0x2, 0x2, 0x73) r0 = syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x20080) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYRES8=r0], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000000)={'wlan1\x00', @random="0100c3201000"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r4, 0x0, 0xff}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) socket$inet_tcp(0x2, 0x1, 0x0) dup(r5) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r2, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, 0x0) r8 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r8, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_usb_disconnect(r8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) 11m44.919329838s ago: executing program 35 (id=363): socket$l2tp(0x2, 0x2, 0x73) r0 = syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x20080) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYRES8=r0], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000000)={'wlan1\x00', @random="0100c3201000"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r4, 0x0, 0xff}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) socket$inet_tcp(0x2, 0x1, 0x0) dup(r5) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r2, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, 0x0) r8 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r8, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_usb_disconnect(r8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) 11.518947536s ago: executing program 7 (id=1286): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0x4, 0x0, &(0x7f00000000c0)) 9.074129686s ago: executing program 6 (id=1289): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 8.51721817s ago: executing program 7 (id=1290): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4e1d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) fcntl$getownex(r3, 0x10, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001240)={0xffffffffffffffff}, 0x111, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x6, @loopback}, {0xa, 0x4e24, 0x101, @mcast2, 0x7}, r5, 0x9}}, 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x1000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty, 0x9}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0x7}, 0x9c) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c) 7.45051082s ago: executing program 6 (id=1292): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001a00010028bd7000fedbdf048186"], 0x1c}}, 0x884) 6.311010839s ago: executing program 1 (id=1293): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000480)={0x2020}, 0x2020) 6.106620427s ago: executing program 6 (id=1294): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x10) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f0000000280)={&(0x7f00000004c0)="00a1", 0x2}) 5.952324816s ago: executing program 1 (id=1295): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000050000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) mq_notify(0xffffffffffffffff, 0x0) 5.754852876s ago: executing program 7 (id=1296): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0x7, 0x0, &(0x7f0000000300)="88291242a03c3f", 0x0, 0xfeff, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.638682739s ago: executing program 1 (id=1297): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) r1 = socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r5, @ANYRESDEC=r3], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x4000054) socket$inet6_sctp(0xa, 0x1, 0x84) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r6, &(0x7f0000000100)=[{&(0x7f00000000c0)='4', 0x1}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x128000, 0x800}, 0x20) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000140)=0x20, 0x4) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00'}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x8, 0x4) 4.725044059s ago: executing program 6 (id=1298): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0x4, 0x0, &(0x7f00000000c0)) 4.314014663s ago: executing program 7 (id=1299): socket$can_j1939(0x1d, 0x2, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sysinfo(0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ptrace(0x10, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d000800250000000005000000", 0x29}], 0x1) 3.14660018s ago: executing program 6 (id=1300): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000280)=ANY=[]) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.873082278s ago: executing program 1 (id=1301): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8003}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x11, r3, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}) io_uring_enter(r0, 0x68be, 0x5002, 0x4, 0x0, 0x0) 1.802180519s ago: executing program 7 (id=1302): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, 0x0) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x800, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e1f, 0x10000, 0x1cb, 0x8001, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, 0x0, 0x0) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140), 0x4a2f69a2b6e4ecf4, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r7, 0xc0040d07, &(0x7f0000000040)=0x121) r8 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x37}, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) 1.408065434s ago: executing program 1 (id=1303): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000480)={0x2020}, 0x2020) 1.03720533s ago: executing program 1 (id=1304): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sched_setscheduler(0x0, 0x2, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x305cc6, 0x1, 0x0, 0x20a}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) 132.494522ms ago: executing program 7 (id=1305): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4e1d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) fcntl$getownex(r3, 0x10, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001240)={0xffffffffffffffff}, 0x111, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x6, @loopback}, {0xa, 0x4e24, 0x101, @mcast2, 0x7}, r5, 0x9}}, 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x1000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty, 0x9}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0x7}, 0x9c) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c) 0s ago: executing program 6 (id=1306): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000100)=0x1, 0x12) kernel console output (not intermixed with test programs): [ T1175] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 610.727798][ T1175] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 610.749744][ T1175] bond0 (unregistering): Released all slaves [ 610.794297][ T8528] 8021q: adding VLAN 0 to HW filter on device team0 [ 610.931798][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.932612][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 610.939908][ T8558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 610.985210][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.985378][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 611.135909][ T8716] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 611.225732][ T1175] hsr_slave_0: left promiscuous mode [ 611.245749][ T1175] hsr_slave_1: left promiscuous mode [ 611.246336][ T1175] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 611.277727][ T8716] usb 2-1: device descriptor read/64, error -71 [ 611.298066][ T1175] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 611.515957][ T8716] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 611.645720][ T8716] usb 2-1: device descriptor read/64, error -71 [ 611.757319][ T8716] usb usb2-port1: attempt power cycle [ 611.967440][ T1175] team0 (unregistering): Port device team_slave_1 removed [ 612.091535][ T1175] team0 (unregistering): Port device team_slave_0 removed [ 612.135933][ T8716] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 612.174527][ T8716] usb 2-1: device descriptor read/8, error -71 [ 612.415632][ T8716] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 612.449086][ T8716] usb 2-1: device descriptor read/8, error -71 [ 612.561036][ T8716] usb usb2-port1: unable to enumerate USB device [ 614.022930][ T8793] tmpfs: Unknown parameter 'usrquota_inode_har' [ 614.178631][ T8558] 8021q: adding VLAN 0 to HW filter on device team0 [ 614.277820][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.296340][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 614.308127][ T5829] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 614.335996][ T5829] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 614.353406][ T5829] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 614.365819][ T5829] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 614.368377][ T5829] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 614.396521][ T4028] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.396678][ T4028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 615.524001][ T8711] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 615.632351][ T8711] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 615.835865][ T8711] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 616.051538][ T8711] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 616.455951][ T5829] Bluetooth: hci5: command tx timeout [ 616.601017][ T8528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 617.013473][ T8558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 617.432507][ T8794] chnl_net:caif_netlink_parms(): no params data found [ 617.445743][ T10] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 617.576052][ T10] usb 2-1: device descriptor read/64, error -71 [ 617.815874][ T10] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 617.945747][ T10] usb 2-1: device descriptor read/64, error -71 [ 618.061910][ T10] usb usb2-port1: attempt power cycle [ 618.184986][ T8794] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.186012][ T8794] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.186247][ T8794] bridge_slave_0: entered allmulticast mode [ 618.188706][ T8794] bridge_slave_0: entered promiscuous mode [ 618.347221][ T8794] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.347371][ T8794] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.347619][ T8794] bridge_slave_1: entered allmulticast mode [ 618.350324][ T8794] bridge_slave_1: entered promiscuous mode [ 618.395949][ T10] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 618.421694][ T10] usb 2-1: device descriptor read/8, error -71 [ 618.535877][ T5829] Bluetooth: hci5: command tx timeout [ 618.559406][ T8794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 618.608898][ T8794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 618.655803][ T10] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 618.677853][ T10] usb 2-1: device descriptor read/8, error -71 [ 618.786304][ T10] usb usb2-port1: unable to enumerate USB device [ 618.849184][ T8794] team0: Port device team_slave_0 added [ 618.853754][ T8528] veth0_vlan: entered promiscuous mode [ 618.866736][ T8794] team0: Port device team_slave_1 added [ 619.096382][ T8794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 619.096399][ T8794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 619.096424][ T8794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 619.199997][ T8794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 619.200008][ T8794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 619.200023][ T8794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 619.262074][ T8528] veth1_vlan: entered promiscuous mode [ 619.280110][ T8558] veth0_vlan: entered promiscuous mode [ 619.393004][ T4028] bridge_slave_1: left allmulticast mode [ 619.393030][ T4028] bridge_slave_1: left promiscuous mode [ 619.393242][ T4028] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.457538][ T4028] bridge_slave_0: left allmulticast mode [ 619.457568][ T4028] bridge_slave_0: left promiscuous mode [ 619.457828][ T4028] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.282316][ T8844] tmpfs: Unknown parameter 'usrquota_inode_har' [ 620.622314][ T5829] Bluetooth: hci5: command tx timeout [ 621.206415][ T4028] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 621.278204][ T4028] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 621.380508][ T4028] bond0 (unregistering): Released all slaves [ 622.695900][ T5829] Bluetooth: hci5: command tx timeout [ 624.480608][ T8711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 624.622810][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.622879][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.673984][ T8794] hsr_slave_0: entered promiscuous mode [ 624.675243][ T8794] hsr_slave_1: entered promiscuous mode [ 624.683984][ T8794] debugfs: 'hsr0' already exists in 'hsr' [ 624.684009][ T8794] Cannot create hsr debugfs directory [ 624.701777][ T8558] veth1_vlan: entered promiscuous mode [ 624.839061][ T4028] hsr_slave_0: left promiscuous mode [ 624.879096][ T4028] hsr_slave_1: left promiscuous mode [ 624.879994][ T4028] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 625.057035][ T4028] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 625.780614][ T4028] veth1_vlan: left promiscuous mode [ 625.780725][ T4028] veth0_vlan: left promiscuous mode [ 626.930231][ T8358] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 626.940369][ T8358] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 626.946574][ T8358] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 626.947751][ T8358] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 626.953597][ T8358] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 627.316589][ T4028] team0 (unregistering): Port device team_slave_1 removed [ 627.486704][ T4028] team0 (unregistering): Port device team_slave_0 removed [ 629.015893][ T8358] Bluetooth: hci3: command tx timeout [ 630.016472][ T5904] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 630.044638][ T8711] 8021q: adding VLAN 0 to HW filter on device team0 [ 630.197734][ T5904] usb 2-1: no configurations [ 630.197753][ T5904] usb 2-1: can't read configurations, error -22 [ 630.329946][ T5904] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 630.433009][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.433232][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 630.477099][ T5904] usb 2-1: no configurations [ 630.477119][ T5904] usb 2-1: can't read configurations, error -22 [ 630.477460][ T5904] usb usb2-port1: attempt power cycle [ 630.574496][ T4411] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.574626][ T4411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 630.640206][ T8558] veth0_macvtap: entered promiscuous mode [ 630.825712][ T5904] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 630.831232][ T8558] veth1_macvtap: entered promiscuous mode [ 630.854680][ T5904] usb 2-1: no configurations [ 630.854698][ T5904] usb 2-1: can't read configurations, error -22 [ 630.995781][ T5904] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 631.018734][ T5904] usb 2-1: no configurations [ 631.018752][ T5904] usb 2-1: can't read configurations, error -22 [ 631.019126][ T5904] usb usb2-port1: unable to enumerate USB device [ 631.095965][ T8358] Bluetooth: hci3: command tx timeout [ 631.130025][ T8558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 631.581168][ T8558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 631.671273][ T8859] chnl_net:caif_netlink_parms(): no params data found [ 631.889244][ T1352] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.892286][ T1352] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.915608][ T1352] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.025233][ T1352] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.703891][ T8859] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.704017][ T8859] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.704186][ T8859] bridge_slave_0: entered allmulticast mode [ 632.717739][ T8859] bridge_slave_0: entered promiscuous mode [ 632.840264][ T8859] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.840398][ T8859] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.840621][ T8859] bridge_slave_1: entered allmulticast mode [ 632.870210][ T8859] bridge_slave_1: entered promiscuous mode [ 632.907603][ T8879] tmpfs: Unknown parameter 'usrquota_inode_hardlim' [ 633.175888][ T8358] Bluetooth: hci3: command tx timeout [ 633.359043][ T8859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 634.256282][ T8859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 634.608403][ T8711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 634.631306][ T8794] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 635.822847][ T8358] Bluetooth: hci3: command tx timeout [ 635.843446][ T8794] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 635.908264][ T8859] team0: Port device team_slave_0 added [ 635.955210][ T1352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.955232][ T1352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 636.142501][ T8794] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 636.181696][ T8859] team0: Port device team_slave_1 added [ 637.007729][ T8794] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 637.159409][ T8859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 637.159426][ T8859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 637.159450][ T8859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 637.189303][ T8859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 637.189320][ T8859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 637.189344][ T8859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 637.195853][ T10] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 637.247926][ T1352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 637.247945][ T1352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 637.350784][ T10] usb 2-1: no configurations [ 637.350797][ T10] usb 2-1: can't read configurations, error -22 [ 637.399214][ T4028] bridge_slave_1: left allmulticast mode [ 637.399242][ T4028] bridge_slave_1: left promiscuous mode [ 637.399495][ T4028] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.457594][ T4028] bridge_slave_0: left allmulticast mode [ 637.457622][ T4028] bridge_slave_0: left promiscuous mode [ 637.457870][ T4028] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.475795][ T10] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 637.628439][ T10] usb 2-1: no configurations [ 637.628459][ T10] usb 2-1: can't read configurations, error -22 [ 637.629006][ T10] usb usb2-port1: attempt power cycle [ 637.975945][ T10] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 637.998226][ T10] usb 2-1: no configurations [ 637.998245][ T10] usb 2-1: can't read configurations, error -22 [ 638.125946][ T10] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 638.147131][ T10] usb 2-1: no configurations [ 638.147150][ T10] usb 2-1: can't read configurations, error -22 [ 638.147700][ T10] usb usb2-port1: unable to enumerate USB device [ 639.076567][ T4028] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 639.138293][ T4028] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 639.171987][ T4028] bond0 (unregistering): Released all slaves [ 639.353848][ T8859] hsr_slave_0: entered promiscuous mode [ 639.354594][ T8859] hsr_slave_1: entered promiscuous mode [ 639.585709][ T4028] hsr_slave_0: left promiscuous mode [ 639.625742][ T4028] hsr_slave_1: left promiscuous mode [ 639.627798][ T4028] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 639.656976][ T4028] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 639.762730][ T4028] veth1_vlan: left promiscuous mode [ 639.762825][ T4028] veth0_vlan: left promiscuous mode [ 644.487233][ T4028] team0 (unregistering): Port device team_slave_1 removed [ 644.667131][ T4028] team0 (unregistering): Port device team_slave_0 removed [ 646.623915][ T8913] tipc: Started in network mode [ 646.623951][ T8913] tipc: Node identity ac14140f, cluster identity 4711 [ 646.625194][ T8913] tipc: New replicast peer: 255.255.255.255 [ 646.657768][ T8913] tipc: Enabled bearer , priority 10 [ 647.641205][ T8631] tipc: Node number set to 2886997007 [ 647.775289][ T8711] veth0_vlan: entered promiscuous mode [ 648.618444][ T8711] veth1_vlan: entered promiscuous mode [ 648.655131][ T8631] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 648.847462][ T8631] usb 8-1: no configurations [ 648.847481][ T8631] usb 8-1: can't read configurations, error -22 [ 649.470116][ T8950] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 649.728952][ T8951] vivid-003: kernel_thread() failed [ 649.785670][ T8631] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 650.040846][ T8711] veth0_macvtap: entered promiscuous mode [ 650.068030][ T8794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 650.070441][ T8711] veth1_macvtap: entered promiscuous mode [ 650.167094][ T8631] usb 8-1: no configurations [ 650.167114][ T8631] usb 8-1: can't read configurations, error -22 [ 650.168540][ T8631] usb usb8-port1: attempt power cycle [ 650.556354][ T8631] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 650.638032][ T8631] usb 8-1: no configurations [ 650.638098][ T8631] usb 8-1: can't read configurations, error -22 [ 650.826541][ T8794] 8021q: adding VLAN 0 to HW filter on device team0 [ 650.846775][ T8711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 650.876402][ T8631] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 650.881431][ T8711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 650.884962][ T1443] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.885170][ T1443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 650.897521][ T8631] usb 8-1: no configurations [ 650.897541][ T8631] usb 8-1: can't read configurations, error -22 [ 650.897926][ T8631] usb usb8-port1: unable to enumerate USB device [ 650.920216][ T1443] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.925882][ T1443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 650.935908][ T1443] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.941637][ T1443] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.950882][ T1443] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.954994][ T1443] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.106179][ T8959] netlink: 12 bytes leftover after parsing attributes in process `syz.1.706'. [ 653.352992][ T8975] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 653.612643][ T1372] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 653.612663][ T1372] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 653.783176][ T8901] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 653.783195][ T8901] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 654.927396][ C1] vkms_vblank_simulate: vblank timer overrun [ 655.487507][ C1] vkms_vblank_simulate: vblank timer overrun [ 655.518721][ C1] vkms_vblank_simulate: vblank timer overrun [ 656.030517][ C1] vkms_vblank_simulate: vblank timer overrun [ 656.775170][ C1] vkms_vblank_simulate: vblank timer overrun [ 657.003927][ C1] vkms_vblank_simulate: vblank timer overrun [ 657.105027][ C1] vkms_vblank_simulate: vblank timer overrun [ 657.849479][ C1] vkms_vblank_simulate: vblank timer overrun [ 657.901910][ T8794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 657.931231][ T8859] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 658.139775][ T9025] netlink: 12 bytes leftover after parsing attributes in process `syz.1.715'. [ 658.148367][ T8859] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 658.225821][ T8859] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 658.297947][ T8859] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 659.330455][ T9039] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 659.330687][ T9039] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 659.330784][ T9039] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 659.356187][ T8859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 659.435429][ T9039] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 659.448609][ T8859] 8021q: adding VLAN 0 to HW filter on device team0 [ 659.687748][ T4028] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.687957][ T4028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 659.753804][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.775338][ T9039] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 659.775488][ T9039] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 660.409156][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 660.697075][ T9039] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 660.733930][ T8794] veth0_vlan: entered promiscuous mode [ 660.787220][ T9039] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 660.787308][ T9039] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 660.794458][ T8794] veth1_vlan: entered promiscuous mode [ 660.887296][ T9039] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 660.968595][ T9039] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 660.968741][ T9039] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 661.021559][ T8794] veth0_macvtap: entered promiscuous mode [ 661.049855][ T9039] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 661.051261][ T8794] veth1_macvtap: entered promiscuous mode [ 661.101738][ T8794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 661.171786][ T8794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 661.175752][ T8358] Bluetooth: hci1: command 0x0406 tx timeout [ 661.251219][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.251458][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.275306][ T43] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.315208][ T43] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.337617][ T8358] Bluetooth: hci0: command 0x0c1a tx timeout [ 662.494789][ C1] vkms_vblank_simulate: vblank timer overrun [ 662.643369][ C1] vkms_vblank_simulate: vblank timer overrun [ 662.654907][ T8358] Bluetooth: hci4: command 0x0c1a tx timeout [ 662.877884][ T8358] Bluetooth: hci5: command 0x0c1a tx timeout [ 663.024420][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 663.354040][ C1] vkms_vblank_simulate: vblank timer overrun [ 663.483463][ T5829] Bluetooth: hci0: command 0x0c1a tx timeout [ 663.978334][ C1] vkms_vblank_simulate: vblank timer overrun [ 664.033024][ T9076] tipc: Started in network mode [ 664.033055][ T9076] tipc: Node identity 9663fe85244, cluster identity 4711 [ 664.033572][ T9076] tipc: Enabled bearer , priority 0 [ 664.166276][ T9078] syzkaller0: entered promiscuous mode [ 664.166305][ T9078] syzkaller0: entered allmulticast mode [ 664.167649][ T9078] tipc: Resetting bearer [ 664.510876][ C1] vkms_vblank_simulate: vblank timer overrun [ 664.545831][ T9072] tipc: Resetting bearer [ 664.696226][ T5829] Bluetooth: hci4: command 0x0c1a tx timeout [ 664.975832][ T5829] Bluetooth: hci5: command 0x0c1a tx timeout [ 665.095845][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 665.115707][ T8120] tipc: Node number set to 2988703365 [ 665.442195][ C1] vkms_vblank_simulate: vblank timer overrun [ 665.595798][ T5829] Bluetooth: hci0: command 0x0c1a tx timeout [ 666.775796][ T5829] Bluetooth: hci4: command 0x0c1a tx timeout [ 667.024960][ T5829] Bluetooth: hci5: command 0x0c1a tx timeout [ 667.175766][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 667.787034][ T9089] netlink: 12 bytes leftover after parsing attributes in process `syz.1.726'. [ 676.246707][ T9072] tipc: Disabling bearer [ 676.413784][ T8859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 676.656427][ T9096] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 676.656624][ T9096] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 676.656815][ T9096] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 676.656992][ T9096] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 676.657168][ T9096] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 677.634060][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 677.652362][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 677.653565][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 677.685771][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 677.695829][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 678.228661][ C1] vkms_vblank_simulate: vblank timer overrun [ 678.736171][ T9126] netlink: 'syz.7.732': attribute type 8 has an invalid length. [ 679.707529][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 679.707574][ T5829] Bluetooth: hci5: command 0x0c1a tx timeout [ 679.707602][ T5829] Bluetooth: hci4: command 0x0c1a tx timeout [ 679.707629][ T5829] Bluetooth: hci0: command 0x0c1a tx timeout [ 679.707656][ T5829] Bluetooth: hci1: command 0x0406 tx timeout [ 679.717169][ C1] vkms_vblank_simulate: vblank timer overrun [ 679.815757][ T5829] Bluetooth: hci2: command tx timeout [ 680.447304][ T9134] netlink: 12 bytes leftover after parsing attributes in process `syz.7.735'. [ 681.027412][ C1] vkms_vblank_simulate: vblank timer overrun [ 681.267478][ T8859] veth0_vlan: entered promiscuous mode [ 681.622360][ C1] vkms_vblank_simulate: vblank timer overrun [ 682.017097][ T5829] Bluetooth: hci2: command tx timeout [ 682.612320][ C1] vkms_vblank_simulate: vblank timer overrun [ 684.055732][ T5829] Bluetooth: hci2: command tx timeout [ 684.067857][ T8859] veth1_vlan: entered promiscuous mode [ 684.106262][ T9164] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 684.111835][ T9164] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 684.112108][ T9164] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 684.112364][ T9164] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 684.113060][ T9164] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 684.113202][ T9164] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 684.194607][ T9164] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 684.516868][ T4028] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.064415][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.064486][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.135758][ T5829] Bluetooth: hci2: command 0x0c1a tx timeout [ 686.136000][ T8358] Bluetooth: hci3: command 0x0c1a tx timeout [ 686.136015][ T5829] Bluetooth: hci4: command 0x0c1a tx timeout [ 686.136029][ T8358] Bluetooth: hci0: command 0x0c1a tx timeout [ 686.136041][ T5829] Bluetooth: hci1: command 0x0406 tx timeout [ 686.880792][ T4028] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.186527][ T8859] veth0_macvtap: entered promiscuous mode [ 687.206637][ T9098] chnl_net:caif_netlink_parms(): no params data found [ 687.246130][ T8859] veth1_macvtap: entered promiscuous mode [ 687.539636][ T9197] netlink: 'syz.7.744': attribute type 8 has an invalid length. [ 688.215650][ T8358] Bluetooth: hci2: command 0x0c1a tx timeout [ 689.608002][ T9207] netlink: 12 bytes leftover after parsing attributes in process `syz.1.747'. [ 689.813369][ T4028] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.295806][ T8358] Bluetooth: hci2: command 0x0c1a tx timeout [ 690.495070][ T4028] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.554016][ T9210] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 690.554232][ T9210] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 690.554420][ T9210] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 690.554556][ T9210] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 690.698850][ T8358] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 690.719049][ T8358] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 690.732593][ T8358] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 690.737994][ T8358] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 690.741968][ T8358] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 691.677460][ T9098] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.677588][ T9098] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.677811][ T9098] bridge_slave_0: entered allmulticast mode [ 691.732036][ T9098] bridge_slave_0: entered promiscuous mode [ 691.778007][ T9098] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.778164][ T9098] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.778429][ T9098] bridge_slave_1: entered allmulticast mode [ 691.807658][ T9098] bridge_slave_1: entered promiscuous mode [ 692.065662][ T5828] Bluetooth: hci1: command 0x0406 tx timeout [ 692.616031][ T5828] Bluetooth: hci2: command 0x0c1a tx timeout [ 692.616071][ T5828] Bluetooth: hci4: command 0x0c1a tx timeout [ 692.616103][ T5828] Bluetooth: hci0: command 0x0c1a tx timeout [ 692.694981][ T9098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 692.781283][ T9098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 692.855730][ T8358] Bluetooth: hci5: command tx timeout [ 692.925048][ T8631] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 693.088251][ T8631] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 693.088282][ T8631] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 693.088302][ T8631] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 693.088342][ T8631] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 693.088364][ T8631] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.098743][ T8631] usb 2-1: config 0 descriptor?? [ 693.612102][ T8631] plantronics 0003:047F:FFFF.0003: ignoring exceeding usage max [ 694.252262][ T8631] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 694.304818][ T8631] usb 2-1: USB disconnect, device number 53 [ 694.620604][ T9266] fido_id[9266]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 694.653011][ T9098] team0: Port device team_slave_0 added [ 694.693030][ T9098] team0: Port device team_slave_1 added [ 694.871982][ T4028] bridge_slave_1: left allmulticast mode [ 694.872010][ T4028] bridge_slave_1: left promiscuous mode [ 694.872445][ T4028] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.935668][ T8358] Bluetooth: hci5: command tx timeout [ 694.973558][ T4028] bridge_slave_0: left allmulticast mode [ 694.973586][ T4028] bridge_slave_0: left promiscuous mode [ 694.973828][ T4028] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.340283][ T9268] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 695.340433][ T9268] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 695.340553][ T9268] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 695.340655][ T9268] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 695.340758][ T9268] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 695.340842][ T9268] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 695.397988][ T9268] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 696.111201][ T9294] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 696.706090][ T5829] Bluetooth: hci1: command 0x0406 tx timeout [ 697.415691][ T5829] Bluetooth: hci5: command 0x0419 tx timeout [ 697.418203][ T5828] Bluetooth: hci2: command 0x0c1a tx timeout [ 697.418277][ T5828] Bluetooth: hci4: command 0x0c1a tx timeout [ 697.418301][ T5828] Bluetooth: hci0: command 0x0c1a tx timeout [ 699.522579][ T8358] Bluetooth: hci5: command 0x0419 tx timeout [ 699.732354][ T4028] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 699.806377][ T4028] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 699.831525][ T4028] bond0 (unregistering): Released all slaves [ 700.099697][ T9098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 700.099715][ T9098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 700.099742][ T9098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 700.148264][ T9098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 700.148281][ T9098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 700.148306][ T9098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 700.427512][ T9307] netlink: 12 bytes leftover after parsing attributes in process `syz.7.766'. [ 701.575804][ T8358] Bluetooth: hci5: command 0x0419 tx timeout [ 701.734878][ T9098] hsr_slave_0: entered promiscuous mode [ 701.761656][ T9098] hsr_slave_1: entered promiscuous mode [ 701.763351][ T9098] debugfs: 'hsr0' already exists in 'hsr' [ 701.763375][ T9098] Cannot create hsr debugfs directory [ 701.977330][ T4028] hsr_slave_0: left promiscuous mode [ 702.015855][ T4028] hsr_slave_1: left promiscuous mode [ 702.016800][ T4028] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 702.016824][ T4028] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 702.079211][ T4028] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 702.079239][ T4028] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 702.663315][ C1] vkms_vblank_simulate: vblank timer overrun [ 702.664388][ T9324] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 702.664585][ T9324] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 702.664723][ T9324] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 702.664842][ T9324] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 702.664949][ T9324] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 702.723255][ T4028] veth1_macvtap: left promiscuous mode [ 702.723363][ T4028] veth0_macvtap: left promiscuous mode [ 702.723621][ T4028] veth1_vlan: left promiscuous mode [ 702.723798][ T4028] veth0_vlan: left promiscuous mode [ 703.990726][ T5829] Bluetooth: hci1: command 0x0406 tx timeout [ 704.048169][ C1] vkms_vblank_simulate: vblank timer overrun [ 704.384231][ C1] vkms_vblank_simulate: vblank timer overrun [ 704.413308][ T9350] netlink: 12 bytes leftover after parsing attributes in process `syz.7.775'. [ 705.125746][ T5829] Bluetooth: hci5: command 0x0419 tx timeout [ 705.125789][ T5829] Bluetooth: hci2: command 0x0c1a tx timeout [ 705.125816][ T5829] Bluetooth: hci4: command 0x0c1a tx timeout [ 705.125844][ T5829] Bluetooth: hci0: command 0x0c1a tx timeout [ 705.196733][ C1] vkms_vblank_simulate: vblank timer overrun [ 705.537929][ C1] vkms_vblank_simulate: vblank timer overrun [ 706.614398][ T9363] overlayfs: missing 'lowerdir' [ 707.026502][ T4028] team0 (unregistering): Port device team_slave_1 removed [ 707.186202][ T4028] team0 (unregistering): Port device team_slave_0 removed [ 710.079496][ C1] vkms_vblank_simulate: vblank timer overrun [ 710.258426][ C1] vkms_vblank_simulate: vblank timer overrun [ 713.209730][ T9222] chnl_net:caif_netlink_parms(): no params data found [ 713.665085][ T9408] netlink: 12 bytes leftover after parsing attributes in process `syz.7.785'. [ 715.031004][ T9422] overlayfs: missing 'lowerdir' [ 716.198453][ C0] vkms_vblank_simulate: vblank timer overrun [ 716.750619][ T9222] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.750758][ T9222] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.750985][ T9222] bridge_slave_0: entered allmulticast mode [ 716.753663][ T9222] bridge_slave_0: entered promiscuous mode [ 716.889627][ C0] vkms_vblank_simulate: vblank timer overrun [ 716.999239][ T9222] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.999446][ T9222] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.999674][ T9222] bridge_slave_1: entered allmulticast mode [ 717.063247][ T9222] bridge_slave_1: entered promiscuous mode [ 717.846481][ T9222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 718.265787][ T8675] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 718.347577][ C0] vkms_vblank_simulate: vblank timer overrun [ 718.699302][ T8675] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 718.699329][ T8675] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 718.699364][ T8675] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 718.699386][ T8675] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.704931][ T8675] usb 7-1: config 0 descriptor?? [ 718.806544][ C0] vkms_vblank_simulate: vblank timer overrun [ 718.845986][ T9222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 718.912654][ T5904] usb 7-1: USB disconnect, device number 2 [ 719.001532][ T9468] binder: 9466:9468 ioctl c0306201 2000000001c0 returned -22 [ 719.667781][ T9222] team0: Port device team_slave_0 added [ 719.671390][ T9222] team0: Port device team_slave_1 added [ 719.941011][ C0] vkms_vblank_simulate: vblank timer overrun [ 720.733647][ C0] vkms_vblank_simulate: vblank timer overrun [ 723.703284][ T9496] overlayfs: missing 'lowerdir' [ 724.619059][ T9499] netlink: 12 bytes leftover after parsing attributes in process `syz.1.802'. [ 725.490295][ T9222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 725.490312][ T9222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 725.490335][ T9222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 725.549634][ T9222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 725.549652][ T9222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 725.549676][ T9222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 726.686977][ T5904] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 726.849053][ T5904] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 726.849080][ T5904] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 726.849132][ T5904] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 726.849156][ T5904] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.886599][ T9528] tmpfs: Unknown parameter 'hash' [ 726.909884][ T5904] usb 7-1: config 0 descriptor?? [ 726.921954][ T5904] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 726.922003][ T5904] dvb-usb: bulk message failed: -22 (3/0) [ 726.947431][ T5904] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 726.948303][ T5904] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 726.948353][ T5904] usb 7-1: media controller created [ 727.203284][ T5904] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 727.223499][ T5904] dvb-usb: bulk message failed: -22 (6/0) [ 727.223585][ T5904] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 727.251597][ T5904] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input14 [ 727.329271][ T5904] dvb-usb: schedule remote query interval to 150 msecs. [ 727.329286][ T5904] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 727.401694][ T5904] usb 7-1: USB disconnect, device number 3 [ 727.624231][ T5904] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 727.742722][ T9222] hsr_slave_0: entered promiscuous mode [ 727.743939][ T9222] hsr_slave_1: entered promiscuous mode [ 727.744826][ T9222] debugfs: 'hsr0' already exists in 'hsr' [ 727.744849][ T9222] Cannot create hsr debugfs directory [ 731.140238][ T9551] sctp: [Deprecated]: syz.6.812 (pid 9551) Use of struct sctp_assoc_value in delayed_ack socket option. [ 731.140238][ T9551] Use struct sctp_sack_info instead [ 731.216068][ T9098] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 735.685683][ T9098] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 736.027440][ T9098] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 736.593836][ T4028] bridge_slave_1: left allmulticast mode [ 736.593864][ T4028] bridge_slave_1: left promiscuous mode [ 736.594116][ T4028] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.690040][ T4028] bridge_slave_0: left allmulticast mode [ 736.690066][ T4028] bridge_slave_0: left promiscuous mode [ 736.690250][ T4028] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.025155][ T9580] overlayfs: missing 'workdir' [ 737.680717][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 737.693019][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 737.695933][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 737.706564][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 737.715802][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 738.915685][ T5953] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 739.078830][ T5953] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 739.078857][ T5953] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 739.078910][ T5953] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 739.078930][ T5953] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.085371][ T5953] usb 7-1: config 0 descriptor?? [ 739.104002][ T5953] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 739.104052][ T5953] dvb-usb: bulk message failed: -22 (3/0) [ 739.118323][ T5953] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 739.119530][ T5953] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 739.119582][ T5953] usb 7-1: media controller created [ 739.127411][ T5953] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 739.177635][ T5953] dvb-usb: bulk message failed: -22 (6/0) [ 739.177729][ T5953] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 739.192779][ T5953] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input15 [ 739.202481][ T5953] dvb-usb: schedule remote query interval to 150 msecs. [ 739.202504][ T5953] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 739.312656][ T5953] usb 7-1: USB disconnect, device number 4 [ 739.454222][ T5953] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 739.852291][ T5829] Bluetooth: hci2: command tx timeout [ 741.147733][ T4028] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 741.598514][ T4028] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 741.689937][ T4028] bond0 (unregistering): Released all slaves [ 741.895878][ T5829] Bluetooth: hci2: command tx timeout [ 742.098551][ T9612] binder: BINDER_SET_CONTEXT_MGR already set [ 742.098566][ T9612] binder: 9610:9612 ioctl 4018620d 200000004a80 returned -16 [ 744.478850][ T5829] Bluetooth: hci2: command tx timeout [ 744.585819][ T5953] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 745.135429][ T4028] hsr_slave_0: left promiscuous mode [ 745.138651][ T5953] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 745.138676][ T5953] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 745.139938][ T5953] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 745.139964][ T5953] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.225029][ T5953] usb 7-1: config 0 descriptor?? [ 745.230060][ T5953] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 745.230109][ T5953] dvb-usb: bulk message failed: -22 (3/0) [ 745.267077][ T5953] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 745.269024][ T5953] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 745.269078][ T5953] usb 7-1: media controller created [ 745.271459][ T5953] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 745.312044][ T4028] hsr_slave_1: left promiscuous mode [ 745.329755][ T4028] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 745.331503][ T5953] dvb-usb: bulk message failed: -22 (6/0) [ 745.331580][ T5953] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 745.357153][ T5953] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input16 [ 745.377361][ T5953] dvb-usb: schedule remote query interval to 150 msecs. [ 745.377384][ T5953] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 745.420556][ T4028] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 745.434823][ T8675] usb 7-1: USB disconnect, device number 5 [ 745.852121][ T4028] veth1_macvtap: left promiscuous mode [ 745.852224][ T4028] veth0_macvtap: left promiscuous mode [ 745.852465][ T4028] veth1_vlan: left promiscuous mode [ 745.878513][ T4028] veth0_vlan: left promiscuous mode [ 745.898859][ T8675] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 746.683945][ T5829] Bluetooth: hci2: command tx timeout [ 747.502830][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.502902][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 751.358695][ C0] vkms_vblank_simulate: vblank timer overrun [ 751.875222][ C0] vkms_vblank_simulate: vblank timer overrun [ 751.928881][ T8358] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 751.970735][ T8358] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 751.973709][ T8358] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 751.975033][ T8358] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 751.975989][ T8358] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 752.022303][ C0] vkms_vblank_simulate: vblank timer overrun [ 752.191618][ C0] vkms_vblank_simulate: vblank timer overrun [ 752.407562][ T8675] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 752.594945][ T8675] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 752.594971][ T8675] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 752.595022][ T8675] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 752.595045][ T8675] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.602023][ T8675] usb 7-1: config 0 descriptor?? [ 752.649491][ T8675] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 752.649541][ T8675] dvb-usb: bulk message failed: -22 (3/0) [ 752.658503][ T8675] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 752.662672][ T8675] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 752.662723][ T8675] usb 7-1: media controller created [ 752.665269][ T8675] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 752.696347][ T8675] dvb-usb: bulk message failed: -22 (6/0) [ 752.696431][ T8675] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 752.722580][ T8675] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input17 [ 752.752431][ T8675] dvb-usb: schedule remote query interval to 150 msecs. [ 752.752454][ T8675] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 752.849234][ T8630] usb 7-1: USB disconnect, device number 6 [ 752.980889][ T8630] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 753.039532][ C0] vkms_vblank_simulate: vblank timer overrun [ 753.157723][ T4028] team0 (unregistering): Port device team_slave_1 removed [ 753.205989][ C0] vkms_vblank_simulate: vblank timer overrun [ 753.260439][ C0] vkms_vblank_simulate: vblank timer overrun [ 753.370847][ T4028] team0 (unregistering): Port device team_slave_0 removed [ 753.392965][ C0] vkms_vblank_simulate: vblank timer overrun [ 753.782416][ T9688] netlink: 165 bytes leftover after parsing attributes in process `syz.6.843'. [ 754.058652][ T8358] Bluetooth: hci3: command tx timeout [ 754.523141][ C0] vkms_vblank_simulate: vblank timer overrun [ 754.665022][ C0] vkms_vblank_simulate: vblank timer overrun [ 754.690262][ C0] vkms_vblank_simulate: vblank timer overrun [ 754.825898][ C0] vkms_vblank_simulate: vblank timer overrun [ 754.974973][ C0] vkms_vblank_simulate: vblank timer overrun [ 755.763655][ C0] vkms_vblank_simulate: vblank timer overrun [ 755.789481][ C0] vkms_vblank_simulate: vblank timer overrun [ 756.099029][ C0] vkms_vblank_simulate: vblank timer overrun [ 756.155000][ T8358] Bluetooth: hci3: command tx timeout [ 758.586047][ T8358] Bluetooth: hci3: command tx timeout [ 758.890021][ T9708] overlayfs: failed to resolve './file1': -2 [ 759.688968][ C1] vkms_vblank_simulate: vblank timer overrun [ 759.870789][ C1] vkms_vblank_simulate: vblank timer overrun [ 760.618150][ T8358] Bluetooth: hci3: command tx timeout [ 760.710024][ C1] vkms_vblank_simulate: vblank timer overrun [ 761.197225][ C1] vkms_vblank_simulate: vblank timer overrun [ 761.570489][ C1] vkms_vblank_simulate: vblank timer overrun [ 761.897004][ C1] vkms_vblank_simulate: vblank timer overrun [ 762.757508][ C1] vkms_vblank_simulate: vblank timer overrun [ 763.616682][ C1] vkms_vblank_simulate: vblank timer overrun [ 764.998293][ C1] vkms_vblank_simulate: vblank timer overrun [ 765.303234][ C1] vkms_vblank_simulate: vblank timer overrun [ 765.347811][ T9582] chnl_net:caif_netlink_parms(): no params data found [ 765.908194][ T9674] chnl_net:caif_netlink_parms(): no params data found [ 766.877791][ C1] vkms_vblank_simulate: vblank timer overrun [ 767.465333][ T9582] bridge0: port 1(bridge_slave_0) entered blocking state [ 767.465471][ T9582] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.488308][ T9582] bridge_slave_0: entered allmulticast mode [ 767.491144][ T9582] bridge_slave_0: entered promiscuous mode [ 767.564213][ T9582] bridge0: port 2(bridge_slave_1) entered blocking state [ 767.565234][ T9582] bridge0: port 2(bridge_slave_1) entered disabled state [ 767.565488][ T9582] bridge_slave_1: entered allmulticast mode [ 767.589836][ T9582] bridge_slave_1: entered promiscuous mode [ 767.635837][ T10] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 767.792454][ T10] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 767.792486][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.792505][ T10] usb 7-1: Product: syz [ 767.792520][ T10] usb 7-1: Manufacturer: syz [ 767.792534][ T10] usb 7-1: SerialNumber: syz [ 767.798181][ T10] usb 7-1: config 0 descriptor?? [ 768.155859][ T10] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 768.161611][ C1] vkms_vblank_simulate: vblank timer overrun [ 768.673849][ T9806] overlayfs: failed to resolve './file1': -2 [ 769.701933][ C1] vkms_vblank_simulate: vblank timer overrun [ 769.819877][ T9582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 769.820113][ T9674] bridge0: port 1(bridge_slave_0) entered blocking state [ 769.820243][ T9674] bridge0: port 1(bridge_slave_0) entered disabled state [ 769.820421][ T9674] bridge_slave_0: entered allmulticast mode [ 769.823043][ T9674] bridge_slave_0: entered promiscuous mode [ 770.136574][ T10] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 770.175813][ T10] usb 7-1: USB disconnect, device number 7 [ 770.175858][ T9582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 770.179446][ T9674] bridge0: port 2(bridge_slave_1) entered blocking state [ 770.179569][ T9674] bridge0: port 2(bridge_slave_1) entered disabled state [ 770.179818][ T9674] bridge_slave_1: entered allmulticast mode [ 770.237988][ T9674] bridge_slave_1: entered promiscuous mode [ 770.967727][ T8675] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 771.395768][ T8675] usb 8-1: Using ep0 maxpacket: 16 [ 771.398431][ T8675] usb 8-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 771.398460][ T8675] usb 8-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 771.398483][ T8675] usb 8-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 771.398509][ T8675] usb 8-1: config 1 interface 0 has no altsetting 0 [ 771.401407][ T8675] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 771.401433][ T8675] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.401451][ T8675] usb 8-1: Product: syz [ 771.401465][ T8675] usb 8-1: Manufacturer: syz [ 771.401478][ T8675] usb 8-1: SerialNumber: syz [ 771.751679][ T8675] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 774.005699][ T9825] netlink: 165 bytes leftover after parsing attributes in process `syz.1.872'. [ 774.012813][ T9582] team0: Port device team_slave_0 added [ 774.020707][ T9674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 774.026251][ T9582] team0: Port device team_slave_1 added [ 778.789060][ T9674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 779.413478][ T9849] overlayfs: failed to resolve './file1': -2 [ 779.510719][ T9815] usblp0:failed reading printer status (-110) [ 779.579408][ T5951] usb 8-1: USB disconnect, device number 6 [ 779.594957][ T5951] usblp0: removed [ 779.599075][ T9582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 779.599090][ T9582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 779.599114][ T9582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 780.007802][ T9582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 780.007820][ T9582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 780.007845][ T9582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 780.022215][ T9674] team0: Port device team_slave_0 added [ 781.820108][ T9868] netlink: 12 bytes leftover after parsing attributes in process `syz.1.885'. [ 781.867394][ T1229] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 782.315461][ T1229] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 782.315517][ T1229] usb 7-1: config 0 has no interfaces? [ 782.980373][ T1229] usb 7-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 782.980431][ T1229] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.980481][ T1229] usb 7-1: Product: syz [ 782.980527][ T1229] usb 7-1: Manufacturer: syz [ 782.980541][ T1229] usb 7-1: SerialNumber: syz [ 783.255952][ T1229] usb 7-1: config 0 descriptor?? [ 783.792309][ T9674] team0: Port device team_slave_1 added [ 784.449233][ C1] vkms_vblank_simulate: vblank timer overrun [ 784.546643][ C1] vkms_vblank_simulate: vblank timer overrun [ 785.012451][ T8675] usb 7-1: USB disconnect, device number 8 [ 785.548984][ C1] vkms_vblank_simulate: vblank timer overrun [ 786.005406][ T9891] netlink: 165 bytes leftover after parsing attributes in process `syz.7.890'. [ 786.209083][ C1] vkms_vblank_simulate: vblank timer overrun [ 786.237866][ T9674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 786.237883][ T9674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 786.237908][ T9674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 786.662066][ C1] vkms_vblank_simulate: vblank timer overrun [ 786.877212][ T9898] netlink: 'syz.7.892': attribute type 8 has an invalid length. [ 786.896555][ T9674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 786.896571][ T9674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 786.896596][ T9674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 786.957402][ T9582] hsr_slave_0: entered promiscuous mode [ 786.962213][ T9582] hsr_slave_1: entered promiscuous mode [ 787.659703][ C1] vkms_vblank_simulate: vblank timer overrun [ 787.738842][ C1] vkms_vblank_simulate: vblank timer overrun [ 788.661463][ C1] vkms_vblank_simulate: vblank timer overrun [ 788.879297][ T9674] hsr_slave_0: entered promiscuous mode [ 788.880551][ T9674] hsr_slave_1: entered promiscuous mode [ 788.881436][ T9674] debugfs: 'hsr0' already exists in 'hsr' [ 788.881458][ T9674] Cannot create hsr debugfs directory [ 789.155713][ T8637] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 789.255861][ T8675] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 789.314498][ T8637] usb 7-1: unable to get BOS descriptor or descriptor too short [ 789.315011][ T8637] usb 7-1: not running at top speed; connect to a high speed hub [ 789.336934][ T8637] usb 7-1: config 6 has an invalid interface number: 228 but max is 0 [ 789.336960][ T8637] usb 7-1: config 6 has no interface number 0 [ 789.338446][ T8637] usb 7-1: config 6 interface 228 has no altsetting 0 [ 789.344387][ T8637] usb 7-1: string descriptor 0 read error: -22 [ 789.344535][ T8637] usb 7-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice= 3.27 [ 789.344560][ T8637] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.402858][ T8637] hub 7-1:6.228: bad descriptor, ignoring hub [ 789.402898][ T8637] hub 7-1:6.228: probe with driver hub failed with error -5 [ 789.421355][ T8675] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 789.421382][ T8675] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 789.424346][ T8675] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 789.424373][ T8675] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.424392][ T8675] usb 2-1: Product: syz [ 789.424406][ T8675] usb 2-1: Manufacturer: syz [ 789.424419][ T8675] usb 2-1: SerialNumber: syz [ 789.480874][ T8637] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state. [ 789.480939][ T8637] dvb-usb: bulk message failed: -22 (3/0) [ 789.483938][ T8675] usb 2-1: config 0 descriptor?? [ 789.514641][ T8637] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 789.524296][ T8637] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author) [ 789.524356][ T8637] usb 7-1: media controller created [ 789.549474][ T8637] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 789.627614][ T8637] dvb-usb: bulk message failed: -22 (6/0) [ 789.627686][ T8637] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author' [ 789.665255][ T8637] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input18 [ 789.699309][ T8637] dvb-usb: schedule remote query interval to 150 msecs. [ 789.699410][ T8637] dvb-usb: bulk message failed: -22 (3/0) [ 789.718365][ T8637] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected. [ 789.723945][ T8637] usb 7-1: USB disconnect, device number 9 [ 789.858635][ T8637] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected. [ 790.063532][ T4028] bridge_slave_1: left allmulticast mode [ 790.063559][ T4028] bridge_slave_1: left promiscuous mode [ 790.063832][ T4028] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.133196][ T4028] bridge_slave_0: left allmulticast mode [ 790.133216][ T4028] bridge_slave_0: left promiscuous mode [ 790.133390][ T4028] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.467744][ T4028] bridge_slave_1: left allmulticast mode [ 790.467775][ T4028] bridge_slave_1: left promiscuous mode [ 790.468010][ T4028] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.607172][ T9928] netlink: 165 bytes leftover after parsing attributes in process `syz.7.900'. [ 791.467399][ T4028] bridge_slave_0: left allmulticast mode [ 791.467518][ T4028] bridge_slave_0: left promiscuous mode [ 791.467777][ T4028] bridge0: port 1(bridge_slave_0) entered disabled state [ 791.981590][ T5952] usb 2-1: USB disconnect, device number 54 [ 792.322578][ T4028] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 792.326288][ T9938] netlink: 'syz.1.904': attribute type 8 has an invalid length. [ 792.408822][ T4028] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 792.628808][ T4028] bond0 (unregistering): Released all slaves [ 792.709036][ T9941] netlink: 'syz.6.906': attribute type 1 has an invalid length. [ 792.709060][ T9941] netlink: 128 bytes leftover after parsing attributes in process `syz.6.906'. [ 793.984996][ T4028] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 794.005739][ T1229] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 794.110953][ T4028] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 794.162488][ T1229] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 794.162518][ T1229] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.162538][ T1229] usb 2-1: Product: syz [ 794.162549][ T1229] usb 2-1: Manufacturer: syz [ 794.162557][ T1229] usb 2-1: SerialNumber: syz [ 794.199249][ T1229] usb 2-1: config 0 descriptor?? [ 794.212658][ T4028] bond0 (unregistering): Released all slaves [ 794.411109][ T1229] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 795.196584][ T4028] hsr_slave_0: left promiscuous mode [ 796.131991][ T4028] hsr_slave_1: left promiscuous mode [ 796.132842][ T4028] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 796.181022][ T4028] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 796.622297][ T4028] hsr_slave_0: left promiscuous mode [ 796.652912][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 796.655036][ T1229] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 796.665414][ T4028] hsr_slave_1: left promiscuous mode [ 796.666754][ T4028] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 796.688146][ T1229] usb 2-1: USB disconnect, device number 55 [ 796.715062][ T4028] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 797.941697][ T4028] team0 (unregistering): Port device team_slave_1 removed [ 798.066651][ T4028] team0 (unregistering): Port device team_slave_0 removed [ 800.371193][ T4028] team0 (unregistering): Port device team_slave_1 removed [ 800.546427][ T4028] team0 (unregistering): Port device team_slave_0 removed [ 801.165131][ T9980] netlink: 'syz.1.916': attribute type 8 has an invalid length. [ 802.645928][ T9966] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 802.646073][ T9966] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 802.646177][ T9966] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 802.646280][ T9966] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 802.646329][ T9966] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 802.821577][ T9966] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 802.889819][ T9674] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 802.991600][ T9674] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 803.011636][ T9966] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 803.011685][ T9966] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 803.077050][ T9674] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 803.131454][ T9674] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 803.144876][ T9966] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 803.543109][ T9992] input: syz1 as /devices/virtual/input/input19 [ 803.827098][ T8358] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 803.830460][ T8358] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 803.839960][ T8358] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 803.870492][ T8358] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 803.887793][ T8358] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 803.987993][T10003] loop5: detected capacity change from 0 to 7 [ 804.245877][ T102] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 804.247887][ T102] Buffer I/O error on dev loop5, logical block 0, async page read [ 804.299286][ C0] vkms_vblank_simulate: vblank timer overrun [ 804.301442][T10003] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 804.301474][T10003] Buffer I/O error on dev loop5, logical block 0, async page read [ 804.304559][T10003] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 804.304593][T10003] Buffer I/O error on dev loop5, logical block 0, async page read [ 804.304713][T10003] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 804.304736][T10003] Buffer I/O error on dev loop5, logical block 0, async page read [ 804.304874][T10003] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 804.304898][T10003] Buffer I/O error on dev loop5, logical block 0, async page read [ 804.305026][T10003] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 804.305051][T10003] Buffer I/O error on dev loop5, logical block 0, async page read [ 804.305161][T10003] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 804.305185][T10003] Buffer I/O error on dev loop5, logical block 0, async page read [ 804.429363][T10003] ldm_validate_partition_table(): Disk read failed. [ 804.446179][T10003] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 804.446210][T10003] Buffer I/O error on dev loop5, logical block 0, async page read [ 804.453513][T10003] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 804.453542][T10003] Buffer I/O error on dev loop5, logical block 0, async page read [ 804.453686][T10003] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 804.453708][T10003] Buffer I/O error on dev loop5, logical block 0, async page read [ 804.569949][T10003] Dev loop5: unable to read RDB block 0 [ 804.590791][T10003] loop5: unable to read partition table [ 804.611014][T10003] loop5: partition table beyond EOD, truncated [ 804.611688][T10003] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 804.682754][ C0] vkms_vblank_simulate: vblank timer overrun [ 804.702664][ T5829] Bluetooth: hci4: command 0x0c1a tx timeout [ 804.702711][ T5829] Bluetooth: hci0: command 0x0c1a tx timeout [ 804.702739][ T5829] Bluetooth: hci1: command 0x0406 tx timeout [ 805.035909][ T8358] Bluetooth: hci3: command 0x0c1a tx timeout [ 805.865800][ C0] vkms_vblank_simulate: vblank timer overrun [ 805.979396][ T8358] Bluetooth: hci5: command tx timeout [ 806.312180][ C0] vkms_vblank_simulate: vblank timer overrun [ 806.875165][ T9674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 807.116873][ C0] vkms_vblank_simulate: vblank timer overrun [ 807.117368][ T8358] Bluetooth: hci3: command 0x0c1a tx timeout [ 808.352884][ C0] vkms_vblank_simulate: vblank timer overrun [ 808.353608][ T8358] Bluetooth: hci5: command tx timeout [ 808.420083][ T9674] 8021q: adding VLAN 0 to HW filter on device team0 [ 808.463878][ T1394] bridge0: port 1(bridge_slave_0) entered blocking state [ 808.473283][ T1394] bridge0: port 1(bridge_slave_0) entered forwarding state [ 808.538054][ T1394] bridge0: port 2(bridge_slave_1) entered blocking state [ 808.556765][ T1394] bridge0: port 2(bridge_slave_1) entered forwarding state [ 808.580127][ T4028] bridge_slave_1: left allmulticast mode [ 808.580154][ T4028] bridge_slave_1: left promiscuous mode [ 808.599961][ T4028] bridge0: port 2(bridge_slave_1) entered disabled state [ 808.682410][ T4028] bridge_slave_0: left allmulticast mode [ 808.682439][ T4028] bridge_slave_0: left promiscuous mode [ 808.682662][ T4028] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.185596][ T8358] Bluetooth: hci3: command 0x0c1a tx timeout [ 809.191853][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.248115][T10041] netlink: 'syz.7.927': attribute type 8 has an invalid length. [ 810.286548][ T4028] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 810.376002][ T8358] Bluetooth: hci5: command tx timeout [ 810.422366][ T4028] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 810.494006][T10049] overlayfs: missing 'lowerdir' [ 810.534273][ T4028] bond0 (unregistering): Released all slaves [ 810.741754][T10043] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 810.742242][T10043] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 810.742774][T10043] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 810.743367][T10043] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 810.743722][T10043] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 810.743926][T10043] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 810.807659][ T9975] chnl_net:caif_netlink_parms(): no params data found [ 810.826955][T10043] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 811.255722][ T4028] hsr_slave_0: left promiscuous mode [ 811.330847][ T4028] hsr_slave_1: left promiscuous mode [ 811.331709][ T4028] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 811.834375][ T4028] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 811.861839][ T8358] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 811.878809][ T8358] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 811.880512][ T8358] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 811.885328][ T8358] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 811.909356][ T8358] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 811.934199][T10063] netlink: 165 bytes leftover after parsing attributes in process `syz.6.934'. [ 813.218704][ T5829] Bluetooth: hci4: command 0x0c1a tx timeout [ 813.220917][ T5829] Bluetooth: hci0: command 0x0c1a tx timeout [ 813.221039][ T5829] Bluetooth: hci1: command 0x0406 tx timeout [ 813.222929][ T8358] Bluetooth: hci5: command 0x0c1a tx timeout [ 813.606090][T10071] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 813.938006][T10076] netlink: 'syz.1.938': attribute type 8 has an invalid length. [ 814.056462][ T8358] Bluetooth: hci2: command tx timeout [ 814.940893][ T4028] team0 (unregistering): Port device team_slave_1 removed [ 815.206400][T10086] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 815.206567][T10086] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 815.255861][ T8358] Bluetooth: hci5: command 0x0c1a tx timeout [ 816.102608][ T4028] team0 (unregistering): Port device team_slave_0 removed [ 816.175756][ T8358] Bluetooth: hci2: command tx timeout [ 817.430230][ T8358] Bluetooth: hci5: command 0x0c1a tx timeout [ 817.858272][T10090] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 817.858403][T10090] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 817.858504][T10090] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 817.858625][T10090] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 817.858742][T10090] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 817.858784][T10090] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 817.936602][T10090] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 818.110550][T10101] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 818.524845][T10108] netlink: 165 bytes leftover after parsing attributes in process `syz.6.947'. [ 820.207956][T10122] netlink: 'syz.7.951': attribute type 8 has an invalid length. [ 820.655803][ T5828] Bluetooth: hci2: command 0x0419 tx timeout [ 820.656079][ T5828] Bluetooth: hci5: command 0x0c1a tx timeout [ 820.656109][ T5828] Bluetooth: hci4: command 0x0c1a tx timeout [ 820.656136][ T5828] Bluetooth: hci0: command 0x0c1a tx timeout [ 820.656162][ T5828] Bluetooth: hci1: command 0x0406 tx timeout [ 822.235931][ T9975] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.236062][ T9975] bridge0: port 1(bridge_slave_0) entered disabled state [ 822.236292][ T9975] bridge_slave_0: entered allmulticast mode [ 822.269713][T10135] netlink: 'syz.7.954': attribute type 10 has an invalid length. [ 822.269904][ T9975] bridge_slave_0: entered promiscuous mode [ 822.367925][T10135] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 822.368530][ T9975] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.368660][ T9975] bridge0: port 2(bridge_slave_1) entered disabled state [ 822.368849][ T9975] bridge_slave_1: entered allmulticast mode [ 822.406980][ T9975] bridge_slave_1: entered promiscuous mode [ 822.761367][ T8358] Bluetooth: hci2: command 0x0419 tx timeout [ 823.117927][T10136] 8021q: adding VLAN 0 to HW filter on device bond1 [ 823.376439][T10135] bond_slave_0: entered promiscuous mode [ 823.376489][T10135] bond_slave_1: entered promiscuous mode [ 823.376564][T10135] syz_tun: entered promiscuous mode [ 823.377910][T10135] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 823.378964][T10135] bond1: (slave macvlan2): unknown ethtool speed (30000) for port 1 (set it to 0) [ 823.378983][T10135] bond1: (slave macvlan2): speed changed to 0 on port 1 [ 823.472538][T10135] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 823.936105][ T9975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 824.730919][T10147] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 824.731067][T10147] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 824.731171][T10147] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 824.731274][T10147] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 824.731378][T10147] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 824.784720][ T9975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 826.183751][ T5828] Bluetooth: hci1: command 0x0406 tx timeout [ 826.486546][ T9975] team0: Port device team_slave_0 added [ 826.573015][ T9975] team0: Port device team_slave_1 added [ 826.775781][ T5828] Bluetooth: hci2: command 0x0419 tx timeout [ 826.775822][ T5828] Bluetooth: hci5: command 0x0c1a tx timeout [ 826.775848][ T5828] Bluetooth: hci4: command 0x0c1a tx timeout [ 826.775874][ T5828] Bluetooth: hci0: command 0x0c1a tx timeout [ 828.721909][ T9975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 828.721926][ T9975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 828.721951][ T9975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 828.749077][ T9975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 828.749093][ T9975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 828.749117][ T9975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 828.855924][ T8358] Bluetooth: hci2: command 0x0419 tx timeout [ 833.401930][ T9975] hsr_slave_0: entered promiscuous mode [ 833.403164][ T9975] hsr_slave_1: entered promiscuous mode [ 833.409271][T10062] chnl_net:caif_netlink_parms(): no params data found [ 836.848045][T10062] bridge0: port 1(bridge_slave_0) entered blocking state [ 836.848174][T10062] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.848413][T10062] bridge_slave_0: entered allmulticast mode [ 836.850894][T10062] bridge_slave_0: entered promiscuous mode [ 836.944747][T10062] bridge0: port 2(bridge_slave_1) entered blocking state [ 836.944893][T10062] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.945134][T10062] bridge_slave_1: entered allmulticast mode [ 836.958825][T10062] bridge_slave_1: entered promiscuous mode [ 839.382849][T10062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 839.457061][T10062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 840.006318][ T8675] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 840.236298][ T8675] usb 7-1: device descriptor read/64, error -71 [ 840.689783][ T8675] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 840.742679][T10062] team0: Port device team_slave_0 added [ 840.909725][ T8675] usb 7-1: device descriptor read/64, error -71 [ 841.016305][ T8675] usb usb7-port1: attempt power cycle [ 841.291935][T10062] team0: Port device team_slave_1 added [ 842.158534][ T8675] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 842.178552][ T8675] usb 7-1: device descriptor read/8, error -71 [ 842.215018][ T4028] bridge_slave_1: left allmulticast mode [ 842.215047][ T4028] bridge_slave_1: left promiscuous mode [ 842.215281][ T4028] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.229690][T10268] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60928 [ 842.229708][T10268] binder: 10267:10268 ioctl 4018620d 200000000100 returned -1 [ 842.231413][T10268] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60928 [ 842.231429][T10268] binder: 10267:10268 ioctl 4018620d 200000004a80 returned -1 [ 842.327522][ T4028] bridge_slave_0: left allmulticast mode [ 842.327553][ T4028] bridge_slave_0: left promiscuous mode [ 842.327809][ T4028] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.431727][ T8675] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 842.446446][ T8675] usb 7-1: device descriptor read/8, error -71 [ 842.555986][ T8675] usb usb7-port1: unable to enumerate USB device [ 843.007719][ T8675] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 843.177842][ T8675] usb 7-1: Using ep0 maxpacket: 16 [ 843.180325][ T8675] usb 7-1: config 0 interface 0 has no altsetting 0 [ 843.180365][ T8675] usb 7-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 843.180389][ T8675] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.216276][ T8675] usb 7-1: config 0 descriptor?? [ 843.433257][ T8675] usbhid 7-1:0.0: can't add hid device: -71 [ 843.433398][ T8675] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 843.457883][ T8675] usb 7-1: USB disconnect, device number 14 [ 845.309421][T10293] trusted_key: syz.7.997 sent an empty control message without MSG_MORE. [ 845.482431][T10293] capability: warning: `syz.7.997' uses deprecated v2 capabilities in a way that may be insecure [ 846.081949][ T4028] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 846.202817][ T4028] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 846.304676][ T4028] bond0 (unregistering): Released all slaves [ 846.574416][T10062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 846.574428][T10062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 846.574443][T10062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 846.586602][T10270] hsr0 speed is unknown, defaulting to 1000 [ 846.828381][T10298] binder: BINDER_SET_CONTEXT_MGR already set [ 846.828396][T10298] binder: 10297:10298 ioctl 4018620d 200000004a80 returned -16 [ 847.017557][T10062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 847.017573][T10062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 847.017599][T10062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 847.023469][T10270] hsr0 speed is unknown, defaulting to 1000 [ 847.051146][T10270] hsr0 speed is unknown, defaulting to 1000 [ 847.628607][T10270] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 847.654437][T10270] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 847.997436][ T4028] hsr_slave_0: left promiscuous mode [ 848.015712][ T8637] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 848.017337][ T4028] hsr_slave_1: left promiscuous mode [ 848.018283][ T4028] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 848.075879][ T4028] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 848.155690][ T8637] usb 8-1: device descriptor read/64, error -71 [ 848.405695][ T8637] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 848.806111][ T8637] usb 8-1: device descriptor read/64, error -71 [ 848.916372][ T8637] usb usb8-port1: attempt power cycle [ 849.291757][ T8637] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 849.328970][ T8637] usb 8-1: device descriptor read/8, error -71 [ 850.385086][T10315] netlink: 'syz.6.1003': attribute type 8 has an invalid length. [ 850.426359][ T4028] team0 (unregistering): Port device team_slave_1 removed [ 850.571692][ T4028] team0 (unregistering): Port device team_slave_0 removed [ 852.315472][T10328] ufs: You didn't specify the type of your ufs filesystem [ 852.315472][T10328] [ 852.315472][T10328] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 852.315472][T10328] [ 852.315472][T10328] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 852.315693][T10328] ufs: ufstype=old is supported read-only [ 853.125283][T10332] binder: BINDER_SET_CONTEXT_MGR already set [ 853.125300][T10332] binder: 10331:10332 ioctl 4018620d 200000004a80 returned -16 [ 855.635879][ T991] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 855.765827][ T991] usb 7-1: device descriptor read/64, error -71 [ 856.026106][ T991] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 856.155741][ T991] usb 7-1: device descriptor read/64, error -71 [ 856.180883][T10270] hsr0 speed is unknown, defaulting to 1000 [ 856.269487][ T991] usb usb7-port1: attempt power cycle [ 856.380079][T10270] hsr0 speed is unknown, defaulting to 1000 [ 856.461037][T10270] hsr0 speed is unknown, defaulting to 1000 [ 856.574489][T10062] hsr_slave_0: entered promiscuous mode [ 856.582661][T10062] hsr_slave_1: entered promiscuous mode [ 856.583594][T10062] debugfs: 'hsr0' already exists in 'hsr' [ 856.583617][T10062] Cannot create hsr debugfs directory [ 856.583958][T10270] hsr0 speed is unknown, defaulting to 1000 [ 856.605086][T10270] hsr0 speed is unknown, defaulting to 1000 [ 856.675698][ T991] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 856.697720][ T991] usb 7-1: device descriptor read/8, error -71 [ 856.826184][T10349] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 856.947831][ T991] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 856.967404][ T991] usb 7-1: device descriptor read/8, error -71 [ 856.989477][T10354] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60928 [ 856.989497][T10354] binder: 10353:10354 ioctl 4018620d 200000004a80 returned -1 [ 857.035433][ T5904] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 857.076460][ T991] usb usb7-port1: unable to enumerate USB device [ 857.202563][ T5904] usb 8-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 857.202594][ T5904] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.202614][ T5904] usb 8-1: Product: syz [ 857.202628][ T5904] usb 8-1: Manufacturer: syz [ 857.202642][ T5904] usb 8-1: SerialNumber: syz [ 857.347432][ T5904] usb 8-1: config 0 descriptor?? [ 857.397035][ T5904] i2c-tiny-usb 8-1:0.0: version 6d.cc found at bus 008 address 011 [ 857.786138][ T5904] (null): failure reading functionality [ 857.787514][ T5904] i2c i2c-1: failure reading functionality [ 857.794949][ T5904] i2c i2c-1: connected i2c-tiny-usb device [ 857.852936][ T5904] usb 8-1: USB disconnect, device number 11 [ 858.082916][ T9975] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 858.120365][ T9975] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 858.297136][ T9975] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 860.011456][T10380] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1021'. [ 860.019803][T10380] input input20: cannot allocate more than FF_MAX_EFFECTS effects [ 860.595624][ T10] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 860.636538][T10380] warning: `syz.7.1021' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 860.726235][ T10] usb 2-1: device descriptor read/64, error -71 [ 860.788016][T10062] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 860.942478][T10062] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 860.995771][ T10] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 861.036021][T10062] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 861.108720][ T5828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 861.126103][ T5828] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 861.135759][ T10] usb 2-1: device descriptor read/64, error -71 [ 861.149194][ T5828] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 861.169414][ T5828] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 861.171021][ T5828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 861.246262][ T10] usb usb2-port1: attempt power cycle [ 862.345741][ T10] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 862.364845][T10062] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 862.493958][ T10] usb 2-1: device descriptor read/8, error -71 [ 862.726326][ T10] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 862.955687][ T10] usb 2-1: device not accepting address 59, error -71 [ 862.963955][ T10] usb usb2-port1: unable to enumerate USB device [ 863.821327][ T5828] Bluetooth: hci3: command tx timeout [ 863.955283][T10385] hsr0 speed is unknown, defaulting to 1000 [ 864.275787][ T10] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 864.448945][ T10] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 864.448976][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.448992][ T10] usb 2-1: Product: syz [ 864.448999][ T10] usb 2-1: Manufacturer: syz [ 864.449007][ T10] usb 2-1: SerialNumber: syz [ 864.496244][ T10] usb 2-1: config 0 descriptor?? [ 864.529346][ T10] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 060 [ 864.909171][ T10] (null): failure reading functionality [ 864.922189][ T10] i2c i2c-1: failure reading functionality [ 864.971417][ T10] i2c i2c-1: connected i2c-tiny-usb device [ 865.003517][ T10] usb 2-1: USB disconnect, device number 60 [ 865.497930][T10062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 865.506318][ T6435] bridge_slave_1: left allmulticast mode [ 865.506345][ T6435] bridge_slave_1: left promiscuous mode [ 865.506603][ T6435] bridge0: port 2(bridge_slave_1) entered disabled state [ 865.732038][ T6435] bridge_slave_0: left allmulticast mode [ 865.732065][ T6435] bridge_slave_0: left promiscuous mode [ 865.733919][ T6435] bridge0: port 1(bridge_slave_0) entered disabled state [ 865.825450][T10440] block nbd1: NBD_DISCONNECT [ 865.895688][ T5828] Bluetooth: hci3: command tx timeout [ 866.065756][ T5952] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 866.220801][ T5952] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 866.220832][ T5952] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.220852][ T5952] usb 8-1: Product: syz [ 866.220865][ T5952] usb 8-1: Manufacturer: syz [ 866.220879][ T5952] usb 8-1: SerialNumber: syz [ 866.233566][ T5952] usb 8-1: config 0 descriptor?? [ 866.270164][ T6435] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 866.356811][ T6435] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 866.442061][ T6435] bond0 (unregistering): Released all slaves [ 866.478286][ T5952] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 866.569037][T10385] chnl_net:caif_netlink_parms(): no params data found [ 867.237189][ T6435] hsr_slave_0: left promiscuous mode [ 867.278867][ T6435] hsr_slave_1: left promiscuous mode [ 867.279678][ T6435] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 867.348902][ T6435] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 867.976151][ T5828] Bluetooth: hci3: command tx timeout [ 867.977990][ T5952] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 867.981182][ T5952] usb 8-1: USB disconnect, device number 12 [ 870.198416][ T5828] Bluetooth: hci3: command tx timeout [ 870.246357][ T6435] team0 (unregistering): Port device team_slave_1 removed [ 870.995727][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.416677][ T6435] team0 (unregistering): Port device team_slave_0 removed [ 875.337506][ C1] vkms_vblank_simulate: vblank timer overrun [ 875.958247][ C1] vkms_vblank_simulate: vblank timer overrun [ 876.097895][ C1] vkms_vblank_simulate: vblank timer overrun [ 876.296250][ T8358] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 876.318221][ T8358] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 876.380455][ T8358] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 876.413318][ T8358] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 876.431190][ T8358] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 878.245941][T10385] bridge0: port 1(bridge_slave_0) entered blocking state [ 878.246149][T10385] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.246385][T10385] bridge_slave_0: entered allmulticast mode [ 878.249124][T10385] bridge_slave_0: entered promiscuous mode [ 878.254888][T10385] bridge0: port 2(bridge_slave_1) entered blocking state [ 878.254976][T10385] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.255124][T10385] bridge_slave_1: entered allmulticast mode [ 878.264340][T10385] bridge_slave_1: entered promiscuous mode [ 878.560114][ C1] vkms_vblank_simulate: vblank timer overrun [ 878.631253][ T8358] Bluetooth: hci2: command tx timeout [ 878.666669][T10527] netlink: 'syz.7.1048': attribute type 8 has an invalid length. [ 878.846874][T10385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 878.849255][T10385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 879.519089][T10513] hsr0 speed is unknown, defaulting to 1000 [ 879.829584][ C1] vkms_vblank_simulate: vblank timer overrun [ 880.695755][ T8358] Bluetooth: hci2: command tx timeout [ 880.699049][T10385] team0: Port device team_slave_0 added [ 880.750575][T10385] team0: Port device team_slave_1 added [ 882.694678][ C0] vkms_vblank_simulate: vblank timer overrun [ 882.775740][ T8358] Bluetooth: hci2: command tx timeout [ 882.829370][ C0] vkms_vblank_simulate: vblank timer overrun [ 885.444777][ T8358] Bluetooth: hci2: command tx timeout [ 885.906679][T10385] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 885.906696][T10385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 885.906722][T10385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 885.984161][T10385] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 885.984177][T10385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 885.984201][T10385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 886.583010][T10580] netlink: 'syz.7.1061': attribute type 8 has an invalid length. [ 886.771329][T10385] hsr_slave_0: entered promiscuous mode [ 886.772246][T10385] hsr_slave_1: entered promiscuous mode [ 887.656184][ C0] vkms_vblank_simulate: vblank timer overrun [ 889.025498][ C1] vkms_vblank_simulate: vblank timer overrun [ 889.673379][ C1] vkms_vblank_simulate: vblank timer overrun [ 890.652677][ C1] vkms_vblank_simulate: vblank timer overrun [ 892.059345][ C1] vkms_vblank_simulate: vblank timer overrun [ 892.110245][T10617] netlink: 'syz.6.1073': attribute type 8 has an invalid length. [ 892.356259][ C1] vkms_vblank_simulate: vblank timer overrun [ 893.374522][ C1] vkms_vblank_simulate: vblank timer overrun [ 893.782740][ C1] vkms_vblank_simulate: vblank timer overrun [ 894.026338][ C1] vkms_vblank_simulate: vblank timer overrun [ 894.536298][ C1] vkms_vblank_simulate: vblank timer overrun [ 894.820174][T10647] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60928 [ 894.820194][T10647] binder: 10646:10647 ioctl 4018620d 200000004a80 returned -1 [ 895.193519][ C1] vkms_vblank_simulate: vblank timer overrun [ 895.392144][ C1] vkms_vblank_simulate: vblank timer overrun [ 895.864727][ C1] vkms_vblank_simulate: vblank timer overrun [ 897.696285][ C1] vkms_vblank_simulate: vblank timer overrun [ 897.755125][T10677] netlink: 'syz.7.1087': attribute type 8 has an invalid length. [ 897.785030][T10513] chnl_net:caif_netlink_parms(): no params data found [ 898.360349][ C1] vkms_vblank_simulate: vblank timer overrun [ 899.896798][ C1] vkms_vblank_simulate: vblank timer overrun [ 900.756789][ C1] vkms_vblank_simulate: vblank timer overrun [ 901.279325][ C1] vkms_vblank_simulate: vblank timer overrun [ 901.437018][ T8637] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 901.804245][ T8637] usb 8-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 901.804276][ T8637] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.804297][ T8637] usb 8-1: Product: syz [ 901.804310][ T8637] usb 8-1: Manufacturer: syz [ 901.804323][ T8637] usb 8-1: SerialNumber: syz [ 901.880826][ T8637] usb 8-1: config 0 descriptor?? [ 901.917926][ T8637] i2c-tiny-usb 8-1:0.0: version 6d.cc found at bus 008 address 013 [ 902.282372][ C1] vkms_vblank_simulate: vblank timer overrun [ 902.506842][ T8637] (null): failure reading functionality [ 902.509257][ T8637] i2c i2c-1: failure reading functionality [ 902.541197][ T8637] i2c i2c-1: connected i2c-tiny-usb device [ 902.560459][ T8637] usb 8-1: USB disconnect, device number 13 [ 902.805634][ C1] vkms_vblank_simulate: vblank timer overrun [ 903.522475][ C1] vkms_vblank_simulate: vblank timer overrun [ 904.622207][ C1] vkms_vblank_simulate: vblank timer overrun [ 904.688402][ C1] vkms_vblank_simulate: vblank timer overrun [ 905.139598][ C1] vkms_vblank_simulate: vblank timer overrun [ 905.310132][ C1] vkms_vblank_simulate: vblank timer overrun [ 905.916114][ C1] vkms_vblank_simulate: vblank timer overrun [ 906.176743][ C1] vkms_vblank_simulate: vblank timer overrun [ 906.255957][T10513] bridge0: port 1(bridge_slave_0) entered blocking state [ 906.256100][T10513] bridge0: port 1(bridge_slave_0) entered disabled state [ 906.256334][T10513] bridge_slave_0: entered allmulticast mode [ 906.266312][T10513] bridge_slave_0: entered promiscuous mode [ 906.325876][T10513] bridge0: port 2(bridge_slave_1) entered blocking state [ 906.326013][T10513] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.326245][T10513] bridge_slave_1: entered allmulticast mode [ 906.328935][T10513] bridge_slave_1: entered promiscuous mode [ 906.927712][ T6435] bridge_slave_1: left allmulticast mode [ 906.927740][ T6435] bridge_slave_1: left promiscuous mode [ 906.927984][ T6435] bridge0: port 2(bridge_slave_1) entered disabled state [ 907.123884][ T6435] bridge_slave_0: left allmulticast mode [ 907.123911][ T6435] bridge_slave_0: left promiscuous mode [ 907.124176][ T6435] bridge0: port 1(bridge_slave_0) entered disabled state [ 907.496508][ C1] vkms_vblank_simulate: vblank timer overrun [ 908.609742][ C1] vkms_vblank_simulate: vblank timer overrun [ 909.348918][T10747] EXT4-fs (nbd7): unable to read superblock [ 911.206626][ T1229] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 911.460878][ T1229] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 911.461038][ T1229] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.461082][ T1229] usb 2-1: Product: syz [ 911.461119][ T1229] usb 2-1: Manufacturer: syz [ 911.461156][ T1229] usb 2-1: SerialNumber: syz [ 911.873573][ C0] vkms_vblank_simulate: vblank timer overrun [ 911.949653][ T1229] usb 2-1: config 0 descriptor?? [ 912.106206][ C0] vkms_vblank_simulate: vblank timer overrun [ 912.182781][ T1229] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 912.343155][ C0] vkms_vblank_simulate: vblank timer overrun [ 912.650110][ C0] vkms_vblank_simulate: vblank timer overrun [ 913.489732][ C0] vkms_vblank_simulate: vblank timer overrun [ 913.726164][ C0] vkms_vblank_simulate: vblank timer overrun [ 914.329747][ T1229] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 914.337687][ T1229] usb 2-1: USB disconnect, device number 61 [ 914.649087][ C0] vkms_vblank_simulate: vblank timer overrun [ 914.679796][ T5904] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 914.938298][ C0] vkms_vblank_simulate: vblank timer overrun [ 915.644719][ C0] vkms_vblank_simulate: vblank timer overrun [ 915.674079][ T5904] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 915.674110][ T5904] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 915.674133][ T5904] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 915.674153][ T5904] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 915.677517][ T5904] usb 8-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 915.677545][ T5904] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.677564][ T5904] usb 8-1: Product: syz [ 915.677579][ T5904] usb 8-1: Manufacturer: syz [ 915.677593][ T5904] usb 8-1: SerialNumber: syz [ 915.759412][ C0] vkms_vblank_simulate: vblank timer overrun [ 915.804506][ T5904] usb 8-1: config 0 descriptor?? [ 915.834571][ T5904] ums-isd200 8-1:0.0: USB Mass Storage device detected [ 915.966865][ T6435] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 916.254718][ C0] vkms_vblank_simulate: vblank timer overrun [ 916.883747][ T5904] ums-isd200 8-1:0.0: probe with driver ums-isd200 failed with error -22 [ 917.127286][ C0] vkms_vblank_simulate: vblank timer overrun [ 917.141100][ T1229] usb 8-1: USB disconnect, device number 14 [ 917.170534][ T6435] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 917.249988][ T6435] bond0 (unregistering): Released all slaves [ 918.354870][T10513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 918.541948][T10513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 918.923249][ C0] vkms_vblank_simulate: vblank timer overrun [ 919.180322][ C0] vkms_vblank_simulate: vblank timer overrun [ 919.222072][ T6435] hsr_slave_0: left promiscuous mode [ 919.544830][T10805] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1123'. [ 919.545678][T10805] input input21: cannot allocate more than FF_MAX_EFFECTS effects [ 920.170643][ C0] vkms_vblank_simulate: vblank timer overrun [ 920.222185][ T6435] hsr_slave_1: left promiscuous mode [ 920.223058][ T6435] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 920.277467][ T6435] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 920.996646][ T6435] team0 (unregistering): Port device team_slave_1 removed [ 921.147796][ T6435] team0 (unregistering): Port device team_slave_0 removed [ 921.623953][T10813] overlayfs: missing 'lowerdir' [ 923.502457][ C1] vkms_vblank_simulate: vblank timer overrun [ 923.936280][ C1] vkms_vblank_simulate: vblank timer overrun [ 924.085146][ C1] vkms_vblank_simulate: vblank timer overrun [ 924.200485][ C1] vkms_vblank_simulate: vblank timer overrun [ 924.562026][ C1] vkms_vblank_simulate: vblank timer overrun [ 924.761853][ T8358] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 924.804643][ C1] vkms_vblank_simulate: vblank timer overrun [ 924.842374][ T8637] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 924.854834][ T8358] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 924.865290][ T8358] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 924.874951][ T8358] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 924.888172][ T8358] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 925.010880][ T8637] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 925.010910][ T8637] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.010930][ T8637] usb 2-1: Product: syz [ 925.010945][ T8637] usb 2-1: Manufacturer: syz [ 925.010959][ T8637] usb 2-1: SerialNumber: syz [ 925.197690][ T8637] usb 2-1: config 0 descriptor?? [ 925.229313][ T8637] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 062 [ 925.615587][ T8637] (null): failure reading functionality [ 925.618459][ T8637] i2c i2c-1: failure reading functionality [ 925.646069][ T8637] i2c i2c-1: connected i2c-tiny-usb device [ 925.662357][ T8637] usb 2-1: USB disconnect, device number 62 [ 925.880143][T10837] netlink: 'syz.7.1132': attribute type 8 has an invalid length. [ 926.145269][ C1] vkms_vblank_simulate: vblank timer overrun [ 926.264962][T10513] team0: Port device team_slave_0 added [ 926.324478][T10513] team0: Port device team_slave_1 added [ 926.667868][T10848] overlayfs: missing 'lowerdir' [ 926.894198][ C1] vkms_vblank_simulate: vblank timer overrun [ 926.959693][ C1] vkms_vblank_simulate: vblank timer overrun [ 927.114118][ T5828] Bluetooth: hci5: command tx timeout [ 927.736804][T10513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 927.736820][T10513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 927.736840][T10513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 927.745364][T10824] hsr0 speed is unknown, defaulting to 1000 [ 927.748954][T10513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 927.748970][T10513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 927.748994][T10513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 928.949479][ T8630] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 929.089935][T10513] hsr_slave_0: entered promiscuous mode [ 929.101832][ T8630] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 929.101861][ T8630] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.101881][ T8630] usb 2-1: Product: syz [ 929.101894][ T8630] usb 2-1: Manufacturer: syz [ 929.101908][ T8630] usb 2-1: SerialNumber: syz [ 929.117647][T10513] hsr_slave_1: entered promiscuous mode [ 929.122415][T10513] debugfs: 'hsr0' already exists in 'hsr' [ 929.122441][T10513] Cannot create hsr debugfs directory [ 929.125348][ T8630] usb 2-1: config 0 descriptor?? [ 929.167889][ T8630] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 063 [ 929.175825][ T5828] Bluetooth: hci5: command tx timeout [ 929.687309][ T8630] (null): failure reading functionality [ 929.689219][ T8630] i2c i2c-1: failure reading functionality [ 929.710252][ T8630] i2c i2c-1: connected i2c-tiny-usb device [ 929.744519][ T8630] usb 2-1: USB disconnect, device number 63 [ 930.069885][ C0] vkms_vblank_simulate: vblank timer overrun [ 930.316192][ C0] vkms_vblank_simulate: vblank timer overrun [ 930.522545][ C0] vkms_vblank_simulate: vblank timer overrun [ 931.125661][T10913] netlink: 'syz.1.1147': attribute type 8 has an invalid length. [ 931.255678][ T5828] Bluetooth: hci5: command tx timeout [ 931.822506][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.852961][T10824] chnl_net:caif_netlink_parms(): no params data found [ 933.467668][ T5828] Bluetooth: hci5: command tx timeout [ 933.468982][ C0] vkms_vblank_simulate: vblank timer overrun [ 933.550757][ C0] vkms_vblank_simulate: vblank timer overrun [ 934.199066][ T8358] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 934.210580][ T8358] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 934.211797][ T8358] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 934.213182][ T8358] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 934.214243][ T8358] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 934.635995][ T5953] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 935.577956][ C0] vkms_vblank_simulate: vblank timer overrun [ 935.605327][ T5953] usb 7-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 935.605357][ T5953] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.605376][ T5953] usb 7-1: Product: syz [ 935.605390][ T5953] usb 7-1: Manufacturer: syz [ 935.605404][ T5953] usb 7-1: SerialNumber: syz [ 935.651941][ T5953] usb 7-1: config 0 descriptor?? [ 935.670546][ T5953] i2c-tiny-usb 7-1:0.0: version 6d.cc found at bus 007 address 019 [ 935.941601][ C0] vkms_vblank_simulate: vblank timer overrun [ 936.078313][ T5953] (null): failure reading functionality [ 936.082179][ T5953] i2c i2c-1: failure reading functionality [ 936.108706][ T5953] i2c i2c-1: connected i2c-tiny-usb device [ 936.146550][ T5953] usb 7-1: USB disconnect, device number 19 [ 936.385866][ T5828] Bluetooth: hci3: command tx timeout [ 936.739384][T10824] bridge0: port 1(bridge_slave_0) entered blocking state [ 936.739561][T10824] bridge0: port 1(bridge_slave_0) entered disabled state [ 936.739780][T10824] bridge_slave_0: entered allmulticast mode [ 936.748121][T10824] bridge_slave_0: entered promiscuous mode [ 936.756852][T10824] bridge0: port 2(bridge_slave_1) entered blocking state [ 936.765770][T10824] bridge0: port 2(bridge_slave_1) entered disabled state [ 936.766003][T10824] bridge_slave_1: entered allmulticast mode [ 936.768511][T10824] bridge_slave_1: entered promiscuous mode [ 937.260562][ C0] vkms_vblank_simulate: vblank timer overrun [ 938.233757][T10824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 938.243150][T10824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 938.243213][T10932] hsr0 speed is unknown, defaulting to 1000 [ 938.468931][ T5828] Bluetooth: hci3: command tx timeout [ 939.026417][T10990] binder: 10989:10990 ioctl c0306201 0 returned -14 [ 939.037242][T10990] binder: BINDER_SET_CONTEXT_MGR already set [ 939.037257][T10990] binder: 10989:10990 ioctl 4018620d 200000004a80 returned -16 [ 939.082547][T10824] team0: Port device team_slave_0 added [ 939.278277][T10824] team0: Port device team_slave_1 added [ 940.534913][ C0] vkms_vblank_simulate: vblank timer overrun [ 940.551135][ T5828] Bluetooth: hci3: command tx timeout [ 942.057445][ C0] vkms_vblank_simulate: vblank timer overrun [ 942.415725][ C0] vkms_vblank_simulate: vblank timer overrun [ 943.206500][ T5828] Bluetooth: hci3: command tx timeout [ 944.444979][T11025] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1171'. [ 944.445831][T11025] input input22: cannot allocate more than FF_MAX_EFFECTS effects [ 944.761774][T11030] binder: 11029:11030 ioctl c0306201 0 returned -14 [ 946.876551][ T8637] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 947.284863][ T8637] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 947.285919][ T8637] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.285976][ T8637] usb 2-1: Product: syz [ 947.286375][ T8637] usb 2-1: Manufacturer: syz [ 947.286391][ T8637] usb 2-1: SerialNumber: syz [ 947.649431][ T8637] usb 2-1: config 0 descriptor?? [ 947.771126][T10824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 947.771143][T10824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 947.771176][T10824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 947.849935][ T8637] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 064 [ 947.916716][T10824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 947.916731][T10824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 947.916748][T10824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 948.178411][ T8637] (null): failure reading functionality [ 948.179792][ T8637] i2c i2c-1: failure reading functionality [ 948.207045][ T8637] i2c i2c-1: connected i2c-tiny-usb device [ 948.236135][ T8637] usb 2-1: USB disconnect, device number 64 [ 949.733013][ T1175] bridge_slave_1: left allmulticast mode [ 949.733041][ T1175] bridge_slave_1: left promiscuous mode [ 949.733299][ T1175] bridge0: port 2(bridge_slave_1) entered disabled state [ 950.546304][T11069] netlink: 165 bytes leftover after parsing attributes in process `syz.1.1180'. [ 950.777743][ T1175] bridge_slave_0: left allmulticast mode [ 950.777772][ T1175] bridge_slave_0: left promiscuous mode [ 950.778026][ T1175] bridge0: port 1(bridge_slave_0) entered disabled state [ 951.763791][T11081] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1182'. [ 951.892308][T11081] input input23: cannot allocate more than FF_MAX_EFFECTS effects [ 955.350660][T11114] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1192'. [ 955.363646][T11114] input input24: cannot allocate more than FF_MAX_EFFECTS effects [ 955.697036][ C1] vkms_vblank_simulate: vblank timer overrun [ 955.744639][ C1] vkms_vblank_simulate: vblank timer overrun [ 956.124528][ T1175] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 956.145780][ C1] vkms_vblank_simulate: vblank timer overrun [ 956.174624][T11120] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60928 [ 956.174643][T11120] binder: 11119:11120 ioctl 4018620d 200000000100 returned -1 [ 956.389839][ C1] vkms_vblank_simulate: vblank timer overrun [ 956.567201][ C1] vkms_vblank_simulate: vblank timer overrun [ 956.863382][ C1] vkms_vblank_simulate: vblank timer overrun [ 956.900757][T11126] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60928 [ 956.900776][T11126] binder: 11119:11126 ioctl 4018620d 200000004a80 returned -1 [ 957.353880][ C1] vkms_vblank_simulate: vblank timer overrun [ 957.465140][ T1175] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 959.784198][ C1] vkms_vblank_simulate: vblank timer overrun [ 960.548013][ C1] vkms_vblank_simulate: vblank timer overrun [ 960.925056][ T1175] bond0 (unregistering): Released all slaves [ 961.973468][T11153] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60928 [ 961.973487][T11153] binder: 11152:11153 ioctl 4018620d 200000000100 returned -1 [ 962.003462][T11153] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60928 [ 962.003480][T11153] binder: 11152:11153 ioctl 4018620d 200000004a80 returned -1 [ 962.186064][ C0] vkms_vblank_simulate: vblank timer overrun [ 962.226927][ C0] vkms_vblank_simulate: vblank timer overrun [ 962.752066][T10824] hsr_slave_0: entered promiscuous mode [ 962.753357][T10824] hsr_slave_1: entered promiscuous mode [ 962.754195][T10824] debugfs: 'hsr0' already exists in 'hsr' [ 962.754218][T10824] Cannot create hsr debugfs directory [ 963.052016][ C0] vkms_vblank_simulate: vblank timer overrun [ 963.508583][ C0] vkms_vblank_simulate: vblank timer overrun [ 963.620035][T11169] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1209'. [ 963.623821][T11169] input input25: cannot allocate more than FF_MAX_EFFECTS effects [ 963.645108][ C0] vkms_vblank_simulate: vblank timer overrun [ 964.695880][ T8120] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 964.776325][ T1175] hsr_slave_0: left promiscuous mode [ 964.815821][ T1175] hsr_slave_1: left promiscuous mode [ 964.816862][ T1175] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 964.861964][ T1175] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 964.874264][ T8120] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 964.874294][ T8120] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.874314][ T8120] usb 2-1: Product: syz [ 964.874329][ T8120] usb 2-1: Manufacturer: syz [ 964.874343][ T8120] usb 2-1: SerialNumber: syz [ 964.916174][ T8120] usb 2-1: config 0 descriptor?? [ 964.948689][ T8120] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 065 [ 965.351416][ T8120] (null): failure reading functionality [ 965.362035][ T8120] i2c i2c-1: failure reading functionality [ 965.381835][ T8120] i2c i2c-1: connected i2c-tiny-usb device [ 965.391124][ T8120] usb 2-1: USB disconnect, device number 65 [ 965.795887][ C0] vkms_vblank_simulate: vblank timer overrun [ 969.736384][ T8637] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 970.015669][ T8637] usb 7-1: Using ep0 maxpacket: 16 [ 970.036350][ T8637] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 970.036441][ T8637] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 970.076507][ T8637] usb 7-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 970.076605][ T8637] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.076682][ T8637] usb 7-1: Product: syz [ 970.076757][ T8637] usb 7-1: Manufacturer: syz [ 970.076835][ T8637] usb 7-1: SerialNumber: syz [ 970.428906][ T8637] usb 7-1: config 0 descriptor?? [ 971.844096][ T8120] usb 7-1: USB disconnect, device number 20 [ 971.854503][ T1175] team0 (unregistering): Port device team_slave_1 removed [ 971.918075][T11209] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1221'. [ 971.924672][T11209] input input26: cannot allocate more than FF_MAX_EFFECTS effects [ 972.906503][T11212] overlayfs: missing 'workdir' [ 973.055357][ T1175] team0 (unregistering): Port device team_slave_0 removed [ 973.215660][ T5951] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 978.468540][ T5951] usb 2-1: unable to read config index 0 descriptor/start: -110 [ 978.468572][ T5951] usb 2-1: can't read configurations, error -110 [ 978.626062][ T5951] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 978.771421][ T5951] usb 2-1: device descriptor read/64, error -32 [ 978.940161][ T5951] usb usb2-port1: attempt power cycle [ 982.524080][T10932] chnl_net:caif_netlink_parms(): no params data found [ 983.436313][T10932] bridge0: port 1(bridge_slave_0) entered blocking state [ 983.436525][T10932] bridge0: port 1(bridge_slave_0) entered disabled state [ 983.436756][T10932] bridge_slave_0: entered allmulticast mode [ 983.438273][T10932] bridge_slave_0: entered promiscuous mode [ 983.440841][T10932] bridge0: port 2(bridge_slave_1) entered blocking state [ 983.441020][T10932] bridge0: port 2(bridge_slave_1) entered disabled state [ 983.441219][T10932] bridge_slave_1: entered allmulticast mode [ 983.443109][T10932] bridge_slave_1: entered promiscuous mode [ 983.675222][T11262] overlayfs: missing 'lowerdir' [ 983.831468][T10932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 983.876901][ T5953] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 983.910024][T10932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 984.075397][T11272] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 984.545022][ T5953] usb 8-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 984.545054][ T5953] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.545074][ T5953] usb 8-1: Product: syz [ 984.545088][ T5953] usb 8-1: Manufacturer: syz [ 984.545101][ T5953] usb 8-1: SerialNumber: syz [ 986.096369][ T5953] usb 8-1: config 0 descriptor?? [ 986.115344][ T5953] i2c-tiny-usb 8-1:0.0: version 6d.cc found at bus 008 address 015 [ 986.365139][ T8358] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 986.376311][ T8358] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 986.378699][ T8358] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 986.380784][ T8358] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 986.386554][ T8358] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 987.415502][ T5953] (null): failure reading functionality [ 987.417079][ T5953] i2c i2c-1: failure reading functionality [ 987.449160][ T5953] i2c i2c-1: connected i2c-tiny-usb device [ 987.453343][ T5953] usb 8-1: USB disconnect, device number 15 [ 987.708391][T10932] team0: Port device team_slave_0 added [ 987.728439][T10932] team0: Port device team_slave_1 added [ 988.106053][T11283] netlink: 'syz.6.1241': attribute type 8 has an invalid length. [ 988.143604][ T1175] bridge_slave_1: left allmulticast mode [ 988.143631][ T1175] bridge_slave_1: left promiscuous mode [ 988.143869][ T1175] bridge0: port 2(bridge_slave_1) entered disabled state [ 988.987304][ T8358] Bluetooth: hci2: command tx timeout [ 989.269801][ T1175] bridge_slave_0: left allmulticast mode [ 989.269830][ T1175] bridge_slave_0: left promiscuous mode [ 989.270084][ T1175] bridge0: port 1(bridge_slave_0) entered disabled state [ 989.662129][ T1175] bridge_slave_1: left allmulticast mode [ 989.662160][ T1175] bridge_slave_1: left promiscuous mode [ 989.662435][ T1175] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.937377][ T1175] bridge_slave_0: left allmulticast mode [ 989.937404][ T1175] bridge_slave_0: left promiscuous mode [ 989.937637][ T1175] bridge0: port 1(bridge_slave_0) entered disabled state [ 990.283691][T11316] trusted_key: encrypted_key: insufficient parameters specified [ 990.833091][ C0] vkms_vblank_simulate: vblank timer overrun [ 991.041121][ T8358] Bluetooth: hci2: command tx timeout [ 993.096662][ T8358] Bluetooth: hci2: command tx timeout [ 993.437608][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.451941][ C0] vkms_vblank_simulate: vblank timer overrun [ 993.517284][ C0] vkms_vblank_simulate: vblank timer overrun [ 994.307650][ C0] vkms_vblank_simulate: vblank timer overrun [ 995.176935][ T8358] Bluetooth: hci2: command tx timeout [ 997.433496][ T1175] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 997.594165][ T1175] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 997.679083][ T1175] bond0 (unregistering): Released all slaves [ 998.225081][ T5828] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 998.241585][ T5828] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 998.243834][ T5828] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 998.245880][T11355] netlink: 'syz.7.1255': attribute type 8 has an invalid length. [ 998.273558][ T5828] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 998.274958][ T5828] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 998.522446][ T1175] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 998.667271][ T1175] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 998.777479][ T1175] bond0 (unregistering): Released all slaves [ 1000.305914][ T1175] hsr_slave_0: left promiscuous mode [ 1000.392621][ T5828] Bluetooth: hci5: command tx timeout [ 1000.415914][ T1175] hsr_slave_1: left promiscuous mode [ 1000.416806][ T1175] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1000.502034][ T1175] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1001.166262][ T1175] hsr_slave_0: left promiscuous mode [ 1002.455773][ T5828] Bluetooth: hci5: command tx timeout [ 1003.399819][ T1175] hsr_slave_1: left promiscuous mode [ 1003.401634][ T1175] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1003.559682][ T1175] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1004.535803][ T5828] Bluetooth: hci5: command tx timeout [ 1006.914714][ T5828] Bluetooth: hci5: command tx timeout [ 1008.356403][ T1175] team0 (unregistering): Port device team_slave_1 removed [ 1009.572500][ T1175] team0 (unregistering): Port device team_slave_0 removed [ 1010.982362][ C0] vkms_vblank_simulate: vblank timer overrun [ 1011.357223][ C0] vkms_vblank_simulate: vblank timer overrun [ 1011.419536][ C0] vkms_vblank_simulate: vblank timer overrun [ 1011.740721][ C0] vkms_vblank_simulate: vblank timer overrun [ 1012.096046][ T5953] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1012.269434][ T5953] usb 8-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1012.269453][ T5953] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.269464][ T5953] usb 8-1: Product: syz [ 1012.269471][ T5953] usb 8-1: Manufacturer: syz [ 1012.269478][ T5953] usb 8-1: SerialNumber: syz [ 1012.273342][ T5953] usb 8-1: config 0 descriptor?? [ 1012.328783][ T5953] i2c-tiny-usb 8-1:0.0: version 6d.cc found at bus 008 address 016 [ 1012.710425][ T5953] (null): failure reading functionality [ 1012.730303][ T5953] i2c i2c-1: failure reading functionality [ 1012.736724][ T5953] i2c i2c-1: connected i2c-tiny-usb device [ 1012.755264][ T5953] usb 8-1: USB disconnect, device number 16 [ 1012.813536][ C0] vkms_vblank_simulate: vblank timer overrun [ 1013.008521][T11443] netlink: 'syz.1.1277': attribute type 8 has an invalid length. [ 1013.086504][ T1175] team0 (unregistering): Port device team_slave_1 removed [ 1013.367947][ C0] vkms_vblank_simulate: vblank timer overrun [ 1013.730844][ C0] vkms_vblank_simulate: vblank timer overrun [ 1014.527710][ C0] vkms_vblank_simulate: vblank timer overrun [ 1014.578838][ T1175] team0 (unregistering): Port device team_slave_0 removed [ 1014.917197][ C0] vkms_vblank_simulate: vblank timer overrun [ 1015.027323][ C0] vkms_vblank_simulate: vblank timer overrun [ 1017.365731][ T5953] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1017.569001][T11468] binder: 11467:11468 ioctl 4018620d 0 returned -22 [ 1017.673464][ C0] vkms_vblank_simulate: vblank timer overrun [ 1017.715728][ T5953] usb 2-1: Using ep0 maxpacket: 32 [ 1017.735243][ T5953] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1017.751870][ T5953] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1017.751898][ T5953] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.751910][ T5953] usb 2-1: Product: syz [ 1017.751917][ T5953] usb 2-1: Manufacturer: syz [ 1017.751924][ T5953] usb 2-1: SerialNumber: syz [ 1017.758102][ T5953] usb 2-1: config 0 descriptor?? [ 1018.357067][ C0] vkms_vblank_simulate: vblank timer overrun [ 1018.362172][ T5953] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 1018.643689][ C0] vkms_vblank_simulate: vblank timer overrun [ 1019.466893][T11278] hsr0 speed is unknown, defaulting to 1000 [ 1019.659393][ C0] vkms_vblank_simulate: vblank timer overrun [ 1020.040638][T11482] netlink: 'syz.1.1288': attribute type 8 has an invalid length. [ 1020.187918][ T5953] usb 2-1: USB disconnect, device number 69 [ 1020.368173][T11354] hsr0 speed is unknown, defaulting to 1000 [ 1020.698491][ C0] vkms_vblank_simulate: vblank timer overrun [ 1021.155254][ C0] vkms_vblank_simulate: vblank timer overrun [ 1021.430777][ C0] vkms_vblank_simulate: vblank timer overrun [ 1021.531360][ C0] vkms_vblank_simulate: vblank timer overrun [ 1021.782934][ C0] vkms_vblank_simulate: vblank timer overrun [ 1021.901332][ C0] vkms_vblank_simulate: vblank timer overrun [ 1023.046671][T11499] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60928 [ 1023.046691][T11499] binder: 11498:11499 ioctl 4018620d 200000000100 returned -1 [ 1023.077083][T11499] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60928 [ 1023.077103][T11499] binder: 11498:11499 ioctl 4018620d 200000004a80 returned -1 [ 1023.077318][T11499] binder: 11498:11499 ioctl c0306201 0 returned -14 [ 1024.972304][ C1] vkms_vblank_simulate: vblank timer overrun [ 1025.790551][ C1] vkms_vblank_simulate: vblank timer overrun [ 1025.994232][ C1] vkms_vblank_simulate: vblank timer overrun [ 1026.087355][ C1] vkms_vblank_simulate: vblank timer overrun [ 1026.349426][ C1] vkms_vblank_simulate: vblank timer overrun [ 1026.404531][T11526] netlink: 'syz.7.1299': attribute type 8 has an invalid length. [ 1026.607357][T11278] chnl_net:caif_netlink_parms(): no params data found [ 1026.725423][ C1] vkms_vblank_simulate: vblank timer overrun [ 1027.779551][ C1] vkms_vblank_simulate: vblank timer overrun [ 1028.125823][T11542] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60928 [ 1028.125852][T11542] binder: 11540:11542 ioctl 4018620d 200000000100 returned -1 [ 1028.135799][T11542] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60928 [ 1028.135818][T11542] binder: 11540:11542 ioctl 4018620d 200000004a80 returned -1 [ 1028.136052][T11542] binder: 11540:11542 ioctl c0306201 0 returned -14 [ 1028.166257][ C1] vkms_vblank_simulate: vblank timer overrun [ 1028.504500][ C1] vkms_vblank_simulate: vblank timer overrun [ 1028.772541][ C1] vkms_vblank_simulate: vblank timer overrun [ 1029.094423][ C1] vkms_vblank_simulate: vblank timer overrun [ 1029.328532][T11354] chnl_net:caif_netlink_parms(): no params data found [ 1029.693620][T11556] ------------[ cut here ]------------ [ 1029.693650][T11556] WARNING: CPU: 1 PID: 11556 at ./include/linux/seqlock.h:221 cgroup_freeze+0x80a/0xf90 [ 1029.693704][T11556] Modules linked in: [ 1029.693738][T11556] CPU: 1 UID: 0 PID: 11556 Comm: syz.6.1306 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1029.693763][T11556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1029.693779][T11556] RIP: 0010:cgroup_freeze+0x80a/0xf90 [ 1029.693807][T11556] Code: 90 e9 9e fb ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c e7 f9 ff ff 4c 89 f7 e8 e1 43 67 00 e9 da f9 ff ff e8 17 68 06 00 90 <0f> 0b 90 e9 10 fc ff ff 44 89 f9 80 e1 07 38 c1 48 8b 0c 24 0f 8c [ 1029.693825][T11556] RSP: 0018:ffffc900047bf8e0 EFLAGS: 00010287 [ 1029.693843][T11556] RAX: ffffffff81b6c6a9 RBX: 0000000000000000 RCX: 0000000000080000 [ 1029.693857][T11556] RDX: ffffc9001ddc4000 RSI: 00000000000000ae RDI: 00000000000000af [ 1029.693871][T11556] RBP: ffffc900047bfa70 R08: 0000000000000000 R09: 0000000000000000 [ 1029.693885][T11556] R10: dffffc0000000000 R11: fffffbfff1d6d2a7 R12: dffffc0000000000 [ 1029.693901][T11556] R13: 0000000000000000 R14: 0000000000000001 R15: ffff888034f8a791 [ 1029.693914][T11556] FS: 00007f121fb4e6c0(0000) GS:ffff888127117000(0000) knlGS:0000000000000000 [ 1029.693932][T11556] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1029.693946][T11556] CR2: 0000000000000000 CR3: 000000004ad3c000 CR4: 00000000003526f0 [ 1029.693963][T11556] Call Trace: [ 1029.693975][T11556] [ 1029.693990][T11556] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1029.694029][T11556] ? __pfx_cgroup_freeze+0x10/0x10 [ 1029.694053][T11556] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1029.694083][T11556] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1029.694112][T11556] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 1029.694149][T11556] ? mutex_lock_nested+0x154/0x1d0 [ 1029.694173][T11556] ? cgroup_kn_lock_live+0x13c/0x230 [ 1029.694214][T11556] cgroup_freeze_write+0x156/0x1c0 [ 1029.694238][T11556] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 1029.694257][T11556] ? kernfs_root+0x1c/0x230 [ 1029.694275][T11556] ? kernfs_root+0x1c/0x230 [ 1029.694296][T11556] ? kernfs_root+0x1ea/0x230 [ 1029.694314][T11556] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 1029.694336][T11556] cgroup_file_write+0x39b/0x740 [ 1029.694371][T11556] ? __pfx_cgroup_file_write+0x10/0x10 [ 1029.694415][T11556] ? __pfx_cgroup_file_write+0x10/0x10 [ 1029.694440][T11556] kernfs_fop_write_iter+0x3b0/0x540 [ 1029.694475][T11556] vfs_write+0x5d5/0xb40 [ 1029.694505][T11556] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1029.694532][T11556] ? __pfx_vfs_write+0x10/0x10 [ 1029.694552][T11556] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 1029.694589][T11556] ? mutex_lock_nested+0x154/0x1d0 [ 1029.694612][T11556] ? fdget_pos+0x253/0x320 [ 1029.694655][T11556] ksys_write+0x14b/0x260 [ 1029.694681][T11556] ? __pfx_ksys_write+0x10/0x10 [ 1029.694711][T11556] ? do_syscall_64+0xbe/0x3b0 [ 1029.694736][T11556] do_syscall_64+0xfa/0x3b0 [ 1029.694755][T11556] ? lockdep_hardirqs_on+0x9c/0x150 [ 1029.694784][T11556] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.694804][T11556] ? clear_bhb_loop+0x60/0xb0 [ 1029.694829][T11556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.694848][T11556] RIP: 0033:0x7f12218eeec9 [ 1029.694870][T11556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1029.694886][T11556] RSP: 002b:00007f121fb4e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1029.694908][T11556] RAX: ffffffffffffffda RBX: 00007f1221b45fa0 RCX: 00007f12218eeec9 [ 1029.694923][T11556] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 0000000000000004 [ 1029.694936][T11556] RBP: 00007f1221971f91 R08: 0000000000000000 R09: 0000000000000000 [ 1029.694950][T11556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1029.694962][T11556] R13: 00007f1221b46038 R14: 00007f1221b45fa0 R15: 00007ffdb355f318 [ 1029.694997][T11556] [ 1029.695012][T11556] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1029.695027][T11556] CPU: 1 UID: 0 PID: 11556 Comm: syz.6.1306 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1029.695050][T11556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1029.695061][T11556] Call Trace: [ 1029.695069][T11556] [ 1029.695077][T11556] dump_stack_lvl+0x99/0x250 [ 1029.695098][T11556] ? __asan_memcpy+0x40/0x70 [ 1029.695119][T11556] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1029.695139][T11556] ? __pfx__printk+0x10/0x10 [ 1029.695180][T11556] vpanic+0x281/0x750 [ 1029.695200][T11556] ? __pfx__printk+0x10/0x10 [ 1029.695223][T11556] ? __pfx_vpanic+0x10/0x10 [ 1029.695244][T11556] ? is_bpf_text_address+0x26/0x2b0 [ 1029.695277][T11556] panic+0xb9/0xc0 [ 1029.695296][T11556] ? __pfx_panic+0x10/0x10 [ 1029.695334][T11556] __warn+0x31b/0x4b0 [ 1029.695352][T11556] ? cgroup_freeze+0x80a/0xf90 [ 1029.695380][T11556] ? cgroup_freeze+0x80a/0xf90 [ 1029.695406][T11556] report_bug+0x2be/0x4f0 [ 1029.695434][T11556] ? cgroup_freeze+0x80a/0xf90 [ 1029.695460][T11556] ? cgroup_freeze+0x80a/0xf90 [ 1029.695485][T11556] ? cgroup_freeze+0x80c/0xf90 [ 1029.695510][T11556] handle_bug+0x84/0x160 [ 1029.695535][T11556] exc_invalid_op+0x1a/0x50 [ 1029.695553][T11556] asm_exc_invalid_op+0x1a/0x20 [ 1029.695571][T11556] RIP: 0010:cgroup_freeze+0x80a/0xf90 [ 1029.695596][T11556] Code: 90 e9 9e fb ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c e7 f9 ff ff 4c 89 f7 e8 e1 43 67 00 e9 da f9 ff ff e8 17 68 06 00 90 <0f> 0b 90 e9 10 fc ff ff 44 89 f9 80 e1 07 38 c1 48 8b 0c 24 0f 8c [ 1029.695613][T11556] RSP: 0018:ffffc900047bf8e0 EFLAGS: 00010287 [ 1029.695636][T11556] RAX: ffffffff81b6c6a9 RBX: 0000000000000000 RCX: 0000000000080000 [ 1029.695651][T11556] RDX: ffffc9001ddc4000 RSI: 00000000000000ae RDI: 00000000000000af [ 1029.695665][T11556] RBP: ffffc900047bfa70 R08: 0000000000000000 R09: 0000000000000000 [ 1029.695678][T11556] R10: dffffc0000000000 R11: fffffbfff1d6d2a7 R12: dffffc0000000000 [ 1029.695694][T11556] R13: 0000000000000000 R14: 0000000000000001 R15: ffff888034f8a791 [ 1029.695718][T11556] ? cgroup_freeze+0x809/0xf90 [ 1029.695759][T11556] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1029.695793][T11556] ? __pfx_cgroup_freeze+0x10/0x10 [ 1029.695816][T11556] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1029.695847][T11556] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1029.695875][T11556] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 1029.695911][T11556] ? mutex_lock_nested+0x154/0x1d0 [ 1029.695933][T11556] ? cgroup_kn_lock_live+0x13c/0x230 [ 1029.695972][T11556] cgroup_freeze_write+0x156/0x1c0 [ 1029.695996][T11556] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 1029.696016][T11556] ? kernfs_root+0x1c/0x230 [ 1029.696034][T11556] ? kernfs_root+0x1c/0x230 [ 1029.696055][T11556] ? kernfs_root+0x1ea/0x230 [ 1029.696073][T11556] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 1029.696095][T11556] cgroup_file_write+0x39b/0x740 [ 1029.696131][T11556] ? __pfx_cgroup_file_write+0x10/0x10 [ 1029.696173][T11556] ? __pfx_cgroup_file_write+0x10/0x10 [ 1029.696198][T11556] kernfs_fop_write_iter+0x3b0/0x540 [ 1029.696232][T11556] vfs_write+0x5d5/0xb40 [ 1029.696261][T11556] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1029.696289][T11556] ? __pfx_vfs_write+0x10/0x10 [ 1029.696310][T11556] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 1029.696346][T11556] ? mutex_lock_nested+0x154/0x1d0 [ 1029.696368][T11556] ? fdget_pos+0x253/0x320 [ 1029.696405][T11556] ksys_write+0x14b/0x260 [ 1029.696431][T11556] ? __pfx_ksys_write+0x10/0x10 [ 1029.696461][T11556] ? do_syscall_64+0xbe/0x3b0 [ 1029.696485][T11556] do_syscall_64+0xfa/0x3b0 [ 1029.696503][T11556] ? lockdep_hardirqs_on+0x9c/0x150 [ 1029.696532][T11556] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.696552][T11556] ? clear_bhb_loop+0x60/0xb0 [ 1029.696577][T11556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.696596][T11556] RIP: 0033:0x7f12218eeec9 [ 1029.696613][T11556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1029.696677][T11556] RSP: 002b:00007f121fb4e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1029.696697][T11556] RAX: ffffffffffffffda RBX: 00007f1221b45fa0 RCX: 00007f12218eeec9 [ 1029.696713][T11556] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 0000000000000004 [ 1029.696726][T11556] RBP: 00007f1221971f91 R08: 0000000000000000 R09: 0000000000000000 [ 1029.696739][T11556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1029.696752][T11556] R13: 00007f1221b46038 R14: 00007f1221b45fa0 R15: 00007ffdb355f318 [ 1029.696791][T11556] [ 1029.697060][T11556] Kernel Offset: disabled