last executing test programs: 29m4.226135198s ago: executing program 2 (id=307): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r4, 0x541b, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) mount$bind(0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00001000000000000000000000000800120002000200000000000000000010002163d9f50000000000000000000010006c00000000000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa"], 0x80}}, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000300)={0x0, @bt={0x8001, 0x8, 0x0, 0x3, 0x4, 0x2, 0x0, 0xffff8001, 0xd, 0x0, 0xb, 0x9e, 0x20000, 0x88, 0x1, 0x14, {0x80000000, 0x5}, 0x0, 0x1}}) 29m2.181751225s ago: executing program 2 (id=310): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x3c) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/81, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtaction={0x14, 0x1c, 0x1, 0x0, 0xffffffff, {0x0, 0x0, 0x1300}}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 29m1.634681854s ago: executing program 2 (id=312): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44045}, 0xc090) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getpriority(0x2, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0) bind$can_j1939(r3, &(0x7f0000000100), 0x18) syz_io_uring_setup(0x79a8, 0x0, 0x0, &(0x7f0000000300)) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000380)=ANY=[], 0x48) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="2d09000000000000000002000000080002000000000008"], 0x2c}}, 0x0) 29m0.336206219s ago: executing program 2 (id=316): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000200)={0x1d, r4}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r4, @ANYRES64=r3, @ANYBLOB], 0x20000600}}, 0x0) 28m57.83611018s ago: executing program 2 (id=320): iopl(0x3) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r5, 0x4004550d, 0x0) unshare(0x24060400) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, 0x0, 0x0}, 0x20) r6 = socket$inet(0x2, 0x3, 0x7ff) setsockopt$IP_VS_SO_SET_ZERO(r6, 0x0, 0x4, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008004) 28m55.755240684s ago: executing program 2 (id=325): setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40884}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_PREFIX={0x7, 0x2, 0x1, 0x0, '.\xfa\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 28m39.062419527s ago: executing program 32 (id=325): setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40884}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_PREFIX={0x7, 0x2, 0x1, 0x0, '.\xfa\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 25m56.254281902s ago: executing program 0 (id=700): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x100) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_G_TUNER(r3, 0xc054561d, &(0x7f0000000180)={0x10000009, "836d11f8a2e73306000000b5d43d400ebf870e7cd725428a6a1d3a98fb3338ee", 0x1, 0x20, 0x7fffffff, 0x3, 0x1, 0x1, 0x0, 0x401}) 25m54.810642214s ago: executing program 0 (id=701): r0 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x11, 0x2, 0x300) syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)="4c9bc5376b22498d87e43aad998bc9e06a919b75a5961112c82908d5b9d2241e5997e7582aa760525176d638b52a3b8d2d582be3344647d5d21810603172887708857dc880a24bb357eb15ed0cb30d9bb9c8d52d8c82afa3ac22b2452d4f894031cfb85dcf44356861d02a8998e8444c44388a78586b87101320b41aaa136a3485e9abfc1e9a52ae65feb4947f7d30983d54c6ee") bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x73, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4) sendmsg$kcm(r0, 0x0, 0x0) 25m54.129684351s ago: executing program 0 (id=704): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) close(0x3) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close(0x3) 25m48.268088429s ago: executing program 0 (id=713): r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) io_submit(0x0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}]) 25m46.610164039s ago: executing program 0 (id=715): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0x4, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) close(0x3) syz_emit_ethernet(0x36, &(0x7f0000000680)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x81, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4, 0xca, 0x0, 0x1000}}}}}}, 0x0) 25m46.391104487s ago: executing program 0 (id=718): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) recvmmsg(r0, &(0x7f00000053c0), 0x0, 0xfbd938585c4b5529, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x6, 0x0, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0xd209f6d814827b17) 25m31.331072376s ago: executing program 33 (id=718): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) recvmmsg(r0, &(0x7f00000053c0), 0x0, 0xfbd938585c4b5529, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x6, 0x0, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0xd209f6d814827b17) 16m56.883531199s ago: executing program 3 (id=2087): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x8, &(0x7f0000000780)=ANY=[], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 16m56.789748264s ago: executing program 3 (id=2088): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[], 0xc4}}, 0x0) 16m56.734577347s ago: executing program 3 (id=2090): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c00028008000100010000"], 0x74}}, 0x24005000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xffff, 0xffff}, {0xfff3, 0x6}}}, 0x24}}, 0x8040) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 16m56.495345336s ago: executing program 3 (id=2096): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x4fc0, 0x80, 0x6, 0x0, 0x8, 0x80, 0x7}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) syz_open_dev$sg(&(0x7f00000060c0), 0xffffffff, 0x8002) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1, 0x0, 0x7}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) socket$netlink(0x10, 0x3, 0x14) openat$audio(0xffffff9c, &(0x7f00000004c0), 0x800, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 16m54.689708649s ago: executing program 3 (id=2102): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000000102"], 0x50}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) 16m52.819013289s ago: executing program 3 (id=2105): r0 = getpid() r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xe8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4040000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 16m37.222339994s ago: executing program 34 (id=2105): r0 = getpid() r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xe8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4040000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 13m37.421382332s ago: executing program 6 (id=2638): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="080000001f0137f73199aee6fdb9291b3091ec1a2d41d227975ad8ec030f5919f397867997f9c0efa9c909ff0f00000000000087afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c0cdfa9115adbe5b19bc912fcbc8aac7719b64", 0xf8}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 13m37.050918156s ago: executing program 6 (id=2642): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 13m34.470353905s ago: executing program 6 (id=2652): syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0) 13m33.310529619s ago: executing program 6 (id=2656): socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002020000000000000000100095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$ax25(0x3, 0x2, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000006000000080000000c"], 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r3], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x88010) 13m32.82526267s ago: executing program 6 (id=2659): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000b40)={0xa, 0x8b}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) futex(0x0, 0x5, 0x2, 0x0, 0x0, 0x616e9570) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000040)) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r7 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_SETTRIGGER(r6, 0x40045010, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r7, 0x4112, 0x0) 13m29.145376798s ago: executing program 6 (id=2672): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x48100) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000040)={0x2000, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) close_range(r1, 0xffffffffffffffff, 0x0) 13m13.819991511s ago: executing program 35 (id=2672): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x48100) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000040)={0x2000, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) close_range(r1, 0xffffffffffffffff, 0x0) 9m0.305785021s ago: executing program 5 (id=3312): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x300f000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 9m0.244830033s ago: executing program 5 (id=3313): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001000)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r4, 0x3b8d, &(0x7f0000000280)={0x20, 0x0, &(0x7f0000000600)=[{0x0, 0xfffffffd}], 0xdeadbeef, 0x8, 0x1}) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r5, r3, 0x0, 0x2) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCFLSH(r7, 0x400455c8, 0x1) syz_usb_connect(0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet(0x2, 0x3, 0x7f) r8 = socket$kcm(0x29, 0x5, 0x0) sendmsg$inet(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2005c080) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000400)={'\x00', 0xd, 0x80000000, 0xeb8, 0x8001, 0x2, r0}) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r9, &(0x7f0000000040), 0x4001) socket$nl_netfilter(0x10, 0x3, 0xc) 8m57.136822746s ago: executing program 5 (id=3319): socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000001600)=""/4103, 0x1007}], 0x1, 0x18, 0x2) r1 = syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) io_cancel(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x6, r1, 0x0, 0x0, 0xfd7c, 0x0, 0x1}, &(0x7f0000000280)) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x101a01) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1cf) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000180)={0x1, 0x2, 0x4, 0x10001, 0x8, "008ef14ba278887cb0baba08431799317e6324"}) dup(r2) r3 = syz_io_uring_setup(0x4260, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[], 0x118) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000000, 0x1}) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8000, 0x44, 0x18}, 0x18) 8m56.726508679s ago: executing program 5 (id=3320): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) sigaltstack(0x0, &(0x7f0000000700)={0x0}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000940)={0x2020}, 0x2020) 8m55.662962189s ago: executing program 5 (id=3321): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x1000000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a010400000000000000000200000344000480400001800e000100627974656f726465720000002c000280080001400000000c0800024000000000080004400000009b080003400000000008000540000000020900010073797a30000000000900020073797a32"], 0x98}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 8m52.158961s ago: executing program 5 (id=3330): socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x331002, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x91) syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x400, 0x33e, 0x30, 0x0, 0x0, 0x4db, 0x8, 0x0, {0x4, 0x40}, {0x0, 0x1}, {}, {0x3, 0x0, 0x1}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffc00, 0x0, 0x400, 0x0, 0x0, 0x21, 0x0, 0x0, 0x7}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002500012f8b74ae53050571ff050000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x4048957}, 0x28040) recvmsg(r3, &(0x7f0000001980)={0x0, 0x0, 0x0}, 0x142) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r4 = syz_io_uring_setup(0x1714, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_usb_connect(0x6, 0x24, 0x0, 0x0) r5 = syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r5, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272) 8m36.020269531s ago: executing program 36 (id=3330): socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x331002, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x91) syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x400, 0x33e, 0x30, 0x0, 0x0, 0x4db, 0x8, 0x0, {0x4, 0x40}, {0x0, 0x1}, {}, {0x3, 0x0, 0x1}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffc00, 0x0, 0x400, 0x0, 0x0, 0x21, 0x0, 0x0, 0x7}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002500012f8b74ae53050571ff050000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x4048957}, 0x28040) recvmsg(r3, &(0x7f0000001980)={0x0, 0x0, 0x0}, 0x142) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r4 = syz_io_uring_setup(0x1714, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_usb_connect(0x6, 0x24, 0x0, 0x0) r5 = syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r5, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272) 3m1.448524806s ago: executing program 8 (id=3888): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000540)="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", 0x100}], 0x1}, 0x4008000) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[], 0x28}, 0x41) 3m1.173328198s ago: executing program 8 (id=3890): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x6, 0x8201) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) syz_emit_ethernet(0x52, &(0x7f0000000400)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0100fffc90a89d318b8a2ed4e9eb254e4a0e56d769"], 0x0) recvmmsg(r4, &(0x7f00000021c0), 0x5b, 0x40, 0x0) getitimer(0x0, 0x0) socket(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001100050000000000feffffff07000000", @ANYRES32], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) 2m58.432677035s ago: executing program 8 (id=3894): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x0) 2m58.298163769s ago: executing program 8 (id=3896): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) close(0x3) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000140)="7800000018002507b9409b14ffff00000204be04020506050e0204094300", 0x1e, 0x40044, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x17, 0x8, &(0x7f0000000940)=ANY=[@ANYRES16, @ANYRES32, @ANYRES64=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r4, &(0x7f0000000200)=[{&(0x7f0000000780)="1fd06d8e76c7288e5258caf91ae1b078ae87535b3658cd734d18b7acac5e3b5562ba15c578315bbb6a23ad4d94a3d07fe10918baf2322aac523e91f2a874e148279f925564ec26c142e6d742fe50a66f2b6ef8558ab459081828da9dd2fcc2e1315960d51db93865f941fa6ff9d9917291c2d94574f2b4e80b", 0x79}], 0x1) r5 = socket(0x1, 0x80000, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x1, &(0x7f0000000740)=ANY=[@ANYRESHEX=r3], &(0x7f0000000280)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', r6, 0x25, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0b000000050000020500fffbffffffffffff00008440c11a1fc8d2d56377c81612f34965b0edc059ad87f806f7e30c2feeab8a7839f3236de384e81734c789f9982c9cac0ff0091f2309a2122693efb17a43ad73ccb4f992110e", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffff2) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f0000000540)={{0x98, 0x9}, 'port1\x00', 0xb8, 0x800, 0x7, 0x6, 0x2, 0x6, 0x4, 0x0, 0x1, 0x9}) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r7) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0xc1c6) r9 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCSFF(r9, 0x40304580, &(0x7f00000003c0)={0x57, 0x1, 0xdb7, {0xffff, 0x1}, {0x48, 0x3}, @cond=[{0x8, 0x800, 0x8, 0x849, 0x5, 0x7}, {0x94, 0x4, 0x1, 0x7, 0x6, 0x4}]}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r5) sendmsg$NL80211_CMD_SET_PMKSA(r7, 0x0, 0x4008040) write$char_usb(r9, &(0x7f0000000040)="e2", 0x2250) 2m56.849579299s ago: executing program 8 (id=3898): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = fsopen(&(0x7f00000001c0)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000200)='source\x00\xb5a8\x8d\xbd\xdf\xfe\x9a\xf2RM\xb6\xe0\xf9\xac\xa2\x06\x1cD\xe7C\xa5<\xd1_\xa0u\xcd\x19\xbf\x114\x01=\x93\xf7\xf7Sn\xcb\xd5\xa7\xc9@D\x00\xff\xaar\t\xa9\x13\b\x9a\x8bF\v\x8a\x93F', 0x0, r3) 2m50.302599716s ago: executing program 8 (id=3908): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}}, @NFT_MSG_NEWFLOWTABLE={0x54, 0x16, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffff8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x14c7da0b}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x8084) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c00028008000100010000"], 0x74}}, 0x24005000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xffff, 0xffff}, {0xfff3, 0x6}}}, 0x24}}, 0x8040) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m33.933448925s ago: executing program 37 (id=3908): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}}, @NFT_MSG_NEWFLOWTABLE={0x54, 0x16, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffff8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x14c7da0b}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x8084) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c00028008000100010000"], 0x74}}, 0x24005000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xffff, 0xffff}, {0xfff3, 0x6}}}, 0x24}}, 0x8040) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m19.76224385s ago: executing program 7 (id=3946): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005500)={0x1c, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x1, 0x7c}, [@nested={0x4, 0x145}, @nested={0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) 2m19.511205339s ago: executing program 7 (id=3947): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_io_uring_setup(0xa0, &(0x7f0000000100)={0x0, 0x200089bd, 0x80, 0x1, 0x385}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x40, 0x2007, @fd, 0xc000000, &(0x7f00000000c0), 0x0, 0x1e}) io_uring_enter(r4, 0x32dc, 0x0, 0xe, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m18.303943086s ago: executing program 7 (id=3949): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x2, 0x80805, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fanotify_init(0xf00, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) lremovexattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=@known='trusted.overlay.metacopy\x00') sendmsg$IPSET_CMD_TYPE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x34, 0xd, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000084) 2m16.281903838s ago: executing program 7 (id=3952): mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0xffffffff) r0 = syz_io_uring_setup(0x3d1a, &(0x7f0000000480)={0x0, 0x1817, 0x1, 0x1}, &(0x7f0000000080), &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000000)='X', 0x1, 0x24008010, &(0x7f000005ffe4)={0xa, 0x0, 0x1, @local, 0x3}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x0, 0xfc, 0xfe, 0x3, 0x0, 0x8, 0xb, 0x0, 0x0, 0xb0, 0xe, 0x0, 0x1, 0x2}, 0xe) shutdown(r2, 0x1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) io_uring_enter(r0, 0x0, 0x235c, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000140)=[0x0, 0x7fff], 0x2) 2m13.521277714s ago: executing program 7 (id=3960): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_open_dev$media(&(0x7f0000000040), 0x4, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r5, 0x0, 0x0}) close_range(r3, 0xffffffffffffffff, 0x0) 2m12.077206096s ago: executing program 7 (id=3962): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x54, 0x16, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffff8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'ipvlan0\x00'}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xdc}, 0x1, 0x0, 0x0, 0x10}, 0x8084) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002"], 0x74}}, 0x24005000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xffff, 0xffff}, {0xfff3, 0x6}}}, 0x24}}, 0x8040) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m55.700405883s ago: executing program 38 (id=3962): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x54, 0x16, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffff8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'ipvlan0\x00'}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xdc}, 0x1, 0x0, 0x0, 0x10}, 0x8084) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002"], 0x74}}, 0x24005000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xffff, 0xffff}, {0xfff3, 0x6}}}, 0x24}}, 0x8040) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 28.399918552s ago: executing program 1 (id=4079): r0 = socket$kcm(0x11, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000008b000000000000000000ef9400000000000000"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) fcntl$setlease(r5, 0x400, 0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$setlease(r1, 0x400, 0x1) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r6, 0x4c80, 0x7000000) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000500)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000580)="02042712ea0e0000000000001eafbcea06e105000000000000001104ee1606d4b8bf4a8207f0ffff74c43824cee8440000", 0x31}, {&(0x7f0000000100)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f58551c3091cb88d3b", 0xf55}, {&(0x7f0000000080)="088d85d1f4f8220aee8de7932b326f8a3164ae439862807a1589836c736d2341f7", 0x21}, {&(0x7f0000000040)="df3b46a1330000000000000000000000000000f1", 0x14}, {&(0x7f00000005c0)="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", 0xe8f}, {&(0x7f00000033c0)="d6d038091fcf458c47fa6bd5a8edbf8f968178124964b4b012f8047c9716eb31", 0x20}], 0x6}, 0x40000) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000240)={0x3ff, 0x8, [0x9, 0x2, 0x33, 0x8], &(0x7f0000000180)=[0x0]}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) 24.804117416s ago: executing program 1 (id=4082): r0 = socket$kcm(0x11, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000008b000000000000000000ef9400000000000000"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) fcntl$setlease(r5, 0x400, 0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$setlease(r1, 0x400, 0x1) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0x7000000) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000500)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000580)="02042712ea0e0000000000001eafbcea06e105000000000000001104ee1606d4b8bf4a8207f0ffff74c43824cee8440000", 0x31}, {&(0x7f0000000100)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f58551c3091cb88d3b", 0xf55}, {&(0x7f0000000080)="088d85d1f4f8220aee8de7932b326f8a3164ae439862807a1589836c736d2341f7", 0x21}, {&(0x7f0000000040)="df3b46a1330000000000000000000000000000f1", 0x14}, {&(0x7f00000005c0)="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", 0xe8f}, {&(0x7f00000033c0)="d6d038091fcf458c47fa6bd5a8edbf8f968178124964b4b012f8047c9716eb31", 0x20}], 0x6}, 0x40000) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000240)={0x3ff, 0x8, [0x9, 0x2, 0x33, 0x8], &(0x7f0000000180)=[0x0]}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) 22.882491059s ago: executing program 1 (id=4085): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0x100000, 0x2}}, "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", "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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20.754058887s ago: executing program 1 (id=4087): syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) listen(0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000921ad3f73035b490100000006d938049b05ad4319a9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000840)={r3, 0x0, 0x0}, 0x20) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002440), 0x2400, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xcb) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='rose0\x00', 0x10) openat$sndseq(0xffffffffffffff9c, 0x0, 0x600000) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000880)=ANY=[@ANYBLOB, @ANYRES8=r5, @ANYRESDEC=r3], 0x232) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="01000000000000000000070000000c000180060005004e2100000800040003000000dcca14bc7dcf81c9952f8e79963e6ba015f659dec6eeae88b5766fa6011134c55b057f82cc83eddcd18c79a55b9f8e5024a1495b207bed465926bab0ebdd1755e3444430023d2e3b5f79d4a91841ecf2128ffc752161edaeb087aabc7a6d74a77bcbe5ef7294244533564cd5d3627a1d4650629bea26735f00338ff28c54e8b97a6d8477151c254675e9a5767aa8de1f6f592207f1f9b879922ad13e213882462622083e9bb8995e54dd04613452d3056f7c49666111c0dee5d75ac44389b68a47302b086837e43212ba55ea3452fa2f638557"], 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x80) 18.673071646s ago: executing program 1 (id=4088): accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00', 0x7) r1 = socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x101, 0x1}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r2}, @flat=@handle={0x73682a85, 0xb, 0x2}, @flat=@handle={0x73682a85, 0x200, 0x8}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000280)=0x8) socket$inet6_sctp(0xa, 0x1, 0x84) 16.360602493s ago: executing program 1 (id=4090): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) bind$tipc(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r2) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000040), 0x2, 0x0) sendfile(r3, r3, 0x0, 0x8000002) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x8, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000001c0)=0x1, 0x4) writev(r4, &(0x7f0000001780)=[{&(0x7f00000006c0)="ba", 0x1}], 0x1) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x48080, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) 4.35698521s ago: executing program 4 (id=4103): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x180}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, 0x0, 0x68642, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r5, 0x400, 0x1) fremovexattr(r5, &(0x7f0000000040)=@known='system.posix_acl_default\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000001c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000400)=[0x0], &(0x7f0000000280), 0x1, r8}) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f00000000c0)=[r8], &(0x7f0000000280), &(0x7f0000000300)=[r9], &(0x7f0000000180), 0x0, 0x2000}) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') 2.996270762s ago: executing program 4 (id=4104): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0x100000, 0x2}}, "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", "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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2.718286879s ago: executing program 4 (id=4105): accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r1 = socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x101, 0x1}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r2}, @flat=@handle={0x73682a85, 0xb, 0x2}, @flat=@handle={0x73682a85, 0x200, 0x8}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000280)=0x8) socket$inet6_sctp(0xa, 0x1, 0x84) 1.56007782s ago: executing program 4 (id=4106): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1.429760239s ago: executing program 4 (id=4107): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000180)="a70b618ba2d865c5", 0x5, 0x0, 0xff}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) modify_ldt$write2(0x11, 0x0, 0x0) modify_ldt$read(0x0, &(0x7f0000000280)=""/66, 0x42) fcntl$getown(r2, 0x9) lseek(0xffffffffffffffff, 0x201, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r3, 0xc0040d07, &(0x7f0000000040)=0x121) openat$comedi(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) io_setup(0x81, &(0x7f0000000180)=0x0) io_submit(r4, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0xffa0, &(0x7f0000000380)}, &(0x7f0000000180)=0x10) syz_usb_connect(0x6, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1b29ed13cc4cc6f650a9fcfb", @ANYRES8=r5, @ANYRES8=0x0, @ANYRES32=r5, @ANYRES64, @ANYBLOB], 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 649.135162ms ago: executing program 39 (id=4090): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) bind$tipc(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r2) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000040), 0x2, 0x0) sendfile(r3, r3, 0x0, 0x8000002) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x8, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000001c0)=0x1, 0x4) writev(r4, &(0x7f0000001780)=[{&(0x7f00000006c0)="ba", 0x1}], 0x1) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x48080, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) 0s ago: executing program 4 (id=4109): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r0, 0x400, 0x1) fremovexattr(r0, &(0x7f0000000040)=@known='system.posix_acl_default\x00') kernel console output (not intermixed with test programs): 1465.568666][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1465.568987][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1465.569244][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1465.569536][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1465.569820][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1465.570079][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1465.570352][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1465.570613][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1465.570901][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1465.571166][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1465.571485][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1465.571764][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1465.572031][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1465.572304][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1465.572550][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1465.572650][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1465.572934][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1465.573227][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1465.573507][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1465.573783][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1465.574074][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1465.574347][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1465.574653][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1465.574931][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1465.575263][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1465.575533][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1465.575807][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1465.576113][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1465.576383][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1465.576645][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1465.576925][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1465.577188][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1465.577488][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1465.577750][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1465.578041][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1465.578310][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1465.578586][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1465.578874][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1465.579133][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1465.579394][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1465.579684][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1465.579954][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1465.580212][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1465.580477][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1465.580735][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1465.581046][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1465.581297][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1465.581556][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1465.581821][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1465.583157][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1465.583448][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1465.583748][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1465.584036][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1465.584366][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1465.584634][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1465.584942][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1465.585236][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1465.585508][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1465.585774][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1465.586011][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.648884][T17656] loop2: detected capacity change from 0 to 7 [ 1466.653783][T17656] Dev loop2: unable to read RDB block 7 [ 1466.653833][T17656] loop2: unable to read partition table [ 1466.654061][T17656] loop2: partition table beyond EOD, truncated [ 1466.654082][T17656] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1466.825346][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.825443][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.825518][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.825596][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.825669][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.825747][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.825824][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.825924][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.826010][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.826087][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.826164][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.826241][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.826318][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.826395][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.826471][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.826548][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.826625][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.826702][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.826782][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.826883][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.826962][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.827048][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.827126][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.827204][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.827283][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.827361][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.827439][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.827514][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.827588][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.827663][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.827739][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.827835][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.827911][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.827995][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.828073][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.828153][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.828227][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.828305][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.828383][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.828463][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.828546][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.828633][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.828711][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.828813][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.828891][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.828968][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.829056][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.829134][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.829212][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.829289][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.829378][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.829477][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.829591][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.829695][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.829799][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.829939][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.830056][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.830161][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.830264][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.830371][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.830475][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.830577][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.830678][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.830780][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.830886][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.830999][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.831101][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.831227][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.831334][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.831439][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.831543][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.831652][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.831752][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.831853][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.831952][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.832070][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.832171][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.832280][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.832387][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.832568][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.832672][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.832772][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.832875][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.832986][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.833094][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.833200][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.833306][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.833413][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.833519][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.833624][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.833730][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.833864][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.833976][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.834109][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.834245][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.834356][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.834467][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.834579][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.834694][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.834802][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.834908][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.835020][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.835127][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.835233][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.835375][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.835483][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.835589][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.835695][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.835803][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.835908][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.836021][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.836127][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.836235][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.836343][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.836450][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.836556][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.836682][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.836687][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059f0dc00: rx timeout, send abort [ 1466.836788][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.836891][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.842618][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.842763][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.842870][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.842980][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.843082][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.843184][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.843286][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.843392][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.843491][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.843594][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.843673][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.843753][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.843829][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.843907][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.843991][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.844115][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.844192][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.844271][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.844347][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.844425][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.844502][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.844604][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.844686][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.844767][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.844845][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.844921][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.845016][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.845093][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.845168][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.845245][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.845319][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.845393][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.845468][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.845564][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.845639][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.845713][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.845797][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.845872][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.845948][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.846030][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.846107][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.846183][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.846274][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.846371][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.846471][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.846600][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.846704][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.846803][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.846908][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.847021][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.847126][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.847233][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.847340][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.847444][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.847544][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.847651][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.847757][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.847890][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.848005][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.848113][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.848218][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.848324][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.848430][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.848530][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.848663][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.848771][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.848878][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.848992][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.849098][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.849232][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.849339][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.849444][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.849549][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.849654][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.849761][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.849860][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.849958][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.850070][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.850175][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.850280][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.850388][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.850523][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.850630][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.850736][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.850839][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.850939][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.851054][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.851161][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.851267][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.851374][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.851480][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.851592][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.851702][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.851836][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.851938][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.852054][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.852160][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.852265][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.852370][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.852526][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.852634][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.852744][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.852851][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.852958][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.853071][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.853205][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.853312][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.853418][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.853524][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.853629][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.853734][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.853840][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.853941][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.854055][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.854161][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.854268][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.854374][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.854518][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.854626][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.854734][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.854841][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.854947][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.855069][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.855176][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.855284][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.855391][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.855498][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.855610][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1466.914465][T17592] chnl_net:caif_netlink_parms(): no params data found [ 1467.336830][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059f0dc00: abort rx timeout. Force session deactivation [ 1467.382670][ T9073] Bluetooth: hci5: command tx timeout [ 1470.481746][ C0] vcan0: j1939_tp_rxtimer: 0xffff888036077400: rx timeout, send abort [ 1470.981849][ C0] vcan0: j1939_tp_rxtimer: 0xffff888036077400: abort rx timeout. Force session deactivation [ 1471.405871][T17412] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1471.405912][T17412] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1471.454117][T17683] fuse: Bad value for 'fd' [ 1471.588213][T17690] loop2: detected capacity change from 0 to 7 [ 1471.600506][T17690] Dev loop2: unable to read RDB block 7 [ 1471.600567][T17690] loop2: unable to read partition table [ 1471.600733][T17690] loop2: partition table beyond EOD, truncated [ 1471.600747][T17690] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1472.931638][T17412] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1472.931680][T17412] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1472.998425][T17704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3403'. [ 1473.014012][T17592] bridge0: port 1(bridge_slave_0) entered blocking state [ 1473.014145][T17592] bridge0: port 1(bridge_slave_0) entered disabled state [ 1473.014386][T17592] bridge_slave_0: entered allmulticast mode [ 1473.064141][T17592] bridge_slave_0: entered promiscuous mode [ 1473.094755][T17592] bridge0: port 2(bridge_slave_1) entered blocking state [ 1473.094909][T17592] bridge0: port 2(bridge_slave_1) entered disabled state [ 1473.095053][T17592] bridge_slave_1: entered allmulticast mode [ 1473.097057][T17592] bridge_slave_1: entered promiscuous mode [ 1474.445073][T17712] netlink: 'syz.4.3405': attribute type 4 has an invalid length. [ 1474.835061][T17715] siw: device registration error -23 [ 1475.993261][T17412] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1475.993291][T17412] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1476.427042][T12677] Bluetooth: hci1: command 0x0406 tx timeout [ 1478.458712][T17592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1478.496308][T17733] loop2: detected capacity change from 0 to 7 [ 1478.522934][T17729] Dev loop2: unable to read RDB block 7 [ 1478.522983][T17729] loop2: unable to read partition table [ 1478.523234][T17729] loop2: partition table beyond EOD, truncated [ 1478.526531][T17733] Dev loop2: unable to read RDB block 7 [ 1478.526578][T17733] loop2: unable to read partition table [ 1478.526813][T17733] loop2: partition table beyond EOD, truncated [ 1478.526833][T17733] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1478.740143][T17592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1478.969472][T17740] netlink: 'syz.7.3411': attribute type 2 has an invalid length. [ 1479.524212][T17752] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3413'. [ 1479.532189][T17592] team0: Port device team_slave_0 added [ 1479.787559][T17592] team0: Port device team_slave_1 added [ 1481.115218][T17592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1481.115238][T17592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1481.115272][T17592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1481.266368][T17592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1481.266388][T17592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1481.266419][T17592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1482.008062][T17783] loop2: detected capacity change from 0 to 7 [ 1482.044092][T17783] Dev loop2: unable to read RDB block 7 [ 1482.044133][T17783] loop2: unable to read partition table [ 1482.044289][T17783] loop2: partition table beyond EOD, truncated [ 1482.045503][T17783] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1482.217268][T17592] hsr_slave_0: entered promiscuous mode [ 1482.220403][T17592] hsr_slave_1: entered promiscuous mode [ 1482.248751][T17592] debugfs: 'hsr0' already exists in 'hsr' [ 1482.248782][T17592] Cannot create hsr debugfs directory [ 1482.523037][T17412] bridge_slave_1: left allmulticast mode [ 1482.523068][T17412] bridge_slave_1: left promiscuous mode [ 1482.523333][T17412] bridge0: port 2(bridge_slave_1) entered disabled state [ 1485.121768][T17412] bridge_slave_0: left allmulticast mode [ 1485.121793][T17412] bridge_slave_0: left promiscuous mode [ 1485.121990][T17412] bridge0: port 1(bridge_slave_0) entered disabled state [ 1487.086729][T12677] Bluetooth: hci4: command 0x0406 tx timeout [ 1487.612837][T17798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3423'. [ 1488.226818][T17801] netlink: 'syz.4.3426': attribute type 16 has an invalid length. [ 1488.372650][ T5859] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1488.523461][ T5859] usb 9-1: Using ep0 maxpacket: 8 [ 1488.525965][ T5859] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1488.527462][ T5859] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 1488.527499][ T5859] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 1488.528116][ T5859] usb 9-1: language id specifier not provided by device, defaulting to English [ 1488.530130][ T5859] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1488.530161][ T5859] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1488.530184][ T5859] usb 9-1: Product: syz [ 1488.530207][ T5859] usb 9-1: Manufacturer: å±›ë—â±é’†çšÃ‰î°ë”矚鰾娔셢莕ῗൡ蘥뜴㤊䤎眑鬤陃ꦂ缳á¼ïŸ•ã¡ä‡Œë®£è¸›ç£¬æ›£ãœ›â‘ [ 1488.530225][ T5859] usb 9-1: SerialNumber: syz [ 1488.878735][ T5859] cdc_ncm 9-1:1.0: bind() failure [ 1488.897014][ T5859] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 1488.897059][ T5859] cdc_ncm 9-1:1.1: bind() failure [ 1488.946500][ T5859] usb 9-1: USB disconnect, device number 3 [ 1489.652662][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1489.655507][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1489.883574][T17412] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1489.943451][T17412] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1490.004012][T17412] bond0 (unregistering): (slave team0): Releasing backup interface [ 1490.076390][T17412] bond0 (unregistering): Released all slaves [ 1492.374833][T17412] bond1 (unregistering): Released all slaves [ 1494.575759][T17412] bond2 (unregistering): Released all slaves [ 1496.233721][T17835] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3435'. [ 1497.802756][T17412] hsr_slave_0: left promiscuous mode [ 1497.825830][T17412] hsr_slave_1: left promiscuous mode [ 1497.826814][T17412] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1498.200483][T17412] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1501.284975][T17412] team_slave_1 (unregistering): left promiscuous mode [ 1501.313505][T17412] team0 (unregistering): Port device team_slave_1 removed [ 1501.584479][T17412] team_slave_0 (unregistering): left promiscuous mode [ 1501.605017][T17412] team0 (unregistering): Port device team_slave_0 removed [ 1504.768552][T17871] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1504.800953][T17874] ip6tnl1: entered promiscuous mode [ 1504.800981][T17874] ip6tnl1: entered allmulticast mode [ 1505.164380][T17889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3447'. [ 1506.498335][T17592] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1506.659535][T17592] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1508.045119][T17592] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1508.266236][T17592] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1508.707564][T17930] ip6tnl1: entered promiscuous mode [ 1508.707593][T17930] ip6tnl1: entered allmulticast mode [ 1508.977178][T17592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1510.119504][T17592] 8021q: adding VLAN 0 to HW filter on device team0 [ 1510.151489][T17390] bridge0: port 1(bridge_slave_0) entered blocking state [ 1510.151738][T17390] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1510.184442][T17390] bridge0: port 2(bridge_slave_1) entered blocking state [ 1510.184619][T17390] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1510.322977][T17943] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3458'. [ 1510.488549][T17946] loop2: detected capacity change from 0 to 7 [ 1510.524797][T17876] Dev loop2: unable to read RDB block 7 [ 1510.524856][T17876] loop2: unable to read partition table [ 1510.525115][T17876] loop2: partition table beyond EOD, truncated [ 1510.529095][T17946] Dev loop2: unable to read RDB block 7 [ 1510.529153][T17946] loop2: unable to read partition table [ 1510.529400][T17946] loop2: partition table beyond EOD, truncated [ 1510.529422][T17946] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1511.349291][T17960] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3462'. [ 1511.592907][T17965] lo speed is unknown, defaulting to 1000 [ 1511.593239][T17965] lo speed is unknown, defaulting to 1000 [ 1511.594794][T17965] lo speed is unknown, defaulting to 1000 [ 1511.610453][T17965] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1512.190706][T17965] lo speed is unknown, defaulting to 1000 [ 1512.274612][T17965] lo speed is unknown, defaulting to 1000 [ 1512.322368][T17965] lo speed is unknown, defaulting to 1000 [ 1512.369791][T17965] lo speed is unknown, defaulting to 1000 [ 1512.379840][T17965] lo speed is unknown, defaulting to 1000 [ 1512.776466][T17592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1514.422762][T17938] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1514.625124][T17938] usb 9-1: Using ep0 maxpacket: 8 [ 1514.628284][T17938] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1514.629866][T17938] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 1514.629903][T17938] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 1514.630766][T17938] usb 9-1: language id specifier not provided by device, defaulting to English [ 1514.633775][T17938] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1514.633808][T17938] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1514.633832][T17938] usb 9-1: Product: syz [ 1514.633848][T17938] usb 9-1: Manufacturer: å±›ë—â±é’†çšÃ‰î°ë”矚鰾娔셢莕ῗൡ蘥뜴㤊䤎眑鬤陃ꦂ缳á¼ïŸ•ã¡ä‡Œë®£è¸›ç£¬æ›£ãœ›â‘ [ 1514.633872][T17938] usb 9-1: SerialNumber: syz [ 1515.114905][T17938] cdc_ncm 9-1:1.0: bind() failure [ 1516.188957][T17938] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 1516.189010][T17938] cdc_ncm 9-1:1.1: bind() failure [ 1516.334098][T17938] usb 9-1: USB disconnect, device number 4 [ 1517.327729][T17592] veth0_vlan: entered promiscuous mode [ 1517.452962][T17592] veth1_vlan: entered promiscuous mode [ 1517.508507][T17592] veth0_macvtap: entered promiscuous mode [ 1517.673171][T17592] veth1_macvtap: entered promiscuous mode [ 1517.793510][T17592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1517.874666][T18020] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3472'. [ 1518.361856][T12677] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1519.416960][T12677] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1519.418473][T12677] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1519.419680][T12677] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1519.422860][T12677] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1519.829632][T18025] lo speed is unknown, defaulting to 1000 [ 1522.011839][ T9073] Bluetooth: hci0: command tx timeout [ 1523.885104][T18069] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3482'. [ 1524.236251][ T9902] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1524.294874][ T9073] Bluetooth: hci0: command tx timeout [ 1525.040106][ T9902] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1525.040196][ T9902] usb 9-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1525.045352][ T9902] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a2, bcdDevice= 0.40 [ 1525.045387][ T9902] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1525.045410][ T9902] usb 9-1: Product: syz [ 1525.045428][ T9902] usb 9-1: Manufacturer: syz [ 1525.045444][ T9902] usb 9-1: SerialNumber: syz [ 1525.151868][ T9902] cdc_subset 9-1:1.0: probe with driver cdc_subset failed with error -22 [ 1525.171022][ T9902] cdc_ncm 9-1:1.0: NCM or ECM functional descriptors missing [ 1525.171072][ T9902] cdc_ncm 9-1:1.0: bind() failure [ 1525.214766][ T9902] cdc_subset 9-1:1.1: probe with driver cdc_subset failed with error -22 [ 1525.220470][ T9902] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 1525.220520][ T9902] cdc_ncm 9-1:1.1: bind() failure [ 1526.501869][ T9073] Bluetooth: hci0: command tx timeout [ 1526.603255][T18025] chnl_net:caif_netlink_parms(): no params data found [ 1526.705757][ T9902] usb 9-1: USB disconnect, device number 5 [ 1526.834333][T18090] loop2: detected capacity change from 0 to 7 [ 1527.167240][T17876] Dev loop2: unable to read RDB block 7 [ 1527.167297][T17876] loop2: unable to read partition table [ 1527.167545][T17876] loop2: partition table beyond EOD, truncated [ 1527.169672][T18090] Dev loop2: unable to read RDB block 7 [ 1527.169719][T18090] loop2: unable to read partition table [ 1527.169947][T18090] loop2: partition table beyond EOD, truncated [ 1527.169968][T18090] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1528.679525][ T9073] Bluetooth: hci0: command tx timeout [ 1529.729993][T18106] siw: device registration error -23 [ 1534.887418][T18127] netlink: 84 bytes leftover after parsing attributes in process `syz.7.3497'. [ 1535.818197][T18141] netlink: 'syz.7.3501': attribute type 4 has an invalid length. [ 1536.255626][T18145] siw: device registration error -23 [ 1539.133358][T18173] netlink: 84 bytes leftover after parsing attributes in process `syz.8.3510'. [ 1539.178252][T18025] bridge0: port 1(bridge_slave_0) entered blocking state [ 1539.178471][T18025] bridge0: port 1(bridge_slave_0) entered disabled state [ 1539.178708][T18025] bridge_slave_0: entered allmulticast mode [ 1539.181491][T18025] bridge_slave_0: entered promiscuous mode [ 1539.228755][T18025] bridge0: port 2(bridge_slave_1) entered blocking state [ 1539.228980][T18025] bridge0: port 2(bridge_slave_1) entered disabled state [ 1539.231922][T18025] bridge_slave_1: entered allmulticast mode [ 1539.273408][T18025] bridge_slave_1: entered promiscuous mode [ 1540.080632][ T9902] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1540.252626][ T9902] usb 5-1: Using ep0 maxpacket: 16 [ 1540.259685][ T9902] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1540.259724][ T9902] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1540.259742][ T9902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1540.422124][ T9902] usb 5-1: config 0 descriptor?? [ 1540.962940][T18025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1540.983935][ T9902] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 1540.983965][ T9902] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 1540.983985][ T9902] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 1540.984005][ T9902] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 1540.984024][ T9902] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 1540.984679][ T9902] mcp2221 0003:04D8:00DD.0002: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 1541.017849][T18025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1541.141568][ C1] usb 5-1: input irq status -75 received [ 1541.142057][T18190] netlink: 'syz.8.3514': attribute type 4 has an invalid length. [ 1541.505217][ T9902] usb 5-1: USB disconnect, device number 16 [ 1547.120613][T18025] team0: Port device team_slave_0 added [ 1547.515986][T18025] team0: Port device team_slave_1 added [ 1549.047455][T18025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1549.047476][T18025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1549.047508][T18025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1549.062870][T18025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1549.062890][T18025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1549.062923][T18025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1549.592840][ T6243] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1549.613391][T18025] hsr_slave_0: entered promiscuous mode [ 1549.633521][T18025] hsr_slave_1: entered promiscuous mode [ 1549.634488][T18025] debugfs: 'hsr0' already exists in 'hsr' [ 1549.634513][T18025] Cannot create hsr debugfs directory [ 1549.726101][T18245] netlink: 'syz.7.3529': attribute type 4 has an invalid length. [ 1549.752657][ T6243] usb 2-1: Using ep0 maxpacket: 16 [ 1549.760313][ T6243] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1549.760345][ T6243] usb 2-1: config 1 has no interface number 1 [ 1549.760395][ T6243] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1549.760419][ T6243] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1549.760466][ T6243] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1550.073550][ T6243] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1550.073584][ T6243] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1550.073607][ T6243] usb 2-1: Product: syz [ 1550.073624][ T6243] usb 2-1: Manufacturer: syz [ 1550.073635][ T6243] usb 2-1: SerialNumber: syz [ 1550.214702][T18247] siw: device registration error -23 [ 1551.098334][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.098410][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1551.828020][ T6243] usb 2-1: failed to enable PITCH for EP 0x82 [ 1551.828584][ T6243] usb 2-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 1552.571825][ T6243] usb 2-1: USB disconnect, device number 34 [ 1557.571173][T18291] loop2: detected capacity change from 0 to 7 [ 1557.578889][T18291] Dev loop2: unable to read RDB block 7 [ 1557.578946][T18291] loop2: unable to read partition table [ 1557.579182][T18291] loop2: partition table beyond EOD, truncated [ 1557.600418][T18291] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1557.658456][T16388] bridge_slave_1: left allmulticast mode [ 1557.658488][T16388] bridge_slave_1: left promiscuous mode [ 1557.658762][T16388] bridge0: port 2(bridge_slave_1) entered disabled state [ 1557.768978][T16388] bridge_slave_0: left allmulticast mode [ 1557.769011][T16388] bridge_slave_0: left promiscuous mode [ 1557.769286][T16388] bridge0: port 1(bridge_slave_0) entered disabled state [ 1560.072669][T17938] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1560.228809][T17938] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1560.228906][T17938] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1560.259044][T17938] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a2, bcdDevice= 0.40 [ 1560.259077][T17938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1560.259100][T17938] usb 5-1: Product: syz [ 1560.259116][T17938] usb 5-1: Manufacturer: syz [ 1560.259143][T17938] usb 5-1: SerialNumber: syz [ 1560.446232][T17938] cdc_subset 5-1:1.0: probe with driver cdc_subset failed with error -22 [ 1560.447466][T17938] cdc_ncm 5-1:1.0: NCM or ECM functional descriptors missing [ 1560.447513][T17938] cdc_ncm 5-1:1.0: bind() failure [ 1560.516823][T17938] cdc_subset 5-1:1.1: probe with driver cdc_subset failed with error -22 [ 1560.518942][T17938] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1560.518990][T17938] cdc_ncm 5-1:1.1: bind() failure [ 1560.704983][T12860] usb 5-1: USB disconnect, device number 17 [ 1564.303419][T18343] loop2: detected capacity change from 0 to 7 [ 1564.309730][T18343] Dev loop2: unable to read RDB block 7 [ 1564.309776][T18343] loop2: unable to read partition table [ 1564.309982][T18343] loop2: partition table beyond EOD, truncated [ 1564.310000][T18343] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1566.801204][T16388] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1567.428133][T16388] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1567.496857][T16388] bond0 (unregistering): Released all slaves [ 1573.260461][T18376] netlink: 'syz.1.3555': attribute type 4 has an invalid length. [ 1573.673185][T18379] siw: device registration error -23 [ 1574.902269][T18382] loop2: detected capacity change from 0 to 7 [ 1574.921999][T18382] Dev loop2: unable to read RDB block 7 [ 1574.922037][T18382] loop2: AHDI p1 p2 p3 [ 1574.922057][T18382] loop2: partition table partially beyond EOD, truncated [ 1574.922232][T18382] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1574.922247][T18382] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1576.606195][T18383] netlink: 'syz.7.3557': attribute type 4 has an invalid length. [ 1576.858571][T18383] siw: device registration error -23 [ 1577.133207][T18396] netlink: 'syz.4.3549': attribute type 4 has an invalid length. [ 1577.472701][T16388] hsr_slave_0: left promiscuous mode [ 1577.600828][T18400] siw: device registration error -23 [ 1578.462231][T16388] hsr_slave_1: left promiscuous mode [ 1578.563479][T16388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1578.563506][T16388] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1578.623507][T16388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1579.088393][T16388] veth1_macvtap: left promiscuous mode [ 1579.088502][T16388] veth0_macvtap: left promiscuous mode [ 1579.088790][T16388] veth1_vlan: left promiscuous mode [ 1579.088981][T16388] veth0_vlan: left promiscuous mode [ 1580.470636][T12677] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1580.507692][T12677] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1580.511015][T12677] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1580.549479][T12677] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1580.551852][T12677] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1581.682654][T17344] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1581.832759][T17344] usb 2-1: Using ep0 maxpacket: 16 [ 1581.852877][T17344] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1581.852932][T17344] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1581.852949][T17344] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1581.905420][T17344] usb 2-1: config 0 descriptor?? [ 1582.662917][ T9073] Bluetooth: hci5: command tx timeout [ 1582.790345][T17344] usbhid 2-1:0.0: can't add hid device: -71 [ 1582.790480][T17344] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1582.814091][T17344] usb 2-1: USB disconnect, device number 35 [ 1584.755955][ T9073] Bluetooth: hci5: command tx timeout [ 1585.515405][T16388] team0 (unregistering): Port device team_slave_1 removed [ 1585.745116][T16388] team0 (unregistering): Port device team_slave_0 removed [ 1586.822869][ T9073] Bluetooth: hci5: command tx timeout [ 1588.448666][T18441] syzkaller0: entered promiscuous mode [ 1588.448695][T18441] syzkaller0: entered allmulticast mode [ 1588.537483][T18457] loop2: detected capacity change from 0 to 7 [ 1589.866163][ T9073] Bluetooth: hci5: command tx timeout [ 1589.916560][T18457] Dev loop2: unable to read RDB block 7 [ 1589.916601][T18457] loop2: AHDI p1 p2 p3 [ 1589.916634][T18457] loop2: partition table partially beyond EOD, truncated [ 1589.916887][T18457] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1589.916908][T18457] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1592.186788][T18481] netlink: 'syz.7.3576': attribute type 4 has an invalid length. [ 1592.232955][T18419] lo speed is unknown, defaulting to 1000 [ 1592.630483][T18484] siw: device registration error -23 [ 1593.914846][T18488] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3578'. [ 1593.914873][T18488] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3578'. [ 1596.476242][T18509] netlink: 'syz.7.3581': attribute type 4 has an invalid length. [ 1596.844557][T18512] siw: device registration error -23 [ 1598.213460][T18419] chnl_net:caif_netlink_parms(): no params data found [ 1599.786513][T18419] bridge0: port 1(bridge_slave_0) entered blocking state [ 1599.786780][T18419] bridge0: port 1(bridge_slave_0) entered disabled state [ 1599.787047][T18419] bridge_slave_0: entered allmulticast mode [ 1599.790575][T18419] bridge_slave_0: entered promiscuous mode [ 1599.838676][T18419] bridge0: port 2(bridge_slave_1) entered blocking state [ 1599.839170][T18419] bridge0: port 2(bridge_slave_1) entered disabled state [ 1599.839422][T18419] bridge_slave_1: entered allmulticast mode [ 1599.869801][T18419] bridge_slave_1: entered promiscuous mode [ 1600.135044][T15961] bridge_slave_1: left allmulticast mode [ 1600.135076][T15961] bridge_slave_1: left promiscuous mode [ 1600.135473][T15961] bridge0: port 2(bridge_slave_1) entered disabled state [ 1600.306812][T18551] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3582'. [ 1600.384583][T18551] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3582'. [ 1602.608107][T15961] bridge_slave_0: left allmulticast mode [ 1602.608139][T15961] bridge_slave_0: left promiscuous mode [ 1602.608408][T15961] bridge0: port 1(bridge_slave_0) entered disabled state [ 1606.725166][T15961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1609.054625][T15961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1609.154773][T15961] bond0 (unregistering): Released all slaves [ 1609.789479][T15961] hsr_slave_0: left promiscuous mode [ 1609.833210][T15961] hsr_slave_1: left promiscuous mode [ 1609.834248][T15961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1609.839794][T18599] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3602'. [ 1609.879466][T15961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1610.132925][ T5805] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 1610.285143][ T5805] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1610.285174][ T5805] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1610.285234][ T5805] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 1610.285281][ T5805] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1610.285307][ T5805] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1610.378418][T18602] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1610.407525][ T5805] hub 5-1:1.0: bad descriptor, ignoring hub [ 1610.407568][ T5805] hub 5-1:1.0: probe with driver hub failed with error -5 [ 1610.408306][ T5805] cdc_wdm 5-1:1.0: skipping garbage [ 1610.408318][ T5805] cdc_wdm 5-1:1.0: skipping garbage [ 1610.449234][ T5805] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1610.449261][ T5805] cdc_wdm 5-1:1.0: Unknown control protocol [ 1612.689960][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1612.690035][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1612.848281][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1612.848435][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1612.848751][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1612.848774][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1612.849014][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1612.849036][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1612.849272][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1612.849294][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1612.849529][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1612.849551][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1612.849782][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1612.849803][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1612.850034][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1612.850056][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1612.850285][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1612.850306][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1612.850537][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1612.850558][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1612.850794][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1612.850816][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1613.324760][T15961] team0 (unregistering): Port device team_slave_1 removed [ 1613.594574][T15961] team0 (unregistering): Port device team_slave_0 removed [ 1614.400593][T18419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1614.405233][T18599] syz_tun: refused to change device tx_queue_len [ 1614.427584][T18419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1614.761285][T18626] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3608'. [ 1614.907734][T18628] netlink: 'syz.1.3609': attribute type 4 has an invalid length. [ 1615.707137][T18626] syz_tun: refused to change device tx_queue_len [ 1615.742186][T18419] team0: Port device team_slave_0 added [ 1615.844981][T18638] siw: device registration error -23 [ 1616.258986][T18419] team0: Port device team_slave_1 added [ 1617.201472][ T7355] usb 5-1: USB disconnect, device number 18 [ 1617.272541][ T31] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 1617.435212][ T31] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1617.435243][ T31] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1617.435299][ T31] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 1617.435347][ T31] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1617.435374][ T31] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1617.519935][T18629] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1617.560286][ T31] hub 9-1:1.0: bad descriptor, ignoring hub [ 1617.560330][ T31] hub 9-1:1.0: probe with driver hub failed with error -5 [ 1617.575570][ T31] cdc_wdm 9-1:1.0: skipping garbage [ 1617.575633][ T31] cdc_wdm 9-1:1.0: skipping garbage [ 1617.656208][ T31] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 1617.656231][ T31] cdc_wdm 9-1:1.0: Unknown control protocol [ 1617.727341][T18419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1617.727358][T18419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1617.727383][T18419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1618.680347][T18419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1618.680361][T18419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1618.680384][T18419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1618.973722][ T5993] Bluetooth: Error in BCSP hdr checksum [ 1618.974148][ T31] usb 9-1: USB disconnect, device number 6 [ 1620.671742][ T9073] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1621.135453][T18419] hsr_slave_0: entered promiscuous mode [ 1621.166856][T18419] hsr_slave_1: entered promiscuous mode [ 1621.167741][T18419] debugfs: 'hsr0' already exists in 'hsr' [ 1621.167762][T18419] Cannot create hsr debugfs directory [ 1621.852772][T18686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3622'. [ 1621.893204][T18686] syz_tun: refused to change device tx_queue_len [ 1622.152576][T18222] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 1622.313173][T18222] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1622.313201][T18222] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1622.313248][T18222] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 1622.313288][T18222] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1622.313311][T18222] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1622.467287][T18686] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1622.494855][T18222] hub 5-1:1.0: bad descriptor, ignoring hub [ 1622.494897][T18222] hub 5-1:1.0: probe with driver hub failed with error -5 [ 1622.495910][T18222] cdc_wdm 5-1:1.0: skipping garbage [ 1622.495928][T18222] cdc_wdm 5-1:1.0: skipping garbage [ 1622.500840][T18222] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1622.500862][T18222] cdc_wdm 5-1:1.0: Unknown control protocol [ 1623.820014][ C0] wdm_int_callback: 903 callbacks suppressed [ 1623.820045][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1623.820063][ C0] wdm_int_callback: 903 callbacks suppressed [ 1623.820078][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1623.820330][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1623.820351][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1623.820581][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1623.820602][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1623.820834][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1623.820853][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1623.821069][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1623.821095][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1623.821321][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1623.821340][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1623.821578][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1623.821597][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1623.821819][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1623.821839][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1623.822073][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1623.822100][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1623.822324][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1623.822343][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1624.615923][T18419] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1624.745756][T18419] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1624.832569][T18222] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1624.937937][T18419] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1624.982851][T18222] usb 8-1: Using ep0 maxpacket: 8 [ 1624.989352][T18419] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1625.033707][T18222] usb 8-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1625.033742][T18222] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1625.033765][T18222] usb 8-1: Product: syz [ 1625.033781][T18222] usb 8-1: Manufacturer: syz [ 1625.033797][T18222] usb 8-1: SerialNumber: syz [ 1625.040749][T18222] usb 8-1: config 0 descriptor?? [ 1626.053837][T18222] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1626.053880][T18222] pctv452e: pctv452e_power_ctrl: 1 [ 1626.053880][T18222] [ 1626.053922][T18222] usb 8-1: selecting invalid altsetting 3 [ 1626.053937][T18222] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1626.053937][T18222] [ 1626.053953][T18222] dvb-usb: bulk message failed: -22 (5/0) [ 1626.058212][T18222] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1626.059827][T18222] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 1626.059888][T18222] usb 8-1: media controller created [ 1626.059943][T18222] dvb-usb: bulk message failed: -22 (8/0) [ 1626.059960][T18222] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 1626.060017][T18222] dvb-usb: MAC address reading failed. [ 1626.265323][T18222] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1626.341081][ T7355] usb 5-1: USB disconnect, device number 19 [ 1626.396395][T18222] DVB: Unable to find symbol stb0899_attach() [ 1626.396411][T18222] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 1626.502727][T18222] rc_core: IR keymap rc-tt-1500 not found [ 1626.502747][T18222] Registered IR keymap rc-empty [ 1626.504621][T18222] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0 [ 1626.511353][T18222] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0/input35 [ 1626.543379][T18704] dvb-usb: bulk message failed: -22 (7/0) [ 1626.543434][T18704] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 1626.579468][T18222] dvb-usb: schedule remote query interval to 100 msecs. [ 1626.579494][T18222] pctv452e: pctv452e_power_ctrl: 0 [ 1626.579494][T18222] [ 1626.579506][T18222] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 1626.609105][T18222] usb 8-1: USB disconnect, device number 14 [ 1627.394039][T18733] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3618'. [ 1627.459399][T18733] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3618'. [ 1629.653779][T18419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1629.670060][T16482] Bluetooth: Error in BCSP hdr checksum [ 1629.671596][T18222] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 1629.872095][T18419] 8021q: adding VLAN 0 to HW filter on device team0 [ 1629.962854][ T12] Bluetooth: Error in BCSP hdr checksum [ 1629.969973][T15962] bridge0: port 1(bridge_slave_0) entered blocking state [ 1629.970084][T15962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1630.090870][ T6819] bridge0: port 2(bridge_slave_1) entered blocking state [ 1630.090967][ T6819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1630.225661][T17259] Bluetooth: Error in BCSP hdr checksum [ 1630.509371][T18757] input: syz1 as /devices/virtual/input/input36 [ 1630.599586][T18760] netlink: 140 bytes leftover after parsing attributes in process `syz.8.3632'. [ 1630.623509][ T9073] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1642.613967][T12677] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1642.620012][T12677] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1642.621599][T12677] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1642.694066][T12677] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1642.698065][T12677] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1642.987935][T18796] lo speed is unknown, defaulting to 1000 [ 1644.823439][ T9073] Bluetooth: hci0: command tx timeout [ 1645.696983][T18818] input: syz1 as /devices/virtual/input/input37 [ 1646.125339][T18827] netlink: 'syz.8.3648': attribute type 4 has an invalid length. [ 1647.308420][ T9073] Bluetooth: hci0: command tx timeout [ 1649.459517][ T9073] Bluetooth: hci0: command tx timeout [ 1650.113103][T18846] loop2: detected capacity change from 0 to 7 [ 1650.115800][T18846] Dev loop2: unable to read RDB block 7 [ 1650.115839][T18846] loop2: AHDI p1 p2 p3 [ 1650.115872][T18846] loop2: partition table partially beyond EOD, truncated [ 1650.116167][T18846] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1650.116189][T18846] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1651.463300][ T9073] Bluetooth: hci0: command tx timeout [ 1651.605045][ T5805] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1651.777355][ T5805] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1651.777381][ T5805] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1651.777398][ T5805] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1651.777429][ T5805] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1651.777447][ T5805] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1651.781496][ T5805] usb 2-1: config 0 descriptor?? [ 1652.384135][ T5805] usbhid 2-1:0.0: can't add hid device: -71 [ 1652.384231][ T5805] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1652.420632][ T5805] usb 2-1: USB disconnect, device number 36 [ 1652.634341][T18876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3658'. [ 1652.692685][T18876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3658'. [ 1653.817374][T18796] chnl_net:caif_netlink_parms(): no params data found [ 1654.163177][ T5859] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1654.572064][T18887] sock: sock_set_timeout: `syz.1.3661' (pid 18887) tries to set negative timeout [ 1654.718991][T17938] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1655.423858][T17938] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1655.423898][T17938] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1655.423998][T17938] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1655.424025][T17938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1655.537751][T17938] usb 5-1: config 0 descriptor?? [ 1655.582859][ T5859] usb 8-1: device descriptor read/all, error -71 [ 1655.781357][T18892] loop2: detected capacity change from 0 to 7 [ 1655.798336][T18892] Dev loop2: unable to read RDB block 7 [ 1655.798373][T18892] loop2: AHDI p1 p2 p3 [ 1655.798407][T18892] loop2: partition table partially beyond EOD, truncated [ 1655.800399][T18892] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1655.800428][T18892] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1655.988126][T17938] usbhid 5-1:0.0: can't add hid device: -71 [ 1655.988262][T17938] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1655.995464][T17938] usb 5-1: USB disconnect, device number 20 [ 1656.292776][T18796] bridge0: port 1(bridge_slave_0) entered blocking state [ 1656.296150][T18796] bridge0: port 1(bridge_slave_0) entered disabled state [ 1656.296427][T18796] bridge_slave_0: entered allmulticast mode [ 1656.326341][T18796] bridge_slave_0: entered promiscuous mode [ 1656.673338][T18909] netlink: 140 bytes leftover after parsing attributes in process `syz.8.3666'. [ 1657.295677][T18796] bridge0: port 2(bridge_slave_1) entered blocking state [ 1657.296667][T18796] bridge0: port 2(bridge_slave_1) entered disabled state [ 1657.338890][T18796] bridge_slave_1: entered allmulticast mode [ 1657.696783][T18796] bridge_slave_1: entered promiscuous mode [ 1657.901756][T18915] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3671'. [ 1658.899238][T18915] syz_tun: refused to change device tx_queue_len [ 1659.201114][T18927] netlink: 'syz.8.3673': attribute type 4 has an invalid length. [ 1659.532861][ T5805] usb 8-1: new full-speed USB device number 17 using dummy_hcd [ 1659.539667][T18796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1660.526195][T18796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1664.106350][T18918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3670'. [ 1664.108849][T18918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3670'. [ 1664.410370][T18934] loop2: detected capacity change from 0 to 7 [ 1664.422813][T18934] Dev loop2: unable to read RDB block 7 [ 1664.422851][T18934] loop2: AHDI p1 p2 p3 [ 1664.422883][T18934] loop2: partition table partially beyond EOD, truncated [ 1664.423139][T18934] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1664.423160][T18934] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1666.849927][T17412] bridge_slave_1: left allmulticast mode [ 1666.849962][T17412] bridge_slave_1: left promiscuous mode [ 1666.851952][T17412] bridge0: port 2(bridge_slave_1) entered disabled state [ 1666.958853][T17412] bridge_slave_0: left allmulticast mode [ 1666.958894][T17412] bridge_slave_0: left promiscuous mode [ 1666.959143][T17412] bridge0: port 1(bridge_slave_0) entered disabled state [ 1667.159914][T18954] netlink: 'syz.7.3681': attribute type 4 has an invalid length. [ 1667.625517][T18959] siw: device registration error -23 [ 1670.390720][T18967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3684'. [ 1672.597554][ T5805] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 1673.973875][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1673.973956][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1675.716248][T18986] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3689'. [ 1675.762208][T18986] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3689'. [ 1676.826413][T17412] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1676.904050][T17412] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1676.954952][T17412] bond0 (unregistering): Released all slaves [ 1677.017801][T18796] team0: Port device team_slave_0 added [ 1677.052014][T18967] syz_tun: refused to change device tx_queue_len [ 1677.060999][T18796] team0: Port device team_slave_1 added [ 1677.163118][ T5805] usb 2-1: device descriptor read/all, error -71 [ 1679.061015][T18796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1679.061036][T18796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1679.061069][T18796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1681.132682][T17412] hsr_slave_0: left promiscuous mode [ 1681.452628][T17412] hsr_slave_1: left promiscuous mode [ 1681.453759][T17412] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1683.783753][T17412] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1683.954859][T19039] netlink: 'syz.7.3703': attribute type 4 has an invalid length. [ 1684.333871][T19047] siw: device registration error -23 [ 1686.483330][T19057] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3707'. [ 1686.864122][T19061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3708'. [ 1687.738342][T17412] team0 (unregistering): Port device team_slave_1 removed [ 1688.013963][T17412] team0 (unregistering): Port device team_slave_0 removed [ 1690.753826][T18796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1690.753846][T18796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1690.753887][T18796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1691.068280][T19067] netlink: 'syz.4.3711': attribute type 4 has an invalid length. [ 1691.680447][T19075] siw: device registration error -23 [ 1693.484518][T19078] netlink: 'syz.8.3714': attribute type 4 has an invalid length. [ 1697.340091][T19083] netlink: 830 bytes leftover after parsing attributes in process `syz.7.3715'. [ 1697.579074][T18796] hsr_slave_0: entered promiscuous mode [ 1697.582312][T18796] hsr_slave_1: entered promiscuous mode [ 1697.583878][T18796] debugfs: 'hsr0' already exists in 'hsr' [ 1697.583899][T18796] Cannot create hsr debugfs directory [ 1698.378635][T19098] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3719'. [ 1698.733760][T19111] netlink: 'syz.4.3724': attribute type 4 has an invalid length. [ 1698.793383][T19114] netlink: 'syz.7.3725': attribute type 4 has an invalid length. [ 1702.982992][T19120] siw: device registration error -23 [ 1702.983992][T19121] siw: device registration error -23 [ 1708.741617][T19143] netlink: 830 bytes leftover after parsing attributes in process `syz.7.3728'. [ 1709.981737][T12677] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1710.014210][T12677] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1710.016573][T12677] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1710.021487][T12677] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1710.035571][T12677] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1710.234703][T19146] lo speed is unknown, defaulting to 1000 [ 1711.708564][T19172] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3735'. [ 1711.946302][T19178] binder: 19168:19178 ioctl c0306201 0 returned -14 [ 1712.722059][ T9073] Bluetooth: hci5: command tx timeout [ 1712.905516][T19146] chnl_net:caif_netlink_parms(): no params data found [ 1712.955862][T19183] netlink: 'syz.8.3737': attribute type 4 has an invalid length. [ 1713.299093][T19186] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3739'. [ 1713.299122][T19186] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3739'. [ 1713.607815][T19189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3738'. [ 1714.843951][ T9073] Bluetooth: hci5: command tx timeout [ 1715.375612][T19208] loop2: detected capacity change from 0 to 7 [ 1715.377485][T19208] Dev loop2: unable to read RDB block 7 [ 1715.377532][T19208] loop2: unable to read partition table [ 1715.377754][T19208] loop2: partition table beyond EOD, truncated [ 1715.377791][T19208] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1716.518507][T19214] gfs2: error -5 reading superblock [ 1716.705533][T19222] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3746'. [ 1717.807022][ T9073] Bluetooth: hci5: command tx timeout [ 1718.281227][T19235] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3749'. [ 1718.283851][T19234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3750'. [ 1718.283876][T19234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3750'. [ 1719.012932][T19241] netlink: 'syz.4.3751': attribute type 4 has an invalid length. [ 1719.403740][T19245] siw: device registration error -23 [ 1719.926711][ T9073] Bluetooth: hci5: command tx timeout [ 1720.279814][T19250] loop2: detected capacity change from 0 to 7 [ 1720.282677][T19142] Dev loop2: unable to read RDB block 7 [ 1720.282733][T19142] loop2: unable to read partition table [ 1720.282987][T19142] loop2: partition table beyond EOD, truncated [ 1720.381861][T19250] Dev loop2: unable to read RDB block 7 [ 1720.381912][T19250] loop2: unable to read partition table [ 1720.382172][T19250] loop2: partition table beyond EOD, truncated [ 1720.386057][T19250] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1720.600575][T17255] bridge_slave_1: left allmulticast mode [ 1720.600606][T17255] bridge_slave_1: left promiscuous mode [ 1720.600867][T17255] bridge0: port 2(bridge_slave_1) entered disabled state [ 1720.657254][T19262] gfs2: error -5 reading superblock [ 1720.690432][T17255] bridge_slave_0: left allmulticast mode [ 1720.690558][T17255] bridge_slave_0: left promiscuous mode [ 1720.690857][T17255] bridge0: port 1(bridge_slave_0) entered disabled state [ 1722.154173][T19282] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3762'. [ 1722.154752][T19282] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3762'. [ 1723.302556][T17199] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1723.338916][T17255] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1723.360024][T19291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3764'. [ 1723.360051][T19291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3764'. [ 1723.370768][T19292] loop2: detected capacity change from 0 to 7 [ 1723.385604][T19142] Dev loop2: unable to read RDB block 7 [ 1723.385975][T19142] loop2: unable to read partition table [ 1723.386642][T19142] loop2: partition table beyond EOD, truncated [ 1723.409087][T19292] Dev loop2: unable to read RDB block 7 [ 1723.409121][T19292] loop2: unable to read partition table [ 1723.409282][T19292] loop2: partition table beyond EOD, truncated [ 1723.409330][T19292] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1723.455007][T17199] usb 8-1: Using ep0 maxpacket: 8 [ 1723.467737][T17199] usb 8-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1723.467823][T17199] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1723.467884][T17199] usb 8-1: Product: syz [ 1723.467927][T17199] usb 8-1: Manufacturer: syz [ 1723.467978][T17199] usb 8-1: SerialNumber: syz [ 1723.526250][T17199] usb 8-1: config 0 descriptor?? [ 1723.548394][T17255] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1723.567667][T17199] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1723.567703][T17199] pctv452e: pctv452e_power_ctrl: 1 [ 1723.567703][T17199] [ 1723.567737][T17199] usb 8-1: selecting invalid altsetting 3 [ 1723.567748][T17199] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1723.567748][T17199] [ 1723.567761][T17199] dvb-usb: bulk message failed: -22 (5/0) [ 1723.617184][T17199] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1723.624000][T17199] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 1723.624200][T17199] usb 8-1: media controller created [ 1723.624329][T17199] dvb-usb: bulk message failed: -22 (8/0) [ 1723.624372][T17199] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 1723.624513][T17199] dvb-usb: MAC address reading failed. [ 1723.712961][T17199] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1723.736603][T17255] bond0 (unregistering): Released all slaves [ 1723.822826][T17199] DVB: Unable to find symbol stb0899_attach() [ 1723.822840][T17199] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 1723.938958][T19133] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1723.939149][T17199] rc_core: IR keymap rc-tt-1500 not found [ 1723.939165][T17199] Registered IR keymap rc-empty [ 1723.950303][T17199] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0 [ 1723.953526][T19284] dvb-usb: bulk message failed: -22 (7/0) [ 1723.953544][T19284] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 1723.980195][T17199] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0/input38 [ 1724.023566][T17199] dvb-usb: schedule remote query interval to 100 msecs. [ 1724.023592][T17199] pctv452e: pctv452e_power_ctrl: 0 [ 1724.023592][T17199] [ 1724.023604][T17199] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 1724.073069][T19133] usb 5-1: device descriptor read/64, error -71 [ 1724.146535][ T5930] dvb-usb: bulk message failed: -22 (4/0) [ 1724.146582][ T5930] dvb-usb: error -22 while querying for an remote control event. [ 1724.150740][T17199] usb 8-1: USB disconnect, device number 18 [ 1724.322550][T19133] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1724.452571][T19133] usb 5-1: device descriptor read/64, error -71 [ 1724.563143][T19133] usb usb5-port1: attempt power cycle [ 1724.594961][T17199] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 1724.904048][T19133] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1724.955213][T19133] usb 5-1: device descriptor read/8, error -71 [ 1724.994721][T17255] hsr_slave_0: left promiscuous mode [ 1725.120694][T19313] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3769'. [ 1725.202956][T19313] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3769'. [ 1726.042609][T19133] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1726.063414][T19133] usb 5-1: device descriptor read/8, error -71 [ 1726.133371][T17255] hsr_slave_1: left promiscuous mode [ 1726.136879][T17255] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1726.184685][T19133] usb usb5-port1: unable to enumerate USB device [ 1726.227458][T17255] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1727.912665][T19323] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3772'. [ 1727.916546][T19323] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3772'. [ 1728.148983][T19330] loop2: detected capacity change from 0 to 7 [ 1728.151903][T19330] Dev loop2: unable to read RDB block 7 [ 1728.151958][T19330] loop2: unable to read partition table [ 1728.152188][T19330] loop2: partition table beyond EOD, truncated [ 1728.153065][T19330] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1731.873129][T17255] team0 (unregistering): Port device team_slave_1 removed [ 1732.170334][T19350] sock: sock_set_timeout: `syz.7.3780' (pid 19350) tries to set negative timeout [ 1732.626439][T17255] team0 (unregistering): Port device team_slave_0 removed [ 1732.817038][T18222] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1732.987124][T18222] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1732.987156][T18222] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1732.987221][T18222] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1732.991950][T18222] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a2, bcdDevice= 0.40 [ 1732.991982][T18222] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1732.992004][T18222] usb 8-1: Product: syz [ 1732.992020][T18222] usb 8-1: Manufacturer: syz [ 1732.992036][T18222] usb 8-1: SerialNumber: syz [ 1733.289516][T18222] cdc_subset 8-1:1.0: probe with driver cdc_subset failed with error -22 [ 1733.290312][T18222] cdc_ncm 8-1:1.0: CDC Union missing and no IAD found [ 1733.290343][T18222] cdc_ncm 8-1:1.0: bind() failure [ 1733.503615][T19359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3782'. [ 1733.562531][T19359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3782'. [ 1734.311385][T19133] usb 8-1: USB disconnect, device number 19 [ 1734.468831][T19362] fuse: Unknown parameter 'group_id00000000000000000000' [ 1734.788839][T19367] loop2: detected capacity change from 0 to 7 [ 1734.803479][T19367] Dev loop2: unable to read RDB block 7 [ 1734.803538][T19367] loop2: unable to read partition table [ 1734.803771][T19367] loop2: partition table beyond EOD, truncated [ 1734.831011][T19367] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1735.287820][T19146] bridge0: port 1(bridge_slave_0) entered blocking state [ 1735.288066][T19146] bridge0: port 1(bridge_slave_0) entered disabled state [ 1735.288341][T19146] bridge_slave_0: entered allmulticast mode [ 1735.290975][T19146] bridge_slave_0: entered promiscuous mode [ 1735.775883][T19316] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3770'. [ 1736.014635][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1736.014714][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1736.222692][T19146] bridge0: port 2(bridge_slave_1) entered blocking state [ 1736.222906][T19146] bridge0: port 2(bridge_slave_1) entered disabled state [ 1736.223152][T19146] bridge_slave_1: entered allmulticast mode [ 1737.587196][T19146] bridge_slave_1: entered promiscuous mode [ 1738.192067][T19388] gfs2: error -5 reading superblock [ 1739.713781][T19402] gfs2: error -5 reading superblock [ 1740.362017][T19146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1740.388098][T19146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1740.910317][T19413] loop2: detected capacity change from 0 to 7 [ 1740.951047][T19413] Dev loop2: unable to read RDB block 7 [ 1740.951101][T19413] loop2: unable to read partition table [ 1740.951339][T19413] loop2: partition table beyond EOD, truncated [ 1740.951360][T19413] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1741.700010][T19418] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3798'. [ 1741.757327][T19418] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3798'. [ 1742.896801][T19425] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3800'. [ 1742.896830][T19425] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3800'. [ 1744.049102][T19146] team0: Port device team_slave_0 added [ 1744.091999][T19146] team0: Port device team_slave_1 added [ 1744.252596][T18222] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1744.255378][T19434] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3803'. [ 1744.402563][T18222] usb 8-1: Using ep0 maxpacket: 8 [ 1744.410747][T18222] usb 8-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1744.410780][T18222] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1744.410802][T18222] usb 8-1: Product: syz [ 1744.410826][T18222] usb 8-1: Manufacturer: syz [ 1744.410841][T18222] usb 8-1: SerialNumber: syz [ 1744.468332][T19439] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3801'. [ 1744.471035][T19439] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3801'. [ 1744.632118][T19443] gfs2: error -5 reading superblock [ 1745.040138][T18222] usb 8-1: config 0 descriptor?? [ 1745.062098][T18222] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1745.062159][T18222] pctv452e: pctv452e_power_ctrl: 1 [ 1745.062159][T18222] [ 1745.062209][T18222] usb 8-1: selecting invalid altsetting 3 [ 1745.062234][T18222] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1745.062234][T18222] [ 1745.062252][T18222] dvb-usb: bulk message failed: -22 (5/0) [ 1745.118956][T19146] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1745.118975][T19146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1745.119005][T19146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1746.432975][T18222] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1746.453908][T18222] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 1746.453975][T18222] usb 8-1: media controller created [ 1746.454030][T18222] dvb-usb: bulk message failed: -22 (8/0) [ 1746.454047][T18222] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 1746.454101][T18222] dvb-usb: MAC address reading failed. [ 1746.461479][T19146] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1746.461498][T19146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1746.461530][T19146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1746.572094][T18222] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1746.771098][T19436] dvb-usb: bulk message failed: -22 (7/0) [ 1746.771124][T19436] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 1746.792795][T18222] DVB: Unable to find symbol stb0899_attach() [ 1746.792811][T18222] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 1746.892492][T18222] rc_core: IR keymap rc-tt-1500 not found [ 1746.892515][T18222] Registered IR keymap rc-empty [ 1746.894256][T18222] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0 [ 1746.897529][T18222] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0/input39 [ 1746.938238][T18222] dvb-usb: schedule remote query interval to 100 msecs. [ 1746.938263][T18222] pctv452e: pctv452e_power_ctrl: 0 [ 1746.938263][T18222] [ 1746.938277][T18222] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 1746.969665][T18222] usb 8-1: USB disconnect, device number 20 [ 1747.109680][T19453] loop2: detected capacity change from 0 to 7 [ 1747.111369][T19453] Dev loop2: unable to read RDB block 7 [ 1747.111419][T19453] loop2: unable to read partition table [ 1747.111776][T19453] loop2: partition table beyond EOD, truncated [ 1747.111798][T19453] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1747.203196][ T5166] Dev loop2: unable to read RDB block 7 [ 1747.203240][ T5166] loop2: unable to read partition table [ 1747.203444][ T5166] loop2: partition table beyond EOD, truncated [ 1747.272303][T18222] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 1747.375289][T19146] hsr_slave_0: entered promiscuous mode [ 1747.376321][T19146] hsr_slave_1: entered promiscuous mode [ 1747.376999][T19146] debugfs: 'hsr0' already exists in 'hsr' [ 1747.377017][T19146] Cannot create hsr debugfs directory [ 1760.353136][T14444] Bluetooth: Error in BCSP hdr checksum [ 1761.756564][ T9073] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1761.765228][T18777] Bluetooth: Error in BCSP hdr checksum [ 1762.025344][T14444] Bluetooth: Error in BCSP hdr checksum [ 1762.793230][T19558] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3830'. [ 1764.288790][T19146] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1764.344848][T19146] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1764.393167][T19146] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1764.450543][T19146] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1765.296962][T19146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1765.623630][T19146] 8021q: adding VLAN 0 to HW filter on device team0 [ 1765.699373][T17412] bridge0: port 1(bridge_slave_0) entered blocking state [ 1765.699523][T17412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1765.700492][T19593] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3835'. [ 1765.768066][ T5997] bridge0: port 2(bridge_slave_1) entered blocking state [ 1765.768201][ T5997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1766.025569][T19146] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1766.025598][T19146] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1771.321147][ T9073] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1771.346993][ T9073] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1771.351542][ T9073] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1771.373585][ T9073] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1771.394978][ T9073] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1773.546588][ T9073] Bluetooth: hci0: command tx timeout [ 1773.790781][T19678] gfs2: error -5 reading superblock [ 1773.795887][T19645] lo speed is unknown, defaulting to 1000 [ 1774.186478][T19672] gfs2: error -5 reading superblock [ 1774.211378][T19677] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3850'. [ 1775.692465][ T9073] Bluetooth: hci0: command tx timeout [ 1776.136989][T19693] overlay: filesystem on ./file0 not supported as upperdir [ 1776.919842][T19706] loop2: detected capacity change from 0 to 7 [ 1776.920918][T19706] Dev loop2: unable to read RDB block 7 [ 1776.920959][T19706] loop2: unable to read partition table [ 1776.921154][T19706] loop2: partition table beyond EOD, truncated [ 1776.921172][T19706] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1778.137030][ T9073] Bluetooth: hci0: command tx timeout [ 1778.606954][T19709] Can't find ip_set type bitmap:ip [ 1779.476911][T19645] chnl_net:caif_netlink_parms(): no params data found [ 1779.964577][T19724] netlink: 84 bytes leftover after parsing attributes in process `syz.7.3860'. [ 1780.072590][T19728] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3862'. [ 1780.192511][ T9073] Bluetooth: hci0: command tx timeout [ 1780.402594][T19734] gfs2: error -5 reading superblock [ 1782.870265][T19753] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3865'. [ 1783.153711][T19753] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3865'. [ 1784.483598][T19755] loop2: detected capacity change from 0 to 7 [ 1784.542617][T19755] Dev loop2: unable to read RDB block 7 [ 1784.542670][T19755] loop2: unable to read partition table [ 1784.542907][T19755] loop2: partition table beyond EOD, truncated [ 1784.542928][T19755] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1784.847199][T19764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3872'. [ 1784.847227][T19764] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3872'. [ 1786.309781][T19777] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3875'. [ 1786.552976][T18778] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1786.752889][T18778] usb 9-1: Using ep0 maxpacket: 16 [ 1786.791804][T18778] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1786.791837][T18778] usb 9-1: config 1 has no interface number 1 [ 1786.813754][T18778] usb 9-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1786.813877][T18778] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1786.818033][T18778] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1786.914731][T18778] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1786.915183][T18778] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1786.915282][T18778] usb 9-1: Product: syz [ 1786.915416][T18778] usb 9-1: Manufacturer: syz [ 1786.915502][T18778] usb 9-1: SerialNumber: syz [ 1788.820697][T19802] Can't find ip_set type bitmap:ip [ 1789.435126][T18778] usb 9-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1789.773382][T19645] bridge0: port 1(bridge_slave_0) entered blocking state [ 1789.777500][T19645] bridge0: port 1(bridge_slave_0) entered disabled state [ 1789.777774][T19645] bridge_slave_0: entered allmulticast mode [ 1789.780672][T19645] bridge_slave_0: entered promiscuous mode [ 1789.793529][T19645] bridge0: port 2(bridge_slave_1) entered blocking state [ 1789.793708][T19645] bridge0: port 2(bridge_slave_1) entered disabled state [ 1789.794075][T19645] bridge_slave_1: entered allmulticast mode [ 1789.797054][T19645] bridge_slave_1: entered promiscuous mode [ 1789.928486][T19812] loop2: detected capacity change from 0 to 7 [ 1790.561212][T19812] Dev loop2: unable to read RDB block 7 [ 1790.561275][T19812] loop2: unable to read partition table [ 1790.561512][T19812] loop2: partition table beyond EOD, truncated [ 1790.561567][T19812] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1790.593000][ T5987] usb 9-1: USB disconnect, device number 7 [ 1790.995751][T19645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1791.008167][T19645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1791.045412][T19822] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3883'. [ 1791.045442][T19822] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3883'. [ 1791.327455][T19830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3885'. [ 1791.327480][T19830] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3885'. [ 1791.684514][T19645] team0: Port device team_slave_0 added [ 1792.742056][T19645] team0: Port device team_slave_1 added [ 1793.782134][T19854] loop2: detected capacity change from 0 to 7 [ 1793.788639][T19854] Dev loop2: unable to read RDB block 7 [ 1793.789267][T19854] loop2: unable to read partition table [ 1793.795412][T19854] loop2: partition table beyond EOD, truncated [ 1793.800598][T19854] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1795.704940][T18778] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1795.785493][T19860] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3896'. [ 1795.785522][T19860] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3896'. [ 1795.988115][T18778] usb 2-1: Using ep0 maxpacket: 16 [ 1795.990875][T18778] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1795.990906][T18778] usb 2-1: config 1 has no interface number 1 [ 1795.990957][T18778] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1795.990981][T18778] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1795.991026][T18778] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1796.000502][T18778] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1796.000594][T18778] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1796.000649][T18778] usb 2-1: Product: syz [ 1796.000706][T18778] usb 2-1: Manufacturer: syz [ 1796.000769][T18778] usb 2-1: SerialNumber: syz [ 1796.355252][T19645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1796.355273][T19645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1796.355305][T19645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1796.552299][T18778] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1796.626600][T19645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1796.626624][T19645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1796.626716][T19645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1796.827857][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1796.827966][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1796.967905][ T5987] usb 2-1: USB disconnect, device number 39 [ 1798.593856][ T988] bridge_slave_1: left allmulticast mode [ 1798.593886][ T988] bridge_slave_1: left promiscuous mode [ 1798.594141][ T988] bridge0: port 2(bridge_slave_1) entered disabled state [ 1799.028979][T19886] overlayfs: failed to resolve './file2': -2 [ 1799.720177][T19887] Can't find ip_set type bitmap:ip [ 1799.904804][ T988] bridge_slave_0: left allmulticast mode [ 1799.904838][ T988] bridge_slave_0: left promiscuous mode [ 1799.905103][ T988] bridge0: port 1(bridge_slave_0) entered disabled state [ 1803.128475][T19913] overlay: filesystem on ./file0 not supported as upperdir [ 1803.730187][T19914] Can't find ip_set type bitmap:ip [ 1803.939105][T19916] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3908'. [ 1803.939143][T19916] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3908'. [ 1807.472500][ T6243] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1807.647165][ T6243] usb 5-1: Using ep0 maxpacket: 16 [ 1807.649557][ T6243] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1807.649586][ T6243] usb 5-1: config 1 has no interface number 1 [ 1807.649642][ T6243] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1807.649659][ T6243] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1807.649689][ T6243] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1807.654941][ T6243] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1807.654992][ T6243] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1807.655016][ T6243] usb 5-1: Product: syz [ 1807.655027][ T6243] usb 5-1: Manufacturer: syz [ 1807.655037][ T6243] usb 5-1: SerialNumber: syz [ 1807.785230][T19939] ======================================================= [ 1807.785230][T19939] WARNING: The mand mount option has been deprecated and [ 1807.785230][T19939] and is ignored by this kernel. Remove the mand [ 1807.785230][T19939] option from the mount to silence this warning. [ 1807.785230][T19939] ======================================================= [ 1807.843722][T19940] overlayfs: missing 'lowerdir' [ 1808.717183][ T6243] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1808.774752][ T6243] usb 5-1: USB disconnect, device number 25 [ 1810.124355][T19943] udevd[19943]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1810.358841][T19958] overlayfs: failed to resolve './file0': -2 [ 1810.559786][T19959] overlayfs: failed to resolve './file2': -2 [ 1811.181046][T19960] Can't find ip_set type bitmap:ip [ 1813.588396][T19977] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3921'. [ 1813.613758][T19977] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3921'. [ 1816.271185][T19987] netlink: 'syz.4.3924': attribute type 4 has an invalid length. [ 1817.348724][ T5987] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1819.102211][T19998] siw: device registration error -23 [ 1819.882654][ T5987] usb 2-1: Using ep0 maxpacket: 16 [ 1820.638498][ T5987] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1820.638531][ T5987] usb 2-1: config 1 has no interface number 1 [ 1820.638580][ T5987] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1820.638603][ T5987] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1820.638647][ T5987] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1820.710289][ T5987] usb 2-1: string descriptor 0 read error: -71 [ 1820.988027][ T5987] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1820.988051][ T5987] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1821.878484][ T5987] usb 2-1: can't set config #1, error -71 [ 1821.902557][ T5987] usb 2-1: USB disconnect, device number 40 [ 1822.945147][T12677] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1822.973761][T12677] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1822.976541][T12677] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1822.977903][T12677] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1822.980320][T12677] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1824.385320][T20024] overlay: filesystem on ./file0 not supported as upperdir [ 1825.096142][ T9073] Bluetooth: hci5: command tx timeout [ 1825.415626][T20031] overlayfs: failed to resolve './file1': -2 [ 1825.698299][T20038] overlayfs: failed to resolve './file2': -2 [ 1825.889035][T20036] overlay: filesystem on ./file0 not supported as upperdir [ 1827.042430][T20038] Can't find ip_set type bitmap:ip [ 1827.294699][T12677] Bluetooth: hci5: command tx timeout [ 1827.524578][T20042] Can't find ip_set type bitmap:ip [ 1827.623986][ T988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1827.995023][ T988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1828.793183][ T988] bond0 (unregistering): Released all slaves [ 1828.888424][T20055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3941'. [ 1828.888450][T20055] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3941'. [ 1829.061493][ T5987] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1829.239931][T19645] hsr_slave_0: entered promiscuous mode [ 1829.302866][T12677] Bluetooth: hci5: command tx timeout [ 1829.333241][ T5987] usb 8-1: Using ep0 maxpacket: 16 [ 1829.380169][ T5987] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1829.380254][ T5987] usb 8-1: config 1 has no interface number 1 [ 1829.380733][ T5987] usb 8-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1829.380811][ T5987] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1829.381002][ T5987] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1829.449037][T19645] hsr_slave_1: entered promiscuous mode [ 1829.521181][ T5987] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1829.521268][ T5987] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1829.521344][ T5987] usb 8-1: Product: syz [ 1829.521387][ T5987] usb 8-1: Manufacturer: syz [ 1829.521456][ T5987] usb 8-1: SerialNumber: syz [ 1829.922617][T19645] debugfs: 'hsr0' already exists in 'hsr' [ 1829.922661][T19645] Cannot create hsr debugfs directory [ 1830.065199][T19916] geneve2: entered promiscuous mode [ 1830.065220][T19916] geneve2: entered allmulticast mode [ 1830.292694][ T988] hsr_slave_0: left promiscuous mode [ 1830.369734][ T988] hsr_slave_1: left promiscuous mode [ 1830.372799][ T5987] usb 8-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1830.376833][ T988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1830.407029][ T988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1830.782906][T18778] usb 8-1: USB disconnect, device number 21 [ 1831.721313][T20050] udevd[20050]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1832.092293][T12677] Bluetooth: hci5: command tx timeout [ 1832.864395][ T9073] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1832.897070][ T9073] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1832.913945][ T9073] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1833.263605][ T9073] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1833.282825][ T9073] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1835.017432][T20090] gfs2: error -5 reading superblock [ 1835.467825][ T9073] Bluetooth: hci6: command tx timeout [ 1835.960417][T20092] overlay: filesystem on ./file0 not supported as upperdir [ 1836.460611][T20093] Can't find ip_set type bitmap:ip [ 1836.771502][T20097] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3951'. [ 1836.771530][T20097] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3951'. [ 1836.823956][T20098] Illegal XDP return value 4294967274 on prog (id 548) dev N/A, expect packet loss! [ 1837.797290][ T9073] Bluetooth: hci6: command tx timeout [ 1840.262824][ T9073] Bluetooth: hci6: command tx timeout [ 1840.955305][T18778] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1840.969634][T20129] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3962'. [ 1840.969675][T20129] netlink: 'syz.7.3962': attribute type 3 has an invalid length. [ 1840.969692][T20129] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3962'. [ 1841.102494][T18778] usb 2-1: Using ep0 maxpacket: 16 [ 1841.105424][T18778] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1841.105478][T18778] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1841.105505][T18778] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1841.164200][T18778] usb 2-1: config 0 descriptor?? [ 1841.443815][T20131] overlayfs: failed to resolve './file2': -2 [ 1842.261918][T20132] Can't find ip_set type bitmap:ip [ 1842.435994][ T9073] Bluetooth: hci6: command tx timeout [ 1842.489145][T18778] usbhid 2-1:0.0: can't add hid device: -71 [ 1842.489293][T18778] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1842.548552][T18778] usb 2-1: USB disconnect, device number 41 [ 1842.934139][ T988] team0 (unregistering): Port device team_slave_1 removed [ 1843.067335][T20140] overlayfs: missing 'lowerdir' [ 1844.066932][ T988] team0 (unregistering): Port device team_slave_0 removed [ 1846.560989][T20156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3969'. [ 1846.566096][T20156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3969'. [ 1847.785220][T20167] netlink: 'syz.4.3973': attribute type 4 has an invalid length. [ 1848.172252][T20176] siw: device registration error -23 [ 1852.987212][T20200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3983'. [ 1853.221521][T20202] gfs2: error -5 reading superblock [ 1853.732509][T17938] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 1853.910841][T17938] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1853.910872][T17938] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1853.910926][T17938] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 1853.910974][T17938] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1853.911000][T17938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1853.967024][T20201] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1853.971911][T17938] hub 2-1:1.0: bad descriptor, ignoring hub [ 1853.971952][T17938] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1853.993817][T17938] cdc_wdm 2-1:1.0: skipping garbage [ 1853.993838][T17938] cdc_wdm 2-1:1.0: skipping garbage [ 1853.996997][T17938] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1853.997018][T17938] cdc_wdm 2-1:1.0: Unknown control protocol [ 1855.342556][ C0] wdm_int_callback: 37 callbacks suppressed [ 1855.342739][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1855.343667][ C0] wdm_int_callback: 37 callbacks suppressed [ 1855.346816][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1855.357621][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1855.359671][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1855.362443][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1855.362471][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1855.368044][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1855.368855][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1855.381439][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1855.381462][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1855.382081][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1855.382099][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1855.382350][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1855.382482][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1855.390128][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1855.391166][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1855.402394][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1855.402524][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1855.412530][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1855.412555][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1857.654107][T12677] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1857.717413][T12677] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1857.718875][T12677] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1857.720512][T12677] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1857.721719][T12677] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1858.610372][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1858.610475][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1859.177131][T20232] overlayfs: missing 'lowerdir' [ 1860.210964][ T9073] Bluetooth: hci0: command tx timeout [ 1861.822484][T20245] overlayfs: missing 'lowerdir' [ 1862.279608][T12677] Bluetooth: hci0: command tx timeout [ 1864.345866][ T9073] Bluetooth: hci0: command tx timeout [ 1865.076286][T20200] syz_tun: refused to change device tx_queue_len [ 1865.637747][T20014] lo speed is unknown, defaulting to 1000 [ 1865.778277][T18222] usb 2-1: USB disconnect, device number 42 [ 1865.893687][T20071] lo speed is unknown, defaulting to 1000 [ 1865.991390][T20221] lo speed is unknown, defaulting to 1000 [ 1866.512499][ T9073] Bluetooth: hci0: command tx timeout [ 1875.267608][T20328] gfs2: error -5 reading superblock [ 1875.929601][T20321] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4007'. [ 1876.424386][T20014] chnl_net:caif_netlink_parms(): no params data found [ 1876.503318][T20339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4011'. [ 1876.505628][T20339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4011'. [ 1879.991533][T20071] chnl_net:caif_netlink_parms(): no params data found [ 1880.127237][ T988] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1880.127268][ T988] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1880.682133][T12677] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1880.719674][T12677] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1880.721688][T12677] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1880.754864][T12677] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1880.756476][T12677] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1880.968406][ T988] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1880.968446][ T988] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1881.033352][T20221] chnl_net:caif_netlink_parms(): no params data found [ 1883.522506][T12677] Bluetooth: hci3: command tx timeout [ 1884.975401][ T988] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1884.975440][ T988] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1885.626392][T12677] Bluetooth: hci3: command tx timeout [ 1886.542818][T20071] bridge0: port 1(bridge_slave_0) entered blocking state [ 1886.543032][T20071] bridge0: port 1(bridge_slave_0) entered disabled state [ 1886.543293][T20071] bridge_slave_0: entered allmulticast mode [ 1886.553000][T20071] bridge_slave_0: entered promiscuous mode [ 1886.755439][ T988] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1886.755479][ T988] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1886.873891][T20071] bridge0: port 2(bridge_slave_1) entered blocking state [ 1886.874237][T20071] bridge0: port 2(bridge_slave_1) entered disabled state [ 1886.874879][T20071] bridge_slave_1: entered allmulticast mode [ 1886.887483][T20363] lo speed is unknown, defaulting to 1000 [ 1886.948944][T20071] bridge_slave_1: entered promiscuous mode [ 1887.795485][T12677] Bluetooth: hci3: command tx timeout [ 1888.615243][T20401] netlink: 830 bytes leftover after parsing attributes in process `syz.4.4022'. [ 1889.863205][ T9073] Bluetooth: hci3: command tx timeout [ 1890.817770][T20416] gfs2: error -5 reading superblock [ 1892.577875][T20429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4026'. [ 1892.578921][T20429] netlink: 140 bytes leftover after parsing attributes in process `syz.1.4026'. [ 1892.613978][T20221] bridge0: port 1(bridge_slave_0) entered blocking state [ 1892.614895][T20221] bridge0: port 1(bridge_slave_0) entered disabled state [ 1892.616397][T20221] bridge_slave_0: entered allmulticast mode [ 1893.598794][T20221] bridge_slave_0: entered promiscuous mode [ 1893.728995][T20221] bridge0: port 2(bridge_slave_1) entered blocking state [ 1893.729131][T20221] bridge0: port 2(bridge_slave_1) entered disabled state [ 1893.729397][T20221] bridge_slave_1: entered allmulticast mode [ 1893.732205][T20221] bridge_slave_1: entered promiscuous mode [ 1893.838902][ T9073] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1893.842272][ T9073] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1893.882721][ T9073] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1893.911824][ T9073] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1893.926943][ T9073] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1896.032190][ T9073] Bluetooth: hci4: command tx timeout [ 1896.575376][T20451] netlink: 830 bytes leftover after parsing attributes in process `syz.4.4029'. [ 1897.147535][T20466] overlayfs: missing 'lowerdir' [ 1898.102556][ T9073] Bluetooth: hci4: command tx timeout [ 1898.186842][T20473] gfs2: error -5 reading superblock [ 1898.288946][T20221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1898.446289][T20221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1900.264069][ T9073] Bluetooth: hci4: command tx timeout [ 1900.304620][T20221] team0: Port device team_slave_0 added [ 1901.226102][T20433] lo speed is unknown, defaulting to 1000 [ 1901.265742][T20221] team0: Port device team_slave_1 added [ 1902.342624][ T9073] Bluetooth: hci4: command tx timeout [ 1902.410910][T20221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1902.410926][T20221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1902.410949][T20221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1904.655533][ T988] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1904.793233][T20221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1904.793247][T20221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1904.793269][T20221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1905.247787][ T988] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1909.699786][T20517] gfs2: error -5 reading superblock [ 1909.852881][ T988] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1909.962208][T20221] hsr_slave_0: entered promiscuous mode [ 1909.973010][T20221] hsr_slave_1: entered promiscuous mode [ 1909.974031][T20221] debugfs: 'hsr0' already exists in 'hsr' [ 1909.974058][T20221] Cannot create hsr debugfs directory [ 1911.999777][ T988] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1914.182891][T20363] chnl_net:caif_netlink_parms(): no params data found [ 1916.802677][ T5930] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1917.842465][ T5930] usb 5-1: Using ep0 maxpacket: 32 [ 1917.848518][ T5930] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 1917.848550][ T5930] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1917.848574][ T5930] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1917.848599][ T5930] usb 5-1: config 1 has no interface number 0 [ 1917.848658][ T5930] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1917.848688][ T5930] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1917.848736][ T5930] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1917.848762][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1917.965500][ T5930] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 1918.620150][T20561] gfs2: error -5 reading superblock [ 1918.634647][ T5930] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 1918.751652][T20363] bridge0: port 1(bridge_slave_0) entered blocking state [ 1918.751977][T20363] bridge0: port 1(bridge_slave_0) entered disabled state [ 1918.780787][T20363] bridge_slave_0: entered allmulticast mode [ 1918.794243][T19133] usb 5-1: USB disconnect, device number 26 [ 1918.797385][T19133] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 1918.844692][T20363] bridge_slave_0: entered promiscuous mode [ 1918.865295][T20433] chnl_net:caif_netlink_parms(): no params data found [ 1918.914840][T12677] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1918.917995][T12677] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1918.936592][T12677] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1918.956734][T20363] bridge0: port 2(bridge_slave_1) entered blocking state [ 1918.956876][T20363] bridge0: port 2(bridge_slave_1) entered disabled state [ 1918.957147][T20363] bridge_slave_1: entered allmulticast mode [ 1918.988504][T12677] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1918.988906][T20363] bridge_slave_1: entered promiscuous mode [ 1918.990352][T12677] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1920.099932][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1920.100007][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1922.077535][ T9073] Bluetooth: hci5: command tx timeout [ 1922.439061][T20363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1922.439535][ T988] bridge_slave_1: left allmulticast mode [ 1922.439560][ T988] bridge_slave_1: left promiscuous mode [ 1922.439813][ T988] bridge0: port 2(bridge_slave_1) entered disabled state [ 1922.699581][ T988] bridge_slave_0: left allmulticast mode [ 1922.699738][ T988] bridge_slave_0: left promiscuous mode [ 1922.776027][ T988] bridge0: port 1(bridge_slave_0) entered disabled state [ 1923.685335][ T988] bridge_slave_1: left allmulticast mode [ 1923.685366][ T988] bridge_slave_1: left promiscuous mode [ 1923.685610][ T988] bridge0: port 2(bridge_slave_1) entered disabled state [ 1925.155334][ T9073] Bluetooth: hci5: command tx timeout [ 1925.864586][ T988] bridge_slave_0: left allmulticast mode [ 1925.864618][ T988] bridge_slave_0: left promiscuous mode [ 1925.864881][ T988] bridge0: port 1(bridge_slave_0) entered disabled state [ 1926.130124][ T988] bridge_slave_1: left allmulticast mode [ 1926.130157][ T988] bridge_slave_1: left promiscuous mode [ 1926.130404][ T988] bridge0: port 2(bridge_slave_1) entered disabled state [ 1926.908198][T20598] Can't find ip_set type bitmap:ip [ 1927.113622][ T988] bridge_slave_0: left allmulticast mode [ 1927.113647][ T988] bridge_slave_0: left promiscuous mode [ 1927.113840][ T988] bridge0: port 1(bridge_slave_0) entered disabled state [ 1927.223156][ T9073] Bluetooth: hci5: command tx timeout [ 1929.423752][ T9073] Bluetooth: hci5: command tx timeout [ 1933.498388][T20619] gfs2: error -5 reading superblock [ 1938.699623][T20645] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4072'. [ 1938.726634][T20645] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4072'. [ 1943.323803][T20659] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1943.360722][T20659] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1943.369796][T20659] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1943.375187][T20659] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1943.385166][T20659] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1947.343702][T20659] Bluetooth: hci0: command tx timeout [ 1947.710945][T20683] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4081'. [ 1947.713463][T20683] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4081'. [ 1949.903218][T20659] Bluetooth: hci0: command tx timeout [ 1951.960097][T20659] Bluetooth: hci0: command tx timeout [ 1954.022666][T20659] Bluetooth: hci0: command tx timeout [ 1956.707957][ T9073] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1956.746633][ T9073] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1956.761555][ T9073] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1956.774323][ T9073] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1956.775355][ T9073] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1958.360005][ T988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1958.403183][ T988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1959.132461][ T9073] Bluetooth: hci6: command tx timeout [ 1959.156255][ T988] bond0 (unregistering): Released all slaves [ 1961.166984][ T9073] Bluetooth: hci6: command tx timeout [ 1963.184668][ T988] bond1 (unregistering): Released all slaves [ 1963.243185][ T9073] Bluetooth: hci6: command tx timeout [ 1963.302809][T18222] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1963.462455][T18222] usb 5-1: Using ep0 maxpacket: 32 [ 1963.464876][T18222] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 1963.464906][T18222] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1963.464929][T18222] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1963.464959][T18222] usb 5-1: config 1 has no interface number 0 [ 1963.464995][T18222] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1963.465015][T18222] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1963.465047][T18222] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1963.465064][T18222] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1963.532207][T18222] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 1963.717649][T18222] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 1963.947414][T18222] usb 5-1: USB disconnect, device number 27 [ 1963.949241][T18222] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 1964.506698][ T988] bond2 (unregistering): Released all slaves [ 1965.789675][ T9073] Bluetooth: hci6: command tx timeout [ 1966.323213][T20760] gfs2: error -5 reading superblock [ 1966.395667][ T988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1966.474751][ T988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1966.534777][ T988] bond0 (unregistering): Released all slaves [ 1969.220497][T20775] tmpfs: Unknown parameter 'grpquota4' [ 1972.363384][ T988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1972.426168][ T988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1972.446108][ T988] bond0 (unregistering): Released all slaves [ 1972.524836][T20659] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1972.529971][T20659] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1972.531778][T20659] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1972.553309][T20659] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1972.554543][T20659] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1972.951140][T20363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1972.986380][ T149] ================================================================== [ 1972.986398][ T149] BUG: KASAN: use-after-free in __linkwatch_run_queue+0x69b/0x7e0 [ 1972.986619][ T149] Read of size 1 at addr ffff8880333f4e39 by task kworker/u8:6/149 [ 1972.986638][ T149] [ 1972.986669][ T149] CPU: 1 UID: 0 PID: 149 Comm: kworker/u8:6 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1972.986700][ T149] Tainted: [L]=SOFTLOCKUP [ 1972.986709][ T149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1972.986724][ T149] Workqueue: events_unbound linkwatch_event [ 1972.986773][ T149] Call Trace: [ 1972.986786][ T149] [ 1972.986796][ T149] dump_stack_lvl+0xe8/0x150 [ 1972.986870][ T149] print_report+0xca/0x240 [ 1972.986903][ T149] ? __linkwatch_run_queue+0x69b/0x7e0 [ 1972.986937][ T149] kasan_report+0x118/0x150 [ 1972.986999][ T149] ? __linkwatch_run_queue+0x69b/0x7e0 [ 1972.987040][ T149] __linkwatch_run_queue+0x69b/0x7e0 [ 1972.987078][ T149] ? __pfx___linkwatch_run_queue+0x10/0x10 [ 1972.987113][ T149] ? linkwatch_event+0xe/0x60 [ 1972.987147][ T149] ? process_scheduled_works+0x9ef/0x1770 [ 1972.987203][ T149] linkwatch_event+0x4c/0x60 [ 1972.987236][ T149] process_scheduled_works+0xad1/0x1770 [ 1972.987277][ T149] ? __pfx_process_scheduled_works+0x10/0x10 [ 1972.987301][ T149] ? do_raw_spin_lock+0x121/0x290 [ 1972.987347][ T149] worker_thread+0x8a0/0xda0 [ 1972.987388][ T149] kthread+0x711/0x8a0 [ 1972.987420][ T149] ? __pfx_worker_thread+0x10/0x10 [ 1972.987446][ T149] ? __pfx_kthread+0x10/0x10 [ 1972.987475][ T149] ? rt_spin_unlock+0x150/0x200 [ 1972.987595][ T149] ? rt_spin_unlock+0x161/0x200 [ 1972.987627][ T149] ? __pfx_kthread+0x10/0x10 [ 1972.987659][ T149] ret_from_fork+0x510/0xa50 [ 1972.987695][ T149] ? __pfx_ret_from_fork+0x10/0x10 [ 1972.987718][ T149] ? __switch_to+0xc9e/0x1480 [ 1972.987754][ T149] ? __pfx_kthread+0x10/0x10 [ 1972.987786][ T149] ret_from_fork_asm+0x1a/0x30 [ 1972.987829][ T149] [ 1972.987837][ T149] [ 1972.987843][ T149] The buggy address belongs to the physical page: [ 1972.987862][ T149] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x333f4 [ 1972.987885][ T149] flags: 0x80000000000000(node=0|zone=1) [ 1972.987914][ T149] raw: 0080000000000000 ffffea00023f3908 ffff8880b8942d80 0000000000000000 [ 1972.987934][ T149] raw: ffff888000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 1972.987947][ T149] page dumped because: kasan: bad access detected [ 1972.987962][ T149] page_owner tracks the page as freed [ 1972.987970][ T149] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x446dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_COMP), pid 20221, tgid 20221 (syz-executor), ts 1872772064199, free_ts 1972983935026 [ 1972.988010][ T149] post_alloc_hook+0x234/0x290 [ 1972.988052][ T149] get_page_from_freelist+0x28c0/0x2960 [ 1972.988072][ T149] __alloc_frozen_pages_noprof+0x181/0x370 [ 1972.988093][ T149] alloc_pages_mpol+0xd1/0x380 [ 1972.988111][ T149] ___kmalloc_large_node+0x4e/0x150 [ 1972.988141][ T149] __kmalloc_large_node_noprof+0x18/0x90 [ 1972.988177][ T149] __kvmalloc_node_noprof+0x75/0x940 [ 1972.988209][ T149] alloc_netdev_mqs+0xa6/0x11b0 [ 1972.988281][ T149] tun_set_iff+0x535/0xf00 [ 1972.988394][ T149] __tun_chr_ioctl+0x78b/0x1df0 [ 1972.988424][ T149] __se_sys_ioctl+0xff/0x170 [ 1972.988457][ T149] do_syscall_64+0xec/0xf80 [ 1972.988512][ T149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1972.988549][ T149] page last free pid 20221 tgid 20221 stack trace: [ 1972.988561][ T149] __free_frozen_pages+0xfe1/0x1170 [ 1972.988593][ T149] device_release+0x9e/0x1d0 [ 1972.988671][ T149] kobject_put+0x228/0x570 [ 1972.988735][ T149] netdev_run_todo+0xd2c/0xea0 [ 1972.988766][ T149] tun_chr_close+0x13f/0x1c0 [ 1972.988791][ T149] __fput+0x45b/0xa80 [ 1972.988814][ T149] task_work_run+0x1d4/0x260 [ 1972.988845][ T149] do_exit+0x694/0x22f0 [ 1972.988881][ T149] do_group_exit+0x21c/0x2d0 [ 1972.988912][ T149] get_signal+0x125d/0x1310 [ 1972.988932][ T149] arch_do_signal_or_restart+0x9a/0x7a0 [ 1972.988966][ T149] exit_to_user_mode_loop+0x87/0x4e0 [ 1972.989010][ T149] do_syscall_64+0x2c1/0xf80 [ 1972.989031][ T149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1972.989051][ T149] [ 1972.989057][ T149] Memory state around the buggy address: [ 1972.989069][ T149] ffff8880333f4d00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1972.989085][ T149] ffff8880333f4d80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1972.989100][ T149] >ffff8880333f4e00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1972.989112][ T149] ^ [ 1972.989124][ T149] ffff8880333f4e80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1972.989139][ T149] ffff8880333f4f00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1972.989151][ T149] ================================================================== [ 1972.989179][ T149] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1972.989202][ T149] CPU: 1 UID: 0 PID: 149 Comm: kworker/u8:6 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1972.989233][ T149] Tainted: [L]=SOFTLOCKUP [ 1972.989241][ T149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1972.989256][ T149] Workqueue: events_unbound linkwatch_event [ 1972.989291][ T149] Call Trace: [ 1972.989300][ T149] [ 1972.989308][ T149] vpanic+0x1e0/0x670 [ 1972.989343][ T149] panic+0xb9/0xc0 [ 1972.989373][ T149] ? __pfx_panic+0x10/0x10 [ 1972.989406][ T149] ? __linkwatch_run_queue+0x69b/0x7e0 [ 1972.989440][ T149] ? rcu_is_watching+0x15/0xb0 [ 1972.989465][ T149] ? __linkwatch_run_queue+0x69b/0x7e0 [ 1972.989499][ T149] check_panic_on_warn+0x89/0xb0 [ 1972.989534][ T149] ? __linkwatch_run_queue+0x69b/0x7e0 [ 1972.989568][ T149] end_report+0x6f/0x140 [ 1972.989602][ T149] kasan_report+0x129/0x150 [ 1972.989639][ T149] ? __linkwatch_run_queue+0x69b/0x7e0 [ 1972.989676][ T149] __linkwatch_run_queue+0x69b/0x7e0 [ 1972.989715][ T149] ? __pfx___linkwatch_run_queue+0x10/0x10 [ 1972.989751][ T149] ? linkwatch_event+0xe/0x60 [ 1972.989784][ T149] ? process_scheduled_works+0x9ef/0x1770 [ 1972.989811][ T149] linkwatch_event+0x4c/0x60 [ 1972.989843][ T149] process_scheduled_works+0xad1/0x1770 [ 1972.989884][ T149] ? __pfx_process_scheduled_works+0x10/0x10 [ 1972.989908][ T149] ? do_raw_spin_lock+0x121/0x290 [ 1972.989943][ T149] worker_thread+0x8a0/0xda0 [ 1972.989983][ T149] kthread+0x711/0x8a0 [ 1972.990016][ T149] ? __pfx_worker_thread+0x10/0x10 [ 1972.990042][ T149] ? __pfx_kthread+0x10/0x10 [ 1972.990072][ T149] ? rt_spin_unlock+0x150/0x200 [ 1972.990107][ T149] ? rt_spin_unlock+0x161/0x200 [ 1972.990139][ T149] ? __pfx_kthread+0x10/0x10 [ 1972.990176][ T149] ret_from_fork+0x510/0xa50 [ 1972.990201][ T149] ? __pfx_ret_from_fork+0x10/0x10 [ 1972.990224][ T149] ? __switch_to+0xc9e/0x1480 [ 1972.990260][ T149] ? __pfx_kthread+0x10/0x10 [ 1972.990291][ T149] ret_from_fork_asm+0x1a/0x30 [ 1972.990335][ T149] [ 1972.990925][ T149] Kernel Offset: disabled