last executing test programs: 18m18.552240946s ago: executing program 0 (id=1): socket(0x10, 0x3, 0x0) userfaultfd(0x80800) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$tipc(0x1e, 0x5, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x400c9206, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 18m0.971691521s ago: executing program 32 (id=1): socket(0x10, 0x3, 0x0) userfaultfd(0x80800) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$tipc(0x1e, 0x5, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x400c9206, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 16m16.923169845s ago: executing program 3 (id=136): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x6, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0xee4b, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x56, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80000001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x0, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) execve(0x0, &(0x7f0000000400)={[&(0x7f00000001c0)='s\x00\x00\x00\x00', &(0x7f0000000300)='syz1\x00', 0x0, &(0x7f0000000380)=',@', &(0x7f00000003c0)='&\x00']}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x16) ioctl$KVM_RUN(r6, 0xae80, 0x0) 16m13.930590323s ago: executing program 3 (id=141): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$sg(0x0, 0xf9ba, 0x14b082) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) syz_open_procfs$namespace(0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) 16m12.390735443s ago: executing program 3 (id=145): creat(&(0x7f0000000080)='./bus\x00', 0x0) socket$igmp6(0xa, 0x3, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) write$binfmt_register(r1, &(0x7f0000000100)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x7, 0x3a, '*.-*', 0x3a, '', 0x3a, './file0', 0x3a, [0x46]}, 0x2c) open$dir(&(0x7f0000000200)='./file0\x00', 0x1e9240, 0x180) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, 0x0, 0x0) r4 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r4, &(0x7f0000002940), 0x40000000000017d, 0x811) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') 16m8.120305292s ago: executing program 3 (id=151): socket$can_raw(0x1d, 0x3, 0x1) socket$packet(0x11, 0x2, 0x300) move_pages(0x0, 0x0, &(0x7f0000002340), 0x0, &(0x7f0000002380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x15) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)={[{@quota}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x33]}}]}) r4 = add_key$fscrypt_v1(&(0x7f0000001500), &(0x7f0000001540)={'fscrypt:', @desc2}, &(0x7f0000001580)={0x0, "740c561c18c8d0520787a815169e2c2d38ce24ada46dfd910ebe32afb63c184f8aa7603c7eedb7c4014bc2f01d8020e3f1a9f99f55e81277b2f1e4dd09621d6f", 0x3e}, 0x48, 0xfffffffffffffffd) keyctl$restrict_keyring(0x1d, r4, &(0x7f00000005c0)='asymmetric\x00', &(0x7f0000001640)='\x00') read$FUSE(r3, &(0x7f0000000300)={0x2020}, 0x2020) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'vlan0\x00', &(0x7f0000000380)=@ethtool_link_settings={0x4c, 0x8, 0x17, 0x1b, 0xfe, 0xb, 0x4, 0x8, 0xd, 0x4, [0xc, 0x10083, 0x1, 0x2, 0x2eea0afb, 0xb, 0x4000004d, 0xb9ad]}}) 16m6.080541702s ago: executing program 3 (id=152): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000100), 0x10) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x2, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) socket$nl_generic(0x10, 0x3, 0x10) 16m3.761649198s ago: executing program 1 (id=153): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a0000080480", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) 16m1.747070672s ago: executing program 3 (id=156): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r2) socket(0x1e, 0x4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) setuid(0xee01) 16m0.683644992s ago: executing program 1 (id=157): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) read$dsp(r0, &(0x7f0000000100)=""/94, 0xfffffcf7) 15m59.188793554s ago: executing program 1 (id=161): syz_open_procfs(0x0, &(0x7f0000000340)='mountinfo\x00') r0 = syz_io_uring_setup(0x891, &(0x7f0000000380)={0x0, 0x8c36, 0x80, 0x2, 0xbfdffe00}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000004000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) umount2(&(0x7f0000000440)='./file0\x00', 0x8) 15m58.500803737s ago: executing program 1 (id=163): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="16000000000000"], 0x48) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x80100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 15m55.282746304s ago: executing program 1 (id=165): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x700, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x70, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x60, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xc, 0x1, 'physdev\x00'}, @NFTA_MATCH_INFO={0x46, 0x3, "7e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470581f"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0xa}}}, 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x2910a000, 0x0, 0x37, 0x0, 0x0, 0x0) 15m54.396516573s ago: executing program 1 (id=168): socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x15) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x0, @empty=0x1000000}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)='\b\x00', 0x2}, {&(0x7f0000000100)="6306bc3795", 0x5}], 0x2, &(0x7f0000000180)}, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x800, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) getdents64(r2, &(0x7f0000000300)=""/152, 0x98) 15m44.391496555s ago: executing program 33 (id=156): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r2) socket(0x1e, 0x4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) setuid(0xee01) 15m39.077474545s ago: executing program 34 (id=168): socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x15) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x0, @empty=0x1000000}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)='\b\x00', 0x2}, {&(0x7f0000000100)="6306bc3795", 0x5}], 0x2, &(0x7f0000000180)}, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x800, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) getdents64(r2, &(0x7f0000000300)=""/152, 0x98) 15m21.820183879s ago: executing program 2 (id=209): socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r3, &(0x7f0000000140)={'full'}, 0xfffffdef) 15m19.670475171s ago: executing program 2 (id=211): syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x67a, 0x6, 0xf3b8, 0x0, 0x1000, 0x400, 0x4002004c4, 0x1000, 0x0, 0x97, 0x10, 0x0, 0x3, 0x4], 0xeeee8000, 0x400}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15m17.367221278s ago: executing program 2 (id=215): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000540)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x40) r2 = dup(r1) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x50) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0xfffd) close_range(r0, 0xffffffffffffffff, 0x0) 15m14.440616268s ago: executing program 2 (id=218): creat(&(0x7f0000000080)='./bus\x00', 0x0) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) write$binfmt_register(r0, &(0x7f0000000100)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x7, 0x3a, '*.-*', 0x3a, '', 0x3a, './file0', 0x3a, [0x46]}, 0x2c) open$dir(&(0x7f0000000200)='./file0\x00', 0x1e9240, 0x180) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, 0x0, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x811) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') 15m10.695097633s ago: executing program 2 (id=222): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) 15m10.384122826s ago: executing program 2 (id=223): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) shutdown(0xffffffffffffffff, 0x7ffffffe) socket$inet_icmp(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000002c0)='snd_soc_dapm_connected\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x45) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r2, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e246a570c"], 0x27) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000000214708f0313e45c0a661c0073797a30000000000800010000000000"], 0x24}, 0x1, 0x0, 0x0, 0x24000841}, 0x800) 14m54.416886685s ago: executing program 35 (id=223): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) shutdown(0xffffffffffffffff, 0x7ffffffe) socket$inet_icmp(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000002c0)='snd_soc_dapm_connected\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x45) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r2, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e246a570c"], 0x27) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000000214708f0313e45c0a661c0073797a30000000000800010000000000"], 0x24}, 0x1, 0x0, 0x0, 0x24000841}, 0x800) 1m35.505994929s ago: executing program 4 (id=1246): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1002, &(0x7f0000000280)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mknodat$loop(r2, 0x0, 0x200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r4, 0x0, 0x0) shutdown(r4, 0x1) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000500)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r5, 0x6, 0x22, &(0x7f0000000000)=0x4, 0x4) 1m33.009832846s ago: executing program 4 (id=1250): bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0xfffd, 0x0, @mcast2, 0x5}, 0x1c) sendto$inet6(r1, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f", 0xc4, 0xc001, 0x0, 0x0) 1m32.480488491s ago: executing program 4 (id=1251): creat(&(0x7f0000000080)='./bus\x00', 0x0) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) open$dir(0x0, 0x1e9240, 0x180) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040), 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)='trans=rdma,') 1m24.140240676s ago: executing program 4 (id=1263): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x5, 0x8, 0x3, 0x1}, 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500, 0x1882}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) 1m16.578740435s ago: executing program 4 (id=1269): syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) socket$can_j1939(0x1d, 0x2, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000002f00)=ANY=[@ANYBLOB], 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x5) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="31830000000000000000190000000c000180080003000500000073c2d464f90163a52096044abd558ae2a0aa6267d763455883c52241c29598d64eeff0225b8e30c12d38ca5b53a0264dcffb799d41e5fd8127839ca78a2031be2c800820579929fc0be0d457f4f8b4cbb2d1ebafcfef5d68fa4d67550705bc96a37e8bc4bcfd6950a6455dbfeae544f2842d9f52527f71c4793be5002b969bf227a1b6e9be3eabc0087fe9f111bbc077d2d8196bac73d001cbb131ecac8b828ff51d7555da6949fbeedd270974b169019f20b8cd30a253dacde71ee60d8117"], 0x20}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) 1m15.531210797s ago: executing program 4 (id=1271): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x87, &(0x7f00000002c0)=ANY=[@ANYBLOB="4bd24ac4b379cff51ee1b3e140d2978787b326a1cc89a69a505ea32b81be48ebfbcedcda6b4535be143f20edea0450952ec2b63a706f7e63948002898a7245cb74012d5310ce3d4f370dc500934893e53065115ab45de48b52a38ee2be0cd6b5eba63eed09d178424748a35eaa9372fc06ced06ff2e1a6d727bc262f25f8e055d48bd0f299d2221fe0d7c50f488f8994e90c8f46bc699d3d134e84f9cef07f2389bf599d0b55f5dd0fbf846e758e563a2947fcef039137c9c3bdbf518ac47166e8fde293a5b73072ae6307d734c7c4d3e69cda5cc902f2a5a0a54c6759e14f6fe08199ba97096d19f3909c843003b411c479ee9eaea4"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = mq_open(&(0x7f0000000000)='e_1\x00', 0x8c2, 0x30, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f00000000c0)={0x18}) mq_timedreceive(r2, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000100)={0x6, 'veth0_virt_wifi\x00', {0x5}, 0x9}) creat(&(0x7f00000001c0)='./file0\x00', 0x16c) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r4, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r4, 0x1000) syz_open_dev$hidraw(0x0, 0x0, 0x14a042) close_range(r3, 0xffffffffffffffff, 0x0) 1m5.098144951s ago: executing program 8 (id=1280): bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0xfffd, 0x0, @mcast2, 0x5}, 0x1c) sendto$inet6(r1, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000080), 0x4) 1m4.338552839s ago: executing program 8 (id=1284): socket$inet_udplite(0x2, 0x2, 0x88) bpf$MAP_CREATE(0x0, 0x0, 0x50) shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000000080)="5aee41def1868b2ef7fb8d11c72b5255", 0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x80281, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) bind$packet(r8, &(0x7f0000000240)={0x11, 0x1b, 0x0, 0x1, 0x4, 0x6, @random="d70c8b5dae05"}, 0x14) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'vlan0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x60, 0x2c, 0xd2b, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xf, 0x8}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x3ff}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x799, 0x3, 0x0, 0xf2}]}}, @TCA_BPF_FD={0x8, 0x6, r5}]}}]}, 0x60}}, 0x24040084) 59.069644496s ago: executing program 36 (id=1271): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x87, &(0x7f00000002c0)=ANY=[@ANYBLOB="4bd24ac4b379cff51ee1b3e140d2978787b326a1cc89a69a505ea32b81be48ebfbcedcda6b4535be143f20edea0450952ec2b63a706f7e63948002898a7245cb74012d5310ce3d4f370dc500934893e53065115ab45de48b52a38ee2be0cd6b5eba63eed09d178424748a35eaa9372fc06ced06ff2e1a6d727bc262f25f8e055d48bd0f299d2221fe0d7c50f488f8994e90c8f46bc699d3d134e84f9cef07f2389bf599d0b55f5dd0fbf846e758e563a2947fcef039137c9c3bdbf518ac47166e8fde293a5b73072ae6307d734c7c4d3e69cda5cc902f2a5a0a54c6759e14f6fe08199ba97096d19f3909c843003b411c479ee9eaea4"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = mq_open(&(0x7f0000000000)='e_1\x00', 0x8c2, 0x30, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f00000000c0)={0x18}) mq_timedreceive(r2, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000100)={0x6, 'veth0_virt_wifi\x00', {0x5}, 0x9}) creat(&(0x7f00000001c0)='./file0\x00', 0x16c) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r4, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r4, 0x1000) syz_open_dev$hidraw(0x0, 0x0, 0x14a042) close_range(r3, 0xffffffffffffffff, 0x0) 58.900726826s ago: executing program 8 (id=1288): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1020000, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, 0x0, 0x0, 0xffffffffffffff9c) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$sg(0x0, 0xf9ba, 0x14b082) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) 54.7349063s ago: executing program 7 (id=1289): socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='veno', 0x4) 49.981547924s ago: executing program 8 (id=1290): io_uring_setup(0x6c4, 0x0) socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0xff, 0x5, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r3}, &(0x7f0000000780)=0x7d8, &(0x7f0000000180)='%pK \x00'}, 0x20) 47.357644694s ago: executing program 7 (id=1293): syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) socket$can_j1939(0x1d, 0x2, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000002f00)=ANY=[@ANYBLOB], 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x5) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="31830000000000000000190000000c000180080003000500000073c2d464f90163a52096044abd558ae2a0aa6267d763455883c52241c29598d64eeff0225b8e30c12d38ca5b53a0264dcffb799d41e5fd8127839ca78a2031be2c800820579929fc0be0d457f4f8b4cbb2d1ebafcfef5d68fa4d67550705bc96a37e8bc4bcfd6950a6455dbfeae544f2842d9f52527f71c4793be5002b969bf227a1b6e9be3eabc0087fe9f111bbc077d2d8196bac73d001cbb131ecac8b828ff51d7555da6949fbeedd270974b169019f20b8cd30a253dacde71ee60d8117"], 0x20}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) 47.35699289s ago: executing program 5 (id=1294): bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0xfffd, 0x0, @mcast2, 0x5}, 0x1c) sendto$inet6(r1, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000080), 0x4) 45.128904897s ago: executing program 8 (id=1295): read$FUSE(0xffffffffffffffff, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r0, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x10}}, 0x50) r1 = socket$inet6(0xa, 0x1, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, 0x0, 0x4814) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) r3 = syz_io_uring_setup(0x496, &(0x7f0000000f80)={0x0, 0x79af, 0x3180, 0x7ffc, 0x40024e}, &(0x7f0000000340), &(0x7f0000000080)=0x0) r5 = eventfd(0x401) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) r7 = syz_io_uring_setup(0x641a, &(0x7f0000000300)={0x0, 0x235d, 0x10100, 0x0, 0x400002d8, 0x0, r3}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)) syz_io_uring_submit(r8, r4, &(0x7f0000000140)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r1, 0x0, &(0x7f00000003c0)="936e4942c5ba89df80f0454969dc6239d9651771f399a0fde8b8e9f63f7c8011a88f42a3dbd710f0d604ca9de01174313d7cc8d3c6ffa94fc3e896c887f4104a344243e9f63fd9bf9e9fc592f5610420a2fbc3bd77e681327af22c56961c69bfe70d945f8256452933cac8aa66b6883e3ee49343206bbbd30efdba1327ee05bec86e9963b97c3c74fa3e23e00c36cf14b6ce346c2b47f89d208d9758443893e7e1c8fa760514a136d1c28ac5229d8653d76f037dc9159e5b22b2c71109d0c7513d4cd5f09e9c87a3063d866609629d6fbfa8ee3ec0a28aef17a3ccf808d3f66169539011bec0d1bb09db888c7e7b0556e5316bbe375a587c", 0xf8, 0x20000040}) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000040)=r5, 0x1) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x0) shutdown(r1, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r9 = openat$rfkill(0xffffff9c, 0x0, 0x8080, 0x0) r10 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000000)={0x80001001}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r7], 0x7c}, 0x1, 0x0, 0x0, 0x4880}, 0x4000000) socket$inet6(0xa, 0x3, 0x3c) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, 0x0) 43.939897835s ago: executing program 5 (id=1296): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000340)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) accept4$alg(r3, 0x0, 0x0, 0x80000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000280)='./file0\x00') symlink(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x12810400}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x2c, 0x1, 0x4, 0x3, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x1}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044004}, 0x40000) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) 43.734082858s ago: executing program 7 (id=1297): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$ttynull(0xffffffffffffff9c, 0x0, 0x141440, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x10, 0x3, 0x0) r1 = syz_usb_connect(0x6, 0xe0, &(0x7f0000000540)={{0x12, 0x1, 0x250, 0x6d, 0xaa, 0x28, 0x40, 0x12d1, 0xb4d5, 0x166c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xce, 0x2, 0xb, 0x6, 0x50, 0x3, [{{0x9, 0x4, 0x31, 0x40, 0x0, 0xff, 0x3, 0x36, 0x7f}}, {{0x9, 0x4, 0x3, 0x1, 0x0, 0xf9, 0x76, 0x50, 0x5, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x1, 0x3, 0x8}, {0x6, 0x24, 0x1a, 0x2, 0x8}, [@obex={0x5, 0x24, 0x15, 0x80}, @acm={0x4, 0x24, 0x2, 0xa}, @mdlm_detail={0x8d, 0x24, 0x13, 0x3, "2c8a5ff0fcc7e8a6a5cb9e9565622a76f100e9fec0c63171f2bd3c26cd756810d6903e73a31ac8c8d159a595713b5557eb4480662f4eafae0eb3b894094eeca90b59cd273c695ee549bc17b0bdcf18d2c70780859933e077e53b257e35d1d465282ab4d3e81987fa4e9d57d999028b6430348541cc0a92c0c338b27b6f3604471693db41da919ea20c"}]}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, r3, r3) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x9000000) 41.937262329s ago: executing program 5 (id=1299): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1020000, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, 0x0, 0x0, 0xffffffffffffff9c) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$sg(0x0, 0xf9ba, 0x14b082) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) 40.851743396s ago: executing program 6 (id=1300): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007663616e00000000", @ANYRES32], 0x3c}}, 0x0) 39.199029443s ago: executing program 8 (id=1301): mknod$loop(&(0x7f0000000400)='./file0\x00', 0x10, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000001001000001"], 0x10}, 0x8000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101402, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40186f40, &(0x7f0000000440)=0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000280)='rxrpc_local\x00', r3, 0x0, 0x5}, 0xfffffe2e) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7ffdd000, 0x8000}], 0x320000) r5 = socket$inet6(0xa, 0x80002, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80882, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) 37.746545398s ago: executing program 5 (id=1302): syz_open_procfs(0x0, &(0x7f00000003c0)='net/tcp\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x88) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x2d}, 0x28) close(r0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffb, 0x69, 0x515f3157, 0x4, "78e1141009f593233bce41f20613341f43d01f"}) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9500000007000000000000000000000000000200", @ANYRES32=0x0, @ANYBLOB="4022000000000000180012800b00010067656e657665000008000280"], 0x38}}, 0x0) setreuid(0xffffffffffffffff, 0xee00) setresuid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$UHID_INPUT(r5, &(0x7f0000001040)={0xd, {"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", 0x1000}}, 0x1006) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2000000, &(0x7f0000000400)={[{@noswap}, {@nr_inodes={'nr_inodes', 0x3d, [0x74]}}, {@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x31, 0x78, 0x31, 0x65, 0x32]}}, {@usrquota}, {@quota}, {@huge_always}, {@nr_blocks={'nr_blocks', 0x3d, [0x2d]}}, {@huge_within_size}, {@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x78, 0x6b, 0x78]}}, {@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}], [{@euid_eq}, {@obj_role={'obj_role', 0x3d, '\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '\x06!'}}, {@flag='nolazytime'}, {@dont_hash}, {@context={'context', 0x3d, 'user_u'}}, {@smackfsroot={'smackfsroot', 0x3d, '^[%-:-]$^(}^*\\'}}]}) 35.551404515s ago: executing program 5 (id=1303): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r6 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27"}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, 0x0) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0xc0383e04, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x7, &(0x7f00000000c0)="fdffffff", 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) getpeername$ax25(r5, &(0x7f00000003c0)={{0x3, @rose}, [@bcast, @rose, @default, @netrom, @netrom, @rose, @bcast]}, &(0x7f0000000440)=0x48) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="40000000100005ff00000000000000000000004a", @ANYBLOB="0909000000000000140012800b00010067656e6576650000040002800a0001", @ANYRESHEX=r8], 0x40}}, 0x0) 34.168899579s ago: executing program 7 (id=1304): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180), 0xe0d00, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) r2 = socket$inet(0x2, 0x3, 0x9) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x4b, 0x1, 0xffffffff, 0x6, 0x0) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x8, 0x4) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) fsopen(0x0, 0x0) r3 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000440)={0x80000000, 0xc011, 0x462}) r4 = fsmount(r3, 0x0, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000a00)=@newsa={0x1b0, 0x10, 0x1, 0x0, 0x0, {{@in=@private=0xa010101, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x36}, {0x0, 0x100, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xe3}, {0xfffffffffffffffd, 0x4, 0x8000000, 0x100000000}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd27, 0x0, 0x70bd2a, 0x70bd28}}, @algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "001a23f2cca40ff667f66a9bf8b2c200"}}]}, 0x1b0}}, 0x0) syz_open_dev$dmmidi(&(0x7f0000000300), 0x6, 0x70202) socket$nl_route(0x10, 0x3, 0x0) 32.495284277s ago: executing program 6 (id=1305): bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0xfffd, 0x0, @mcast2, 0x5}, 0x1c) sendto$inet6(r1, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000080), 0x4) 32.093651776s ago: executing program 5 (id=1306): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180), 0xe0d00, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) r2 = socket$inet(0x2, 0x3, 0x9) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x4b, 0x1, 0xffffffff, 0x6, 0x0) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x8, 0x4) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) fsopen(0x0, 0x0) r3 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000440)={0x80000000, 0xc011, 0x462}) r4 = fsmount(r3, 0x0, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000a00)=@newsa={0x1b0, 0x10, 0x1, 0x0, 0x0, {{@in=@private=0xa010101, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x36}, {0x0, 0x100, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xe3}, {0xfffffffffffffffd, 0x4, 0x8000000, 0x100000000}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd27, 0x0, 0x70bd2a, 0x70bd28}}, @algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "001a23f2cca40ff667f66a9bf8b2c200"}}]}, 0x1b0}}, 0x0) syz_open_dev$dmmidi(&(0x7f0000000300), 0x6, 0x70202) socket$nl_route(0x10, 0x3, 0x0) 30.131954666s ago: executing program 6 (id=1307): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x2, @empty, 0xa098}, {0xa, 0x4e21, 0x8000009, @mcast1}, r1, 0x4040099d}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 29.147906407s ago: executing program 7 (id=1308): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) fsopen(0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x11, 0xa, 0x300) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x2) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x5) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) syz_usbip_server_init(0x3) r1 = syz_io_uring_setup(0x42e6, &(0x7f0000000200)={0x0, 0x2b13, 0x10100, 0x0, 0x25c, 0x0, r0}, &(0x7f0000000180)=0x0, &(0x7f00000002c0)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x18, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r1, 0x7330, 0x0, 0x0, 0x0, 0x0) 28.527826672s ago: executing program 6 (id=1309): r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00', 0x32a}) mkdir(0x0, 0x0) truncate(0x0, 0x8fff5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$sndseq(r1, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x1, 0x20000006}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) close_range(r0, 0xffffffffffffffff, 0x400000000000000) 22.212443594s ago: executing program 37 (id=1301): mknod$loop(&(0x7f0000000400)='./file0\x00', 0x10, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000001001000001"], 0x10}, 0x8000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101402, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40186f40, &(0x7f0000000440)=0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000280)='rxrpc_local\x00', r3, 0x0, 0x5}, 0xfffffe2e) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7ffdd000, 0x8000}], 0x320000) r5 = socket$inet6(0xa, 0x80002, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80882, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) 21.745403447s ago: executing program 7 (id=1311): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c000000010101030000"], 0x4c}, 0x1, 0x0, 0x0, 0x40004}, 0x40004) 19.544717605s ago: executing program 6 (id=1312): read$FUSE(0xffffffffffffffff, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r0, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x10}}, 0x50) r1 = socket$inet6(0xa, 0x1, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, 0x0, 0x4814) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) r3 = syz_io_uring_setup(0x496, &(0x7f0000000f80)={0x0, 0x79af, 0x3180, 0x7ffc, 0x40024e}, &(0x7f0000000340), &(0x7f0000000080)=0x0) r5 = eventfd(0x401) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) r7 = syz_io_uring_setup(0x641a, &(0x7f0000000300)={0x0, 0x235d, 0x10100, 0x0, 0x400002d8, 0x0, r3}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)) syz_io_uring_submit(r8, r4, &(0x7f0000000140)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r1, 0x0, &(0x7f00000003c0)="936e4942c5ba89df80f0454969dc6239d9651771f399a0fde8b8e9f63f7c8011a88f42a3dbd710f0d604ca9de01174313d7cc8d3c6ffa94fc3e896c887f4104a344243e9f63fd9bf9e9fc592f5610420a2fbc3bd77e681327af22c56961c69bfe70d945f8256452933cac8aa66b6883e3ee49343206bbbd30efdba1327ee05bec86e9963b97c3c74fa3e23e00c36cf14b6ce346c2b47f89d208d9758443893e7e1c8fa760514a136d1c28ac5229d8653d76f037dc9159e5b22b2c71109d0c7513d4cd5f09e9c87a3063d866609629d6fbfa8ee3ec0a28aef17a3ccf808d3f66169539011bec0d1bb09db888c7e7b0556e5316bbe375a587c", 0xf8, 0x20000040}) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000040)=r5, 0x1) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x0) shutdown(r1, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r9 = openat$rfkill(0xffffff9c, 0x0, 0x8080, 0x0) r10 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000000)={0x80001001}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r7], 0x7c}, 0x1, 0x0, 0x0, 0x4880}, 0x4000000) socket$inet6(0xa, 0x3, 0x3c) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, 0x0) 15.830970046s ago: executing program 38 (id=1306): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180), 0xe0d00, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) r2 = socket$inet(0x2, 0x3, 0x9) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x4b, 0x1, 0xffffffff, 0x6, 0x0) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x8, 0x4) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) fsopen(0x0, 0x0) r3 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000440)={0x80000000, 0xc011, 0x462}) r4 = fsmount(r3, 0x0, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000a00)=@newsa={0x1b0, 0x10, 0x1, 0x0, 0x0, {{@in=@private=0xa010101, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x36}, {0x0, 0x100, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xe3}, {0xfffffffffffffffd, 0x4, 0x8000000, 0x100000000}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd27, 0x0, 0x70bd2a, 0x70bd28}}, @algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "001a23f2cca40ff667f66a9bf8b2c200"}}]}, 0x1b0}}, 0x0) syz_open_dev$dmmidi(&(0x7f0000000300), 0x6, 0x70202) socket$nl_route(0x10, 0x3, 0x0) 15.632003633s ago: executing program 6 (id=1314): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) 6.520843709s ago: executing program 39 (id=1311): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c000000010101030000"], 0x4c}, 0x1, 0x0, 0x0, 0x40004}, 0x40004) 0s ago: executing program 40 (id=1314): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): 'hsr' [ 674.235178][ T8632] Cannot create hsr debugfs directory [ 675.032274][ C1] vkms_vblank_simulate: vblank timer overrun [ 676.255971][ T8856] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 676.373138][ C1] vkms_vblank_simulate: vblank timer overrun [ 676.505667][ C1] vkms_vblank_simulate: vblank timer overrun [ 677.233058][ C1] vkms_vblank_simulate: vblank timer overrun [ 678.567014][ T5942] veth0_to_bond: left promiscuous mode [ 678.572697][ T5942] veth0_to_bond: left promiscuous mode [ 678.601527][ T5939] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 678.707053][ T8869] tmpfs: Unknown parameter 'mpol' [ 678.745921][ T7923] Bluetooth: hci0: link tx timeout [ 678.746337][ T7923] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 678.755031][ T5809] Bluetooth: hci0: link tx timeout [ 678.755048][ T5809] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 678.755688][ T5939] usb 6-1: Using ep0 maxpacket: 8 [ 678.757752][ T5939] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 678.757790][ T5939] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 678.757803][ T5939] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 678.757818][ T5939] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 678.757831][ T5939] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 678.757857][ T5939] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 678.757870][ T5939] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.766707][ T5809] Bluetooth: hci0: link tx timeout [ 678.766731][ T5809] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 678.770039][ T5809] Bluetooth: hci0: link tx timeout [ 678.770078][ T5809] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 678.785623][ T5809] Bluetooth: hci0: link tx timeout [ 678.791790][ T5809] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 678.791835][ T5809] Bluetooth: hci0: link tx timeout [ 678.791846][ T5809] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 678.802134][ T5809] Bluetooth: hci0: link tx timeout [ 678.802154][ T5809] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 679.291769][ T5939] usb 6-1: GET_CAPABILITIES returned 0 [ 679.291827][ T5939] usbtmc 6-1:16.0: can't read capabilities [ 679.359898][ T7998] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 679.374089][ T7998] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 679.390795][ T7998] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 679.394884][ T7998] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 679.410143][ T7998] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 679.537779][ T5939] usb 6-1: USB disconnect, device number 11 [ 680.775912][ T5809] Bluetooth: hci0: command 0x0406 tx timeout [ 681.233636][ T8615] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 681.300927][ T8615] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 681.366067][ T8615] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 681.495625][ T7923] Bluetooth: hci2: command tx timeout [ 681.543381][ T8615] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 683.635401][ T7923] Bluetooth: hci2: command tx timeout [ 684.295306][ T8632] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 684.389761][ T8570] bridge_slave_1: left allmulticast mode [ 684.389794][ T8570] bridge_slave_1: left promiscuous mode [ 684.390109][ T8570] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.527290][ T8570] bridge_slave_0: left allmulticast mode [ 684.527324][ T8570] bridge_slave_0: left promiscuous mode [ 684.527656][ T8570] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.963745][ T8898] 9pnet_virtio: no channels available for device syz [ 685.260102][ T8900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 685.328808][ T8900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 685.336191][ T8900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 685.571295][ T8570] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 685.665679][ T7923] Bluetooth: hci2: command tx timeout [ 685.717115][ T8570] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 685.777701][ T8570] bond0 (unregistering): Released all slaves [ 685.820344][ T8632] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 686.124073][ T8900] warning: `syz.4.620' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 686.143479][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.143552][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.166603][ T8632] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 686.275558][ T8632] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 686.311807][ T8871] chnl_net:caif_netlink_parms(): no params data found [ 686.495688][ T8570] hsr_slave_0: left promiscuous mode [ 686.536840][ T8570] hsr_slave_1: left promiscuous mode [ 686.538407][ T8570] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 686.566821][ T8570] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 687.554667][ T8914] ubi: mtd0 is already attached to ubi31 [ 687.744735][ T7923] Bluetooth: hci2: command tx timeout [ 688.335237][ T8917] ubi: mtd0 is already attached to ubi31 [ 689.923459][ T5809] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 689.943483][ T5809] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 689.965875][ T5809] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 689.967738][ T5809] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 689.968470][ T5809] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 690.516250][ T8570] team0 (unregistering): Port device team_slave_1 removed [ 690.786284][ T8570] team0 (unregistering): Port device team_slave_0 removed [ 691.267014][ T8925] random: crng reseeded on system resumption [ 692.055639][ T5809] Bluetooth: hci3: command tx timeout [ 692.462842][ T8632] kthread_run failed with err -4 [ 693.474431][ T7923] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 693.486398][ T7923] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 693.487951][ T7923] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 693.489521][ T7923] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 693.490571][ T7923] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 694.155592][ T7923] Bluetooth: hci3: command tx timeout [ 695.585770][ T7923] Bluetooth: hci4: command tx timeout [ 695.689745][ T8951] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 696.222540][ T7923] Bluetooth: hci3: command tx timeout [ 696.803922][ T8956] autofs: Unknown parameter 'fd00000000000000000000' [ 697.158244][ T8961] openvswitch: netlink: Message has 16 unknown bytes. [ 697.158287][ T8961] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 697.205026][ T8871] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.205174][ T8871] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.205362][ T8871] bridge_slave_0: entered allmulticast mode [ 697.305557][ T8871] bridge_slave_0: entered promiscuous mode [ 697.438486][ T8871] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.438650][ T8871] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.439061][ T8871] bridge_slave_1: entered allmulticast mode [ 697.453137][ T8871] bridge_slave_1: entered promiscuous mode [ 697.656049][ T7923] Bluetooth: hci4: command tx timeout [ 698.184809][ T8871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 698.242689][ T8871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 698.295597][ T7923] Bluetooth: hci3: command tx timeout [ 698.394561][ T8974] netlink: 28 bytes leftover after parsing attributes in process `syz.5.637'. [ 698.405691][ T994] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 698.555601][ T994] usb 5-1: Using ep0 maxpacket: 8 [ 698.558386][ T994] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 698.558455][ T994] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 698.558475][ T994] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 698.558490][ T994] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 698.558504][ T994] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 698.558531][ T994] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 698.558548][ T994] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.771954][ T994] usb 5-1: GET_CAPABILITIES returned 0 [ 698.771988][ T994] usbtmc 5-1:16.0: can't read capabilities [ 698.883539][ T8976] vlan2: entered allmulticast mode [ 698.883563][ T8976] veth0_to_bond: entered allmulticast mode [ 698.980948][ T5860] usb 5-1: USB disconnect, device number 11 [ 699.079295][ T8871] team0: Port device team_slave_0 added [ 699.507518][ T8871] team0: Port device team_slave_1 added [ 699.651000][ T8982] fuse: Unknown parameter ''+&ԗo6;mDxV_2Ehilj' [ 699.735574][ T7923] Bluetooth: hci4: command tx timeout [ 699.998781][ T8991] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 701.012019][ T8871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 701.012038][ T8871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 701.012067][ T8871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 701.113422][ T8871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 701.113595][ T8871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 701.113626][ T8871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 701.301676][ T9000] netlink: 28 bytes leftover after parsing attributes in process `syz.4.642'. [ 701.746594][ T9002] bond2: (slave veth0_to_bond): Releasing active interface [ 701.815665][ T7923] Bluetooth: hci4: command tx timeout [ 702.731131][ T9018] tmpfs: Unknown parameter 'mpol' [ 703.649459][ T8871] hsr_slave_0: entered promiscuous mode [ 703.651055][ T8871] hsr_slave_1: entered promiscuous mode [ 703.890724][ T8920] chnl_net:caif_netlink_parms(): no params data found [ 705.436587][ T8934] chnl_net:caif_netlink_parms(): no params data found [ 706.239408][ C1] vkms_vblank_simulate: vblank timer overrun [ 706.494876][ T9043] ubi: mtd0 is already attached to ubi31 [ 708.084460][ T8920] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.084721][ T8920] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.084935][ T8920] bridge_slave_0: entered allmulticast mode [ 708.122005][ T9050] netlink: 148 bytes leftover after parsing attributes in process `syz.4.651'. [ 708.122081][ T9050] netlink: 40 bytes leftover after parsing attributes in process `syz.4.651'. [ 708.155244][ T8920] bridge_slave_0: entered promiscuous mode [ 708.471591][ T8920] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.471778][ T8920] bridge0: port 2(bridge_slave_1) entered disabled state [ 708.472050][ T8920] bridge_slave_1: entered allmulticast mode [ 708.506050][ T8920] bridge_slave_1: entered promiscuous mode [ 708.679753][ T9056] fuse: Unknown parameter 'use00000000000000000000' [ 708.883545][ C1] vkms_vblank_simulate: vblank timer overrun [ 709.034906][ T9060] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 709.608524][ C1] vkms_vblank_simulate: vblank timer overrun [ 709.751014][ T9067] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 709.950083][ T8934] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.950196][ T8934] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.950354][ T8934] bridge_slave_0: entered allmulticast mode [ 709.952313][ T8934] bridge_slave_0: entered promiscuous mode [ 709.989193][ T8920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 710.196515][ T8934] bridge0: port 2(bridge_slave_1) entered blocking state [ 710.196634][ T8934] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.196817][ T8934] bridge_slave_1: entered allmulticast mode [ 710.198801][ T8934] bridge_slave_1: entered promiscuous mode [ 710.213902][ T8920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 710.846528][ T9072] netlink: 12 bytes leftover after parsing attributes in process `syz.5.657'. [ 711.042516][ T8934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 711.054583][ T8920] team0: Port device team_slave_0 added [ 711.238245][ T9075] bond2: (slave veth0_to_bond): Releasing active interface [ 711.548003][ T8934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 711.551465][ T8920] team0: Port device team_slave_1 added [ 713.229447][ T9087] fuse: Unknown parameter ''+&ԗo6;mDxV_2Ehilj' [ 713.916055][ T8934] team0: Port device team_slave_0 added [ 714.127911][ T8920] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 714.127925][ T8920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 714.127943][ T8920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 714.134037][ T8934] team0: Port device team_slave_1 added [ 714.139590][ T8920] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 714.139608][ T8920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 714.139633][ T8920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 714.525936][ T9097] fuse: Unknown parameter ''+&ԗo6;mDxV_2Ehilj' [ 714.868964][ T8934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 714.868984][ T8934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 714.869014][ T8934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 714.916234][ T8934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 714.916247][ T8934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 714.916264][ T8934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 715.285735][ T9100] random: crng reseeded on system resumption [ 715.384675][ T5805] hid-generic 0003:0003:0000.0006: unknown main item tag 0x0 [ 715.384701][ T5805] hid-generic 0003:0003:0000.0006: unknown main item tag 0x0 [ 715.384716][ T5805] hid-generic 0003:0003:0000.0006: unknown main item tag 0x0 [ 715.384731][ T5805] hid-generic 0003:0003:0000.0006: unknown main item tag 0x0 [ 715.384745][ T5805] hid-generic 0003:0003:0000.0006: unknown main item tag 0x0 [ 715.384760][ T5805] hid-generic 0003:0003:0000.0006: unknown main item tag 0x0 [ 715.384774][ T5805] hid-generic 0003:0003:0000.0006: unknown main item tag 0x0 [ 715.384795][ T5805] hid-generic 0003:0003:0000.0006: unknown main item tag 0x0 [ 715.384809][ T5805] hid-generic 0003:0003:0000.0006: unknown main item tag 0x0 [ 715.384824][ T5805] hid-generic 0003:0003:0000.0006: unknown main item tag 0x0 [ 715.495929][ T5805] hid-generic 0003:0003:0000.0006: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 715.691348][ T9104] fido_id[9104]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 715.857188][ T8920] hsr_slave_0: entered promiscuous mode [ 715.870344][ T8920] hsr_slave_1: entered promiscuous mode [ 715.871384][ T8920] debugfs: 'hsr0' already exists in 'hsr' [ 715.871408][ T8920] Cannot create hsr debugfs directory [ 716.447935][ T8934] hsr_slave_0: entered promiscuous mode [ 716.448944][ T8934] hsr_slave_1: entered promiscuous mode [ 716.449595][ T8934] debugfs: 'hsr0' already exists in 'hsr' [ 716.449632][ T8934] Cannot create hsr debugfs directory [ 716.855795][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 717.018079][ T9109] tmpfs: Unknown parameter 'mpol' [ 717.155778][ T8570] bridge_slave_1: left allmulticast mode [ 717.155803][ T8570] bridge_slave_1: left promiscuous mode [ 717.156009][ T8570] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.230023][ T8570] bridge_slave_0: left allmulticast mode [ 717.230044][ T8570] bridge_slave_0: left promiscuous mode [ 717.230237][ T8570] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.346932][ T8570] bridge_slave_1: left allmulticast mode [ 717.346967][ T8570] bridge_slave_1: left promiscuous mode [ 717.347246][ T8570] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.379770][ T9110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.666'. [ 717.379909][ T9110] netlink: 48 bytes leftover after parsing attributes in process `syz.4.666'. [ 717.438311][ T8570] bridge_slave_0: left allmulticast mode [ 717.438335][ T8570] bridge_slave_0: left promiscuous mode [ 717.438547][ T8570] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.126722][ T8570] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 718.217481][ T8570] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 718.377428][ T8570] bond0 (unregistering): Released all slaves [ 718.856955][ T8570] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 718.956279][ T8570] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 719.019211][ T8570] bond0 (unregistering): Released all slaves [ 719.443602][ T9112] netlink: 148 bytes leftover after parsing attributes in process `syz.5.667'. [ 719.443674][ T9112] netlink: 40 bytes leftover after parsing attributes in process `syz.5.667'. [ 719.463459][ T8871] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 719.563302][ T8871] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 719.682606][ T8871] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 719.683273][ T9120] random: crng reseeded on system resumption [ 720.310921][ T8871] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 722.337693][ T9131] ubi: mtd0 is already attached to ubi31 [ 722.415816][ T8570] hsr_slave_0: left promiscuous mode [ 723.358943][ T8570] hsr_slave_1: left promiscuous mode [ 723.359617][ T8570] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 723.420336][ T8570] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 723.672391][ T8570] hsr_slave_0: left promiscuous mode [ 723.685715][ T8570] hsr_slave_1: left promiscuous mode [ 723.686388][ T8570] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 723.735107][ T8570] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 724.881901][ T9145] 9pnet_virtio: no channels available for device syz [ 726.016259][ T8570] team0 (unregistering): Port device team_slave_1 removed [ 726.168313][ T8570] team0 (unregistering): Port device team_slave_0 removed [ 726.744550][ T9150] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 726.744583][ T9150] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 726.749991][ T9150] vhci_hcd vhci_hcd.0: Device attached [ 726.771216][ T9150] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(12) [ 726.771248][ T9150] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 726.771314][ T9150] vhci_hcd vhci_hcd.0: Device attached [ 726.774927][ T9150] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(14) [ 726.774955][ T9150] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 726.775109][ T9150] vhci_hcd vhci_hcd.0: Device attached [ 726.797959][ T9150] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(16) [ 726.797987][ T9150] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 726.798033][ T9150] vhci_hcd vhci_hcd.0: Device attached [ 726.808201][ T9150] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(18) [ 726.808228][ T9150] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 726.808278][ T9150] vhci_hcd vhci_hcd.0: Device attached [ 726.813494][ T9150] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(20) [ 726.813520][ T9150] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 726.813618][ T9150] vhci_hcd vhci_hcd.0: Device attached [ 726.815365][ T9150] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 726.826185][ T9150] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 726.827650][ T9150] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 726.856550][ T9150] vhci_hcd vhci_hcd.0: port 0 already used [ 726.889157][ T9161] vhci_hcd: connection closed [ 726.889775][ T7072] vhci_hcd: stop threads [ 726.889794][ T7072] vhci_hcd: release socket [ 726.889827][ T7072] vhci_hcd: disconnect device [ 726.890116][ T9159] vhci_hcd: connection closed [ 726.890631][ T7072] vhci_hcd: stop threads [ 726.890640][ T7072] vhci_hcd: release socket [ 726.890708][ T7072] vhci_hcd: disconnect device [ 726.891065][ T9157] vhci_hcd: connection closed [ 726.891409][ T7072] vhci_hcd: stop threads [ 726.891418][ T7072] vhci_hcd: release socket [ 726.891478][ T7072] vhci_hcd: disconnect device [ 726.894720][ T9151] vhci_hcd: connection closed [ 726.897429][ T9155] vhci_hcd: connection closed [ 726.899796][ T9153] vhci_hcd: connection closed [ 726.900139][ T7072] vhci_hcd: stop threads [ 726.900150][ T7072] vhci_hcd: release socket [ 726.900358][ T7072] vhci_hcd: disconnect device [ 726.900472][ T7072] vhci_hcd: stop threads [ 726.900478][ T7072] vhci_hcd: release socket [ 726.900647][ T7072] vhci_hcd: disconnect device [ 726.901253][ T7072] vhci_hcd: stop threads [ 726.901262][ T7072] vhci_hcd: release socket [ 726.901429][ T7072] vhci_hcd: disconnect device [ 726.925789][ T5939] vhci_hcd: vhci_device speed not set [ 727.611901][ T8570] team0 (unregistering): Port device team_slave_1 removed [ 727.766667][ T8570] team0 (unregistering): Port device team_slave_0 removed [ 729.910709][ T994] hid_parser_main: 8 callbacks suppressed [ 729.910728][ T994] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 729.916180][ T994] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 730.338657][ T9188] netlink: 'syz.5.685': attribute type 1 has an invalid length. [ 730.422911][ T9188] 8021q: adding VLAN 0 to HW filter on device bond3 [ 730.534508][ T9190] bond3: (slave veth5): Enslaving as an active interface with an up link [ 730.559979][ T9188] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 731.091690][ T9195] ubi: mtd0 is already attached to ubi31 [ 731.332476][ T8871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 731.612609][ T8871] 8021q: adding VLAN 0 to HW filter on device team0 [ 731.731174][ T6497] bridge0: port 1(bridge_slave_0) entered blocking state [ 731.731354][ T6497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 731.879121][ T141] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.881925][ T141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 732.137358][ T9207] netlink: 148 bytes leftover after parsing attributes in process `syz.4.688'. [ 732.137429][ T9207] netlink: 40 bytes leftover after parsing attributes in process `syz.4.688'. [ 733.545106][ T43] Bluetooth: (null): Invalid header checksum [ 733.547142][ T43] Bluetooth: (null): Invalid header checksum [ 736.919076][ T9238] random: crng reseeded on system resumption [ 737.127945][ T8871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 737.251390][ T8920] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 737.327764][ T8920] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 738.426315][ T8920] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 738.838538][ T8920] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 739.094293][ T8934] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 739.137317][ T8934] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 739.200121][ T8934] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 739.241714][ T8934] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 740.064308][ T5809] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 740.073130][ C1] vkms_vblank_simulate: vblank timer overrun [ 740.097767][ T5809] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 740.100496][ T5809] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 740.102628][ T5809] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 740.105066][ T5809] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 740.489419][ T8920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 740.656069][ T9290] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 740.656289][ T9290] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 740.658952][ T9290] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 740.659256][ T9290] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 740.659564][ T9290] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 740.659650][ T9290] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 740.660077][ T9290] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 740.660167][ T9290] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 740.660490][ T9290] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 740.660579][ T9290] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 741.234103][ T8920] 8021q: adding VLAN 0 to HW filter on device team0 [ 741.408916][ T9301] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 742.235784][ T5809] Bluetooth: hci0: command tx timeout [ 743.391676][ T5942] Bluetooth: (null): Invalid header checksum [ 743.391782][ T5942] Bluetooth: (null): Invalid header checksum [ 743.391900][ T5942] Bluetooth: (null): Invalid header checksum [ 743.783867][ T8934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 743.811921][ T8570] bridge0: port 1(bridge_slave_0) entered blocking state [ 743.812539][ T8570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 743.892144][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state [ 743.895926][ T5942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 744.328884][ T5809] Bluetooth: hci0: command tx timeout [ 745.735866][ T9336] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 748.633885][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.633970][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.639334][ T5809] Bluetooth: hci0: command tx timeout [ 749.192164][ T8934] 8021q: adding VLAN 0 to HW filter on device team0 [ 750.649914][ T9365] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 750.701332][ T5809] Bluetooth: hci0: command tx timeout [ 750.907819][ T7923] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 750.928919][ T7923] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 750.930461][ T7923] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 750.932363][ T7923] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 750.971312][ T7923] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 751.123597][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.143015][ T5942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 751.384024][ T9277] chnl_net:caif_netlink_parms(): no params data found [ 751.437748][ T1127] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.438030][ T1127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 752.868642][ T7923] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 752.871990][ T7923] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 752.873561][ T7923] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 752.893398][ T7923] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 752.906274][ T7923] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 753.012765][ T9277] bridge0: port 1(bridge_slave_0) entered blocking state [ 753.013029][ T9277] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.013288][ T9277] bridge_slave_0: entered allmulticast mode [ 753.018117][ T5809] Bluetooth: hci2: command tx timeout [ 753.050756][ T9277] bridge_slave_0: entered promiscuous mode [ 753.084459][ T9277] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.084610][ T9277] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.084836][ T9277] bridge_slave_1: entered allmulticast mode [ 753.109900][ T9277] bridge_slave_1: entered promiscuous mode [ 753.957583][ T9277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 754.031955][ T9277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 755.017873][ T5809] Bluetooth: hci3: command tx timeout [ 755.091342][ T9420] netlink: 256 bytes leftover after parsing attributes in process `syz.5.717'. [ 755.095755][ T5809] Bluetooth: hci2: command tx timeout [ 755.243513][ T9277] team0: Port device team_slave_0 added [ 755.447486][ T9277] team0: Port device team_slave_1 added [ 756.037351][ T9429] ubi: mtd0 is already attached to ubi31 [ 757.095633][ T5809] Bluetooth: hci3: command tx timeout [ 757.175855][ T5809] Bluetooth: hci2: command tx timeout [ 757.455833][ T9277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 757.455847][ T9277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 757.455863][ T9277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 757.562957][ T9277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 757.562970][ T9277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 757.562986][ T9277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 757.629777][ T12] bridge_slave_1: left allmulticast mode [ 757.629808][ T12] bridge_slave_1: left promiscuous mode [ 757.630059][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.706732][ T12] bridge_slave_0: left allmulticast mode [ 757.706754][ T12] bridge_slave_0: left promiscuous mode [ 757.706942][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 759.218031][ T5809] Bluetooth: hci3: command tx timeout [ 759.265574][ T5809] Bluetooth: hci2: command tx timeout [ 759.961813][ T9442] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 761.255748][ T5809] Bluetooth: hci3: command tx timeout [ 761.469327][ T9454] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 762.368179][ T9456] ALSA: mixer_oss: invalid OSS volume 'Y{UDD ' [ 762.368199][ T9456] ALSA: mixer_oss: invalid OSS volume 'ߧ4cT󯆩"m!lT.Π' [ 762.368208][ T9456] ALSA: mixer_oss: invalid OSS volume 'lg' [ 762.368217][ T9456] ALSA: mixer_oss: invalid OSS volume ')nkKi,rWY\ZV?J`G' [ 762.368238][ T9456] ALSA: mixer_oss: invalid OSS volume 'kO0$g{pl{y;_ARW' [ 762.368247][ T9456] ALSA: mixer_oss: invalid OSS volume '' [ 762.368258][ T9456] ALSA: mixer_oss: invalid OSS volume 'sv Fu{Qby>h%w]' [ 762.368270][ T9456] ALSA: mixer_oss: invalid OSS volume 'E= v?@48@hL' [ 762.368278][ T9456] ALSA: mixer_oss: invalid OSS volume '+?>3Iq0:iq|UDř' [ 762.368291][ T9456] ALSA: mixer_oss: invalid OSS volume 'vӷ*xrN0ܗcAdh' [ 762.368299][ T9456] ALSA: mixer_oss: invalid OSS volume 'JM %H' [ 764.226251][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 764.309175][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 764.348322][ T12] bond0 (unregistering): Released all slaves [ 764.732339][ T9467] netlink: 'syz.5.729': attribute type 1 has an invalid length. [ 766.067904][ T12] hsr_slave_0: left promiscuous mode [ 766.106702][ T12] hsr_slave_1: left promiscuous mode [ 766.107429][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 766.132307][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 767.198675][ T9487] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 767.198706][ T9487] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 767.201597][ T9487] vhci_hcd vhci_hcd.0: Device attached [ 767.204622][ T9487] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(12) [ 767.204651][ T9487] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 767.204775][ T9487] vhci_hcd vhci_hcd.0: Device attached [ 767.208917][ T9487] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(14) [ 767.208942][ T9487] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 767.209092][ T9487] vhci_hcd vhci_hcd.0: Device attached [ 767.211898][ T9487] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(16) [ 767.211919][ T9487] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 767.211961][ T9487] vhci_hcd vhci_hcd.0: Device attached [ 767.214575][ T9487] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(18) [ 767.214596][ T9487] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 767.214715][ T9487] vhci_hcd vhci_hcd.0: Device attached [ 767.223416][ T9487] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(20) [ 767.223440][ T9487] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 767.223824][ T9487] vhci_hcd vhci_hcd.0: Device attached [ 767.225038][ T9487] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 767.228490][ T9487] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 767.229661][ T9487] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 767.232958][ T9487] vhci_hcd vhci_hcd.0: port 0 already used [ 767.280871][ T9498] vhci_hcd: connection closed [ 767.281573][ T6497] vhci_hcd: stop threads [ 767.281592][ T6497] vhci_hcd: release socket [ 767.281626][ T6497] vhci_hcd: disconnect device [ 767.282495][ T9494] vhci_hcd: connection closed [ 767.282778][ T9496] vhci_hcd: connection closed [ 767.283030][ T9492] vhci_hcd: connection closed [ 767.283295][ T9490] vhci_hcd: connection closed [ 767.290297][ T9488] vhci_hcd: connection closed [ 767.290809][ T6497] vhci_hcd: stop threads [ 767.290819][ T6497] vhci_hcd: release socket [ 767.291966][ T6497] vhci_hcd: disconnect device [ 767.292292][ T6497] vhci_hcd: stop threads [ 767.292301][ T6497] vhci_hcd: release socket [ 767.292331][ T6497] vhci_hcd: disconnect device [ 767.293957][ T6497] vhci_hcd: stop threads [ 767.293967][ T6497] vhci_hcd: release socket [ 767.293998][ T6497] vhci_hcd: disconnect device [ 767.294284][ T6497] vhci_hcd: stop threads [ 767.294292][ T6497] vhci_hcd: release socket [ 767.294320][ T6497] vhci_hcd: disconnect device [ 767.294589][ T6497] vhci_hcd: stop threads [ 767.294596][ T6497] vhci_hcd: release socket [ 767.294625][ T6497] vhci_hcd: disconnect device [ 768.752511][ T9511] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 770.036533][ T12] team0 (unregistering): Port device team_slave_1 removed [ 770.366705][ T12] team0 (unregistering): Port device team_slave_0 removed [ 770.486844][ T9522] netlink: 'syz.4.737': attribute type 1 has an invalid length. [ 773.484697][ T9277] hsr_slave_0: entered promiscuous mode [ 773.487680][ T9277] hsr_slave_1: entered promiscuous mode [ 773.604581][ T9366] chnl_net:caif_netlink_parms(): no params data found [ 775.354203][ T9547] capability: warning: `syz.4.740' uses deprecated v2 capabilities in a way that may be insecure [ 776.346141][ T9366] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.347629][ T9366] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.347810][ T9366] bridge_slave_0: entered allmulticast mode [ 776.350021][ T9366] bridge_slave_0: entered promiscuous mode [ 776.395232][ T9397] chnl_net:caif_netlink_parms(): no params data found [ 776.461375][ T9366] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.461482][ T9366] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.461666][ T9366] bridge_slave_1: entered allmulticast mode [ 776.487378][ T9366] bridge_slave_1: entered promiscuous mode [ 778.428697][ T9366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 778.630093][ T9366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 779.258590][ T9366] team0: Port device team_slave_0 added [ 779.479800][ T9366] team0: Port device team_slave_1 added [ 779.502880][ T9570] net_ratelimit: 68 callbacks suppressed [ 779.502897][ T9570] openvswitch: netlink: Flow key attr not present in new flow. [ 779.578548][ T9254] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 779.599493][ T9254] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 779.750970][ T9397] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.755904][ T9397] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.756191][ T9397] bridge_slave_0: entered allmulticast mode [ 779.759374][ T9397] bridge_slave_0: entered promiscuous mode [ 780.026754][ T9397] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.026879][ T9397] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.027097][ T9397] bridge_slave_1: entered allmulticast mode [ 780.029268][ T9397] bridge_slave_1: entered promiscuous mode [ 780.513224][ T9366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 780.513243][ T9366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 780.513271][ T9366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 783.473977][ T9366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 783.473998][ T9366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 783.474025][ T9366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 784.323881][ T9397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 784.448713][ T9609] netlink: 'syz.5.753': attribute type 1 has an invalid length. [ 784.450782][ T9397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 785.093573][ T9611] input: syz1 as /devices/virtual/input/input10 [ 786.319553][ T9366] hsr_slave_0: entered promiscuous mode [ 786.321469][ T9366] hsr_slave_1: entered promiscuous mode [ 786.322794][ T9366] debugfs: 'hsr0' already exists in 'hsr' [ 786.322822][ T9366] Cannot create hsr debugfs directory [ 786.364112][ T9397] team0: Port device team_slave_0 added [ 786.928375][ T9397] team0: Port device team_slave_1 added [ 787.630552][ T9634] netlink: 20 bytes leftover after parsing attributes in process `syz.5.758'. [ 787.813945][ T9397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 787.813986][ T9397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 787.814011][ T9397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 787.921114][ T9397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 787.921133][ T9397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 787.921160][ T9397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 789.947910][ T13] Bluetooth: (null): Invalid header checksum [ 789.948024][ T13] Bluetooth: (null): Invalid header checksum [ 789.948688][ T13] Bluetooth: (null): Invalid header checksum [ 789.977832][ T9397] hsr_slave_0: entered promiscuous mode [ 789.979467][ T9397] hsr_slave_1: entered promiscuous mode [ 789.980565][ T9397] debugfs: 'hsr0' already exists in 'hsr' [ 789.980592][ T9397] Cannot create hsr debugfs directory [ 791.131548][ T9277] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 793.221376][ T9663] ubi: mtd0 is already attached to ubi31 [ 793.862178][ T9277] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 794.108984][ T9277] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 794.622925][ T9670] ubi: mtd0 is already attached to ubi31 [ 794.945899][ T9277] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 799.494833][ T6014] Bluetooth: (null): Invalid header checksum [ 799.516422][ T6014] Bluetooth: (null): Invalid header checksum [ 799.610090][ T6014] Bluetooth: (null): Invalid header checksum [ 800.114784][ T3569] Bluetooth: (null): Invalid header checksum [ 800.644609][ T9686] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 803.106635][ T7923] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 803.158067][ T7923] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 803.161833][ T7923] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 803.163699][ T7923] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 803.164647][ T7923] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 805.342055][ C1] vkms_vblank_simulate: vblank timer overrun [ 805.342657][ T5809] Bluetooth: hci0: command tx timeout [ 806.001564][ C1] vkms_vblank_simulate: vblank timer overrun [ 806.161235][ T9722] net veth1_virt_wifi : renamed from virt_wifi0 [ 806.189983][ T7072] bridge_slave_1: left allmulticast mode [ 806.190015][ T7072] bridge_slave_1: left promiscuous mode [ 806.190299][ T7072] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.283706][ C1] vkms_vblank_simulate: vblank timer overrun [ 806.366912][ T7072] bridge_slave_0: left allmulticast mode [ 806.366936][ T7072] bridge_slave_0: left promiscuous mode [ 806.367133][ T7072] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.449222][ T7072] bridge_slave_1: left allmulticast mode [ 806.449246][ T7072] bridge_slave_1: left promiscuous mode [ 806.449413][ T7072] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.518088][ T7072] bridge_slave_0: left allmulticast mode [ 806.518121][ T7072] bridge_slave_0: left promiscuous mode [ 806.518403][ T7072] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.763281][ C1] vkms_vblank_simulate: vblank timer overrun [ 806.967694][ C1] vkms_vblank_simulate: vblank timer overrun [ 807.431757][ C1] vkms_vblank_simulate: vblank timer overrun [ 807.435781][ T5809] Bluetooth: hci0: command tx timeout [ 807.630974][ C1] vkms_vblank_simulate: vblank timer overrun [ 807.681572][ C1] vkms_vblank_simulate: vblank timer overrun [ 807.730650][ C1] vkms_vblank_simulate: vblank timer overrun [ 807.930943][ C1] vkms_vblank_simulate: vblank timer overrun [ 807.981075][ C1] vkms_vblank_simulate: vblank timer overrun [ 808.035301][ C1] vkms_vblank_simulate: vblank timer overrun [ 808.150754][ C1] vkms_vblank_simulate: vblank timer overrun [ 808.201056][ C1] vkms_vblank_simulate: vblank timer overrun [ 808.368895][ T7072] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 808.467498][ T7072] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 808.558073][ T7072] bond0 (unregistering): Released all slaves [ 808.743358][ C1] vkms_vblank_simulate: vblank timer overrun [ 808.851959][ C1] vkms_vblank_simulate: vblank timer overrun [ 809.025067][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.025147][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.495819][ T5809] Bluetooth: hci0: command tx timeout [ 810.082671][ T9734] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 810.082711][ T9734] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 810.100940][ T9734] vhci_hcd vhci_hcd.0: Device attached [ 810.136302][ T9734] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(12) [ 810.136333][ T9734] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 810.136393][ T9734] vhci_hcd vhci_hcd.0: Device attached [ 810.141194][ T9734] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(14) [ 810.141226][ T9734] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 810.141289][ T9734] vhci_hcd vhci_hcd.0: Device attached [ 810.144467][ T9734] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(16) [ 810.144494][ T9734] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 810.144552][ T9734] vhci_hcd vhci_hcd.0: Device attached [ 810.166275][ T9734] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(18) [ 810.166302][ T9734] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 810.166351][ T9734] vhci_hcd vhci_hcd.0: Device attached [ 810.169131][ T9734] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(20) [ 810.169153][ T9734] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 810.169409][ T9734] vhci_hcd vhci_hcd.0: Device attached [ 810.170567][ T9734] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 810.171722][ T9734] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 810.172735][ T9734] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 810.209328][ T9739] vhci_hcd: connection closed [ 810.209835][ T9737] vhci_hcd: connection closed [ 810.211739][ T9735] vhci_hcd: connection closed [ 810.212023][ T9745] vhci_hcd: connection closed [ 810.212278][ T9743] vhci_hcd: connection closed [ 810.212739][ T141] vhci_hcd: stop threads [ 810.212755][ T141] vhci_hcd: release socket [ 810.212829][ T141] vhci_hcd: disconnect device [ 810.213113][ T141] vhci_hcd: stop threads [ 810.213121][ T141] vhci_hcd: release socket [ 810.213150][ T141] vhci_hcd: disconnect device [ 810.215771][ T9741] vhci_hcd: connection closed [ 810.226223][ T141] vhci_hcd: stop threads [ 810.226243][ T141] vhci_hcd: release socket [ 810.226318][ T141] vhci_hcd: disconnect device [ 810.226704][ T141] vhci_hcd: stop threads [ 810.226712][ T141] vhci_hcd: release socket [ 810.226742][ T141] vhci_hcd: disconnect device [ 810.227022][ T141] vhci_hcd: stop threads [ 810.227030][ T141] vhci_hcd: release socket [ 810.227090][ T141] vhci_hcd: disconnect device [ 810.227424][ T141] vhci_hcd: stop threads [ 810.227432][ T141] vhci_hcd: release socket [ 810.227492][ T141] vhci_hcd: disconnect device [ 810.275887][ T5805] vhci_hcd: vhci_device speed not set [ 810.532870][ T7072] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 810.558289][ T7923] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 810.563173][ T7923] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 810.564417][ T7923] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 810.573110][ T7923] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 810.591101][ T7923] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 810.658495][ T7072] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 810.728978][ T7072] bond0 (unregistering): Released all slaves [ 811.635637][ T5809] Bluetooth: hci0: command tx timeout [ 811.802000][ T9754] ubi: mtd0 is already attached to ubi31 [ 812.615619][ T5809] Bluetooth: hci4: command tx timeout [ 812.725657][ T7072] hsr_slave_0: left promiscuous mode [ 812.765773][ T7072] hsr_slave_1: left promiscuous mode [ 812.766515][ T7072] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 812.806866][ T7072] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 812.945802][ T7072] hsr_slave_0: left promiscuous mode [ 812.985728][ T7072] hsr_slave_1: left promiscuous mode [ 812.986494][ T7072] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 813.009677][ T7072] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 813.437375][ T9769] netlink: 'syz.5.785': attribute type 1 has an invalid length. [ 814.652737][ T9780] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 814.695647][ T5809] Bluetooth: hci4: command tx timeout [ 815.146813][ T7072] team0 (unregistering): Port device team_slave_1 removed [ 815.340920][ T7072] team0 (unregistering): Port device team_slave_0 removed [ 815.414091][ T9784] netlink: 'syz.4.787': attribute type 1 has an invalid length. [ 816.293747][ T7923] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 816.322068][ T7923] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 816.324138][ T7923] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 816.368338][ T7923] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 816.369318][ T7923] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 816.817254][ T7923] Bluetooth: hci4: command tx timeout [ 818.126084][ T7072] team0 (unregistering): Port device team_slave_1 removed [ 818.281484][ T7072] team0 (unregistering): Port device team_slave_0 removed [ 818.461443][ T7923] Bluetooth: hci6: command tx timeout [ 818.857172][ T7923] Bluetooth: hci4: command tx timeout [ 820.220041][ T9769] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 820.236448][ T9784] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 820.479421][ T9708] chnl_net:caif_netlink_parms(): no params data found [ 820.535764][ T7923] Bluetooth: hci6: command tx timeout [ 821.437963][ T9808] netlink: 'syz.5.791': attribute type 1 has an invalid length. [ 822.615779][ T7923] Bluetooth: hci6: command tx timeout [ 824.048271][ T9832] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 824.695808][ T7923] Bluetooth: hci6: command tx timeout [ 825.061470][ T9835] netlink: 'syz.5.795': attribute type 1 has an invalid length. [ 825.705824][ T9708] bridge0: port 1(bridge_slave_0) entered blocking state [ 825.705990][ T9708] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.706295][ T9708] bridge_slave_0: entered allmulticast mode [ 825.708955][ T9708] bridge_slave_0: entered promiscuous mode [ 828.498251][ T9836] bond7: (slave bridge2): making interface the new active one [ 828.499118][ T9836] bond7: (slave bridge2): Enslaving as an active interface with an up link [ 828.555696][ T9708] bridge0: port 2(bridge_slave_1) entered blocking state [ 828.555839][ T9708] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.556080][ T9708] bridge_slave_1: entered allmulticast mode [ 828.559011][ T9708] bridge_slave_1: entered promiscuous mode [ 829.273826][ T9708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 829.979715][ T9708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 830.323064][ T9864] netlink: 76 bytes leftover after parsing attributes in process `syz.5.802'. [ 831.902771][ T9708] team0: Port device team_slave_0 added [ 832.234423][ T9747] chnl_net:caif_netlink_parms(): no params data found [ 832.267671][ T9708] team0: Port device team_slave_1 added [ 833.336840][ T9884] netlink: 'syz.4.805': attribute type 1 has an invalid length. [ 833.370809][ T9882] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 834.516171][ T9892] netlink: 'syz.5.806': attribute type 1 has an invalid length. [ 835.360226][ T9708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 835.360239][ T9708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 835.360255][ T9708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 835.520801][ T9708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 835.520821][ T9708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 835.520847][ T9708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 836.874862][ T8570] Bluetooth: (null): Invalid header checksum [ 836.875004][ T8570] Bluetooth: (null): Invalid header checksum [ 836.875095][ T8570] Bluetooth: (null): Invalid header checksum [ 837.826432][ T9747] bridge0: port 1(bridge_slave_0) entered blocking state [ 837.826595][ T9747] bridge0: port 1(bridge_slave_0) entered disabled state [ 837.826868][ T9747] bridge_slave_0: entered allmulticast mode [ 837.830037][ T9747] bridge_slave_0: entered promiscuous mode [ 837.927072][ T9708] hsr_slave_0: entered promiscuous mode [ 837.932700][ T9708] hsr_slave_1: entered promiscuous mode [ 837.938653][ T9708] debugfs: 'hsr0' already exists in 'hsr' [ 837.938682][ T9708] Cannot create hsr debugfs directory [ 838.076010][ T9747] bridge0: port 2(bridge_slave_1) entered blocking state [ 838.076235][ T9747] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.076660][ T9747] bridge_slave_1: entered allmulticast mode [ 838.095776][ T9747] bridge_slave_1: entered promiscuous mode [ 841.947848][ T9790] chnl_net:caif_netlink_parms(): no params data found [ 842.747933][ T9747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 842.972253][ T9747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 844.083854][ T9938] netlink: 'syz.5.815': attribute type 1 has an invalid length. [ 844.855780][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 845.126158][ T9941] bond9: (slave bridge4): making interface the new active one [ 845.127190][ T9941] bond9: (slave bridge4): Enslaving as an active interface with an up link [ 845.215702][ T31] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 845.285136][ T9747] team0: Port device team_slave_0 added [ 845.405600][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 845.412054][ T31] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 845.412089][ T31] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 845.412113][ T31] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 845.412136][ T31] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 845.412179][ T31] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 845.412201][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.550948][ T9747] team0: Port device team_slave_1 added [ 845.693210][ T31] usb 5-1: GET_CAPABILITIES returned 0 [ 845.693244][ T31] usbtmc 5-1:16.0: can't read capabilities [ 845.982094][ C0] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 845.982952][ T9956] usbtmc 5-1:16.0: Unable to send data, error -71 [ 846.012035][ T31] usb 5-1: USB disconnect, device number 12 [ 846.266497][ T9790] bridge0: port 1(bridge_slave_0) entered blocking state [ 846.266654][ T9790] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.266918][ T9790] bridge_slave_0: entered allmulticast mode [ 846.279070][ T9790] bridge_slave_0: entered promiscuous mode [ 846.282664][ T9747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 846.282681][ T9747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 846.282733][ T9747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 846.372952][ T9790] bridge0: port 2(bridge_slave_1) entered blocking state [ 846.373041][ T9790] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.373217][ T9790] bridge_slave_1: entered allmulticast mode [ 846.374961][ T9790] bridge_slave_1: entered promiscuous mode [ 846.379253][ T9747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 846.379270][ T9747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 846.379295][ T9747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 847.010274][ T9790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 847.264582][ T9790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 849.317189][ T9747] hsr_slave_0: entered promiscuous mode [ 849.318926][ T9747] hsr_slave_1: entered promiscuous mode [ 849.323178][ T9747] debugfs: 'hsr0' already exists in 'hsr' [ 849.323209][ T9747] Cannot create hsr debugfs directory [ 849.718089][ T9790] team0: Port device team_slave_0 added [ 849.772806][ T9790] team0: Port device team_slave_1 added [ 850.685134][ T9982] netlink: 'syz.4.823': attribute type 1 has an invalid length. [ 850.971607][ T9982] 8021q: adding VLAN 0 to HW filter on device bond5 [ 850.983401][ T9790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 850.983414][ T9790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 850.983430][ T9790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 850.993323][ T9983] bond5: (slave veth0_to_bond): making interface the new active one [ 850.995010][ T9983] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 851.074718][ T9790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 851.074736][ T9790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 851.074762][ T9790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 852.659394][ T7072] bridge_slave_1: left allmulticast mode [ 852.659429][ T7072] bridge_slave_1: left promiscuous mode [ 852.659726][ T7072] bridge0: port 2(bridge_slave_1) entered disabled state [ 852.689602][ T9991] netlink: 256 bytes leftover after parsing attributes in process `syz.5.826'. [ 852.715194][ T9993] netlink: 'syz.4.825': attribute type 1 has an invalid length. [ 852.746915][ T7072] bridge_slave_0: left allmulticast mode [ 852.746937][ T7072] bridge_slave_0: left promiscuous mode [ 852.747160][ T7072] bridge0: port 1(bridge_slave_0) entered disabled state [ 853.274194][ T7072] bridge_slave_1: left allmulticast mode [ 853.274218][ T7072] bridge_slave_1: left promiscuous mode [ 853.274392][ T7072] bridge0: port 2(bridge_slave_1) entered disabled state [ 853.366577][ T7072] bridge_slave_0: left allmulticast mode [ 853.366601][ T7072] bridge_slave_0: left promiscuous mode [ 853.366788][ T7072] bridge0: port 1(bridge_slave_0) entered disabled state [ 853.428466][ T7072] bridge_slave_1: left allmulticast mode [ 853.428491][ T7072] bridge_slave_1: left promiscuous mode [ 853.428662][ T7072] bridge0: port 2(bridge_slave_1) entered disabled state [ 853.498185][ T7072] bridge_slave_0: left allmulticast mode [ 853.498211][ T7072] bridge_slave_0: left promiscuous mode [ 853.498388][ T7072] bridge0: port 1(bridge_slave_0) entered disabled state [ 853.806218][ T7072] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 853.886868][ T7072] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 853.948088][ T7072] bond0 (unregistering): Released all slaves [ 854.136609][ T7072] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 854.236682][ T7072] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 854.298755][ T7072] bond0 (unregistering): Released all slaves [ 854.546196][ T7072] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 854.636184][ T7072] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 854.704034][ T7072] bond0 (unregistering): Released all slaves [ 855.430966][ T9790] hsr_slave_0: entered promiscuous mode [ 855.431931][ T9790] hsr_slave_1: entered promiscuous mode [ 855.432586][ T9790] debugfs: 'hsr0' already exists in 'hsr' [ 855.432603][ T9790] Cannot create hsr debugfs directory [ 857.093085][T10014] input: syz1 as /devices/virtual/input/input11 [ 857.225993][ T7072] hsr_slave_0: left promiscuous mode [ 857.266461][ T7072] hsr_slave_1: left promiscuous mode [ 857.267204][ T7072] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 857.308990][ T7072] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 857.925581][ T7072] hsr_slave_0: left promiscuous mode [ 857.945802][ T7072] hsr_slave_1: left promiscuous mode [ 857.946628][ T7072] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 857.996575][ T7072] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 858.145895][ T7072] hsr_slave_0: left promiscuous mode [ 858.167598][ T7072] hsr_slave_1: left promiscuous mode [ 858.169015][ T7072] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 858.206977][ T7072] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 859.476262][T10026] netlink: 256 bytes leftover after parsing attributes in process `syz.4.834'. [ 859.686077][ T7072] team0 (unregistering): Port device team_slave_1 removed [ 859.818988][ T7072] team0 (unregistering): Port device team_slave_0 removed [ 860.938386][ T7072] team0 (unregistering): Port device team_slave_1 removed [ 861.076191][ T7072] team0 (unregistering): Port device team_slave_0 removed [ 862.230653][ T7072] team0 (unregistering): Port device team_slave_1 removed [ 862.414442][ T7072] team0 (unregistering): Port device team_slave_0 removed [ 862.426716][ T5809] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 862.472928][ T5809] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 862.477435][ T5809] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 862.479699][ T5809] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 862.480486][ T5809] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 864.558422][ T7923] Bluetooth: hci2: command tx timeout [ 865.307498][T10047] netlink: 'syz.4.838': attribute type 1 has an invalid length. [ 866.345229][T10047] bond7: (slave bridge1): making interface the new active one [ 866.358978][T10047] bond7: (slave bridge1): Enslaving as an active interface with an up link [ 866.628652][ T7923] Bluetooth: hci2: command tx timeout [ 868.241441][ T9747] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 868.320039][T10063] netlink: 'syz.5.841': attribute type 1 has an invalid length. [ 868.461608][T10067] ubi: mtd0 is already attached to ubi31 [ 868.714847][ T7923] Bluetooth: hci2: command tx timeout [ 868.996477][ T9747] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 869.230292][ T9747] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 869.619631][T10063] bond10: (slave bridge5): making interface the new active one [ 869.624092][T10063] bond10: (slave bridge5): Enslaving as an active interface with an up link [ 869.624157][ T9747] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 870.466553][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.466638][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.788576][ T9790] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 870.945521][ T9790] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 870.989351][T10032] chnl_net:caif_netlink_parms(): no params data found [ 871.018402][ T7923] Bluetooth: hci2: command tx timeout [ 871.132282][ T9790] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 871.325624][ T9790] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 872.095169][ T5809] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 872.108005][ T5809] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 872.112367][ T5809] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 872.113734][ T5809] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 872.114616][ T5809] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 873.001642][T10101] netlink: 256 bytes leftover after parsing attributes in process `syz.5.844'. [ 873.121374][T10032] bridge0: port 1(bridge_slave_0) entered blocking state [ 873.121622][T10032] bridge0: port 1(bridge_slave_0) entered disabled state [ 873.121800][T10032] bridge_slave_0: entered allmulticast mode [ 873.123555][T10032] bridge_slave_0: entered promiscuous mode [ 873.179910][T10032] bridge0: port 2(bridge_slave_1) entered blocking state [ 873.180059][T10032] bridge0: port 2(bridge_slave_1) entered disabled state [ 873.180334][T10032] bridge_slave_1: entered allmulticast mode [ 873.183557][T10032] bridge_slave_1: entered promiscuous mode [ 873.532616][T10032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 873.574491][T10032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 873.921456][T10032] team0: Port device team_slave_0 added [ 874.134314][T10032] team0: Port device team_slave_1 added [ 874.135962][ T5809] Bluetooth: hci0: command tx timeout [ 875.285345][T10117] fuse: Unknown parameter ''+&ԗo6;mDxV_2Ehilj' [ 875.372658][T10032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 875.375185][T10032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 875.375219][T10032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 876.016231][T10032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 876.016250][T10032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 876.016277][T10032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 876.217355][ T7923] Bluetooth: hci0: command tx timeout [ 876.246452][T10125] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 876.249521][T10125] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 876.252209][T10125] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 876.253781][T10125] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 876.254777][T10125] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 876.391173][T10126] fuse: Unknown parameter ''+&ԗo6;mDxV_2Ehilj' [ 877.930819][T10032] hsr_slave_0: entered promiscuous mode [ 877.936396][T10032] hsr_slave_1: entered promiscuous mode [ 878.365488][T10125] Bluetooth: hci0: command tx timeout [ 878.382601][T10125] Bluetooth: hci3: command tx timeout [ 878.517290][T10140] ubi: mtd0 is already attached to ubi31 [ 878.750843][T10143] netlink: 'syz.5.852': attribute type 1 has an invalid length. [ 878.910512][T10143] 8021q: adding VLAN 0 to HW filter on device bond11 [ 879.268091][T10145] bond3: (slave veth0_to_bond): Releasing backup interface [ 879.310984][T10145] bond11: (slave veth0_to_bond): making interface the new active one [ 879.316816][T10145] bond11: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 879.667452][T10094] chnl_net:caif_netlink_parms(): no params data found [ 880.209039][ T7072] bridge_slave_1: left allmulticast mode [ 880.209073][ T7072] bridge_slave_1: left promiscuous mode [ 880.209474][ T7072] bridge0: port 2(bridge_slave_1) entered disabled state [ 880.288391][ T7072] bridge_slave_0: left allmulticast mode [ 880.288426][ T7072] bridge_slave_0: left promiscuous mode [ 880.288734][ T7072] bridge0: port 1(bridge_slave_0) entered disabled state [ 880.375550][T10125] Bluetooth: hci0: command tx timeout [ 880.417178][ T7072] bridge_slave_1: left allmulticast mode [ 880.417202][ T7072] bridge_slave_1: left promiscuous mode [ 880.417378][ T7072] bridge0: port 2(bridge_slave_1) entered disabled state [ 880.465699][T10125] Bluetooth: hci3: command tx timeout [ 880.548113][ T7072] bridge_slave_0: left allmulticast mode [ 880.548146][ T7072] bridge_slave_0: left promiscuous mode [ 880.548438][ T7072] bridge0: port 1(bridge_slave_0) entered disabled state [ 880.591311][T10154] netlink: 256 bytes leftover after parsing attributes in process `syz.4.854'. [ 881.057006][ T7072] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 881.188407][T10160] netlink: 'syz.5.855': attribute type 1 has an invalid length. [ 881.189683][ T7072] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 881.260464][ T7072] bond0 (unregistering): Released all slaves [ 881.517197][ T7072] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 881.596172][ T7072] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 881.657999][ T7072] bond0 (unregistering): Released all slaves [ 881.833132][T10160] 8021q: adding VLAN 0 to HW filter on device bond12 [ 881.886683][T10162] bond11: (slave veth0_to_bond): Releasing active interface [ 881.971414][T10162] bond12: (slave veth0_to_bond): making interface the new active one [ 881.972700][T10162] bond12: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 882.536608][T10125] Bluetooth: hci3: command tx timeout [ 883.001860][T10094] bridge0: port 1(bridge_slave_0) entered blocking state [ 883.002880][T10094] bridge0: port 1(bridge_slave_0) entered disabled state [ 883.006187][T10094] bridge_slave_0: entered allmulticast mode [ 883.010038][T10094] bridge_slave_0: entered promiscuous mode [ 883.235664][ T7072] hsr_slave_0: left promiscuous mode [ 883.259868][ T7072] hsr_slave_1: left promiscuous mode [ 883.261361][ T7072] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 883.296475][ T7072] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 883.307308][T10173] orangefs_mount: mount request failed with -4 [ 884.395585][ T7072] hsr_slave_0: left promiscuous mode [ 884.615531][T10125] Bluetooth: hci3: command tx timeout [ 884.645725][ T7072] hsr_slave_1: left promiscuous mode [ 884.646873][ T7072] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 884.686264][ T7072] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 885.782713][ C1] vkms_vblank_simulate: vblank timer overrun [ 885.882138][ C1] vkms_vblank_simulate: vblank timer overrun [ 885.923227][ C1] vkms_vblank_simulate: vblank timer overrun [ 885.968469][ T7072] team0 (unregistering): Port device team_slave_1 removed [ 886.007692][ C1] vkms_vblank_simulate: vblank timer overrun [ 886.136475][ T7072] team0 (unregistering): Port device team_slave_0 removed [ 886.182041][ C1] vkms_vblank_simulate: vblank timer overrun [ 886.475329][ C1] vkms_vblank_simulate: vblank timer overrun [ 886.544339][ C1] vkms_vblank_simulate: vblank timer overrun [ 886.557268][T10196] netlink: 256 bytes leftover after parsing attributes in process `syz.5.864'. [ 886.612105][ C1] vkms_vblank_simulate: vblank timer overrun [ 887.059228][ C1] vkms_vblank_simulate: vblank timer overrun [ 887.278898][ C1] vkms_vblank_simulate: vblank timer overrun [ 887.406127][ T7072] team0 (unregistering): Port device team_slave_1 removed [ 887.491636][ C1] vkms_vblank_simulate: vblank timer overrun [ 887.561243][ T7072] team0 (unregistering): Port device team_slave_0 removed [ 888.179434][T10094] bridge0: port 2(bridge_slave_1) entered blocking state [ 888.179546][T10094] bridge0: port 2(bridge_slave_1) entered disabled state [ 888.179744][T10094] bridge_slave_1: entered allmulticast mode [ 888.181582][T10094] bridge_slave_1: entered promiscuous mode [ 888.412901][ C1] vkms_vblank_simulate: vblank timer overrun [ 888.559997][T10094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 888.671692][T10094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 888.677812][T10207] netlink: 'syz.5.866': attribute type 1 has an invalid length. [ 888.765199][ C1] vkms_vblank_simulate: vblank timer overrun [ 889.456403][ C1] vkms_vblank_simulate: vblank timer overrun [ 889.581354][ C1] vkms_vblank_simulate: vblank timer overrun [ 889.645896][ C1] vkms_vblank_simulate: vblank timer overrun [ 890.789800][ C1] vkms_vblank_simulate: vblank timer overrun [ 890.871880][T10094] team0: Port device team_slave_0 added [ 890.925024][T10032] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 891.019426][T10094] team0: Port device team_slave_1 added [ 891.046551][T10123] chnl_net:caif_netlink_parms(): no params data found [ 891.089894][T10032] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 891.262259][T10032] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 891.412014][ C1] vkms_vblank_simulate: vblank timer overrun [ 891.524973][T10032] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 891.570692][T10094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 891.570712][T10094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 891.570740][T10094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 891.730250][T10094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 891.730269][T10094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 891.730299][T10094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 891.946218][ C1] vkms_vblank_simulate: vblank timer overrun [ 892.076241][ C1] vkms_vblank_simulate: vblank timer overrun [ 892.299811][ C1] vkms_vblank_simulate: vblank timer overrun [ 892.377353][ C1] vkms_vblank_simulate: vblank timer overrun [ 892.534973][T10244] netlink: 256 bytes leftover after parsing attributes in process `syz.5.873'. [ 892.637949][T10123] bridge0: port 1(bridge_slave_0) entered blocking state [ 892.638197][T10123] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.638359][T10123] bridge_slave_0: entered allmulticast mode [ 892.640373][T10123] bridge_slave_0: entered promiscuous mode [ 892.680279][T10094] hsr_slave_0: entered promiscuous mode [ 892.682077][T10094] hsr_slave_1: entered promiscuous mode [ 892.682800][T10094] debugfs: 'hsr0' already exists in 'hsr' [ 892.682817][T10094] Cannot create hsr debugfs directory [ 892.683190][T10123] bridge0: port 2(bridge_slave_1) entered blocking state [ 892.683343][T10123] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.683626][T10123] bridge_slave_1: entered allmulticast mode [ 892.687953][T10123] bridge_slave_1: entered promiscuous mode [ 893.050666][T10123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 893.175663][T10123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 893.470874][T10123] team0: Port device team_slave_0 added [ 893.501962][T10123] team0: Port device team_slave_1 added [ 894.933493][T10123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 894.933513][T10123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 894.933541][T10123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 895.164219][ C1] vkms_vblank_simulate: vblank timer overrun [ 895.325785][ C1] vkms_vblank_simulate: vblank timer overrun [ 895.429151][T10262] fuse: Unknown parameter ''+&ԗo6;mDxV_2Ehilj' [ 895.582346][ C1] vkms_vblank_simulate: vblank timer overrun [ 896.886586][T10123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 896.886616][T10123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 896.886646][T10123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 897.173872][ C1] vkms_vblank_simulate: vblank timer overrun [ 897.765169][T10123] hsr_slave_0: entered promiscuous mode [ 897.784492][T10123] hsr_slave_1: entered promiscuous mode [ 897.827441][T10123] debugfs: 'hsr0' already exists in 'hsr' [ 897.827465][T10123] Cannot create hsr debugfs directory [ 900.519619][T10032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 900.550861][ T7072] bridge_slave_1: left allmulticast mode [ 900.550884][ T7072] bridge_slave_1: left promiscuous mode [ 900.551061][ T7072] bridge0: port 2(bridge_slave_1) entered disabled state [ 900.642758][T10287] netlink: 356 bytes leftover after parsing attributes in process `syz.5.885'. [ 900.657701][ T7072] bridge_slave_0: left allmulticast mode [ 900.657723][ T7072] bridge_slave_0: left promiscuous mode [ 900.657923][ T7072] bridge0: port 1(bridge_slave_0) entered disabled state [ 901.266396][ T7072] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 901.386532][ T7072] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 901.631998][ T7072] bond0 (unregistering): Released all slaves [ 902.787078][T10298] netlink: 'syz.4.888': attribute type 1 has an invalid length. [ 903.334694][T10298] 8021q: adding VLAN 0 to HW filter on device bond8 [ 904.009223][T10305] netlink: 'syz.5.890': attribute type 1 has an invalid length. [ 904.077284][T10299] bond8: (slave veth9): Enslaving as an active interface with a down link [ 904.292420][T10306] bond14: (slave vcan1): The slave device specified does not support setting the MAC address [ 904.292447][T10306] bond14: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 904.300547][T10306] bond14: (slave vcan1): making interface the new active one [ 904.301855][T10306] bond14: (slave vcan1): Enslaving as an active interface with an up link [ 904.312438][T10094] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 904.445958][ T7072] hsr_slave_0: left promiscuous mode [ 905.495489][ T7072] hsr_slave_1: left promiscuous mode [ 905.496626][ T7072] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 905.526155][ T7072] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 906.130346][ T5805] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 906.370293][ T5805] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 908.031363][T10325] fido_id[10325]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 908.717363][ T7072] team0 (unregistering): Port device team_slave_1 removed [ 908.897009][ T7072] team0 (unregistering): Port device team_slave_0 removed [ 909.559267][T10032] 8021q: adding VLAN 0 to HW filter on device team0 [ 909.658561][T10094] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 909.707119][T10094] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 909.777814][T10094] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 910.096512][ T5805] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 910.296028][ T5805] usb 6-1: Using ep0 maxpacket: 8 [ 910.317443][ T5805] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 910.317477][ T5805] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.611133][ T1127] bridge0: port 1(bridge_slave_0) entered blocking state [ 910.611462][ T1127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 910.659099][ T5805] usb 6-1: config 0 descriptor?? [ 911.266017][ T5805] asix 6-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 911.500089][ T1127] bridge0: port 2(bridge_slave_1) entered blocking state [ 911.500449][ T1127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 911.578746][T10349] random: crng reseeded on system resumption [ 913.673128][ T5805] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 913.673711][ T5805] asix 6-1:0.0: probe with driver asix failed with error -71 [ 913.836468][ T5805] usb 6-1: USB disconnect, device number 12 [ 913.914658][T10371] netlink: 356 bytes leftover after parsing attributes in process `syz.4.901'. [ 914.245162][T10123] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 914.341818][T10123] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 914.387727][T10123] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 914.546055][T10123] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 914.730698][T10094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 914.946056][T10032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 915.124914][T10094] 8021q: adding VLAN 0 to HW filter on device team0 [ 915.167268][ T6497] bridge0: port 1(bridge_slave_0) entered blocking state [ 915.168029][ T6497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 915.287489][ T6497] bridge0: port 2(bridge_slave_1) entered blocking state [ 915.287713][ T6497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 916.359070][T10401] orangefs_mount: mount request failed with -4 [ 916.980832][T10123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 917.247752][T10123] 8021q: adding VLAN 0 to HW filter on device team0 [ 917.401544][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 917.401782][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 917.465324][ T1127] bridge0: port 2(bridge_slave_1) entered blocking state [ 917.480456][ T1127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 917.666930][T10032] veth0_vlan: entered promiscuous mode [ 917.772782][T10032] veth1_vlan: entered promiscuous mode [ 918.318695][T10094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 918.387427][T10032] veth0_macvtap: entered promiscuous mode [ 918.451033][T10032] veth1_macvtap: entered promiscuous mode [ 918.701774][T10032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 918.733985][T10032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 918.842135][ T6497] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.842446][ T6497] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.842720][ T6497] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.842993][ T6497] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.212099][ T1127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 920.212116][ T1127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 920.340145][T10452] netlink: 356 bytes leftover after parsing attributes in process `syz.5.909'. [ 920.587644][T10123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 920.682783][ T8570] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 920.682853][ T8570] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 921.020718][T10094] veth0_vlan: entered promiscuous mode [ 921.213193][T10094] veth1_vlan: entered promiscuous mode [ 921.652620][T10094] veth0_macvtap: entered promiscuous mode [ 921.768654][T10094] veth1_macvtap: entered promiscuous mode [ 921.944037][T10094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 922.003293][T10094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 922.202690][ T6014] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.215163][ T6014] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.228120][ T6014] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.234487][ T6497] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.250845][ T5942] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 923.250868][ T5942] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 923.469115][T10123] veth0_vlan: entered promiscuous mode [ 923.502451][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 923.502473][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 923.594363][T10123] veth1_vlan: entered promiscuous mode [ 923.766639][T10123] veth0_macvtap: entered promiscuous mode [ 923.774192][T10123] veth1_macvtap: entered promiscuous mode [ 923.827591][T10123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 923.884139][T10123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 923.932918][ T7072] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.961556][ T5874] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 923.977223][ T5874] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 923.997177][ T7072] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.004332][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.004995][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.413428][T10501] random: crng reseeded on system resumption [ 924.918266][T10506] 9pnet_virtio: no channels available for device syz [ 926.032956][T10496] fido_id[10496]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/0000:0000:0000.000A/report_descriptor': No such device [ 926.911874][ T6497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 926.911898][ T6497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 927.807708][ T8011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 927.807733][ T8011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 928.540369][T10540] bond1: entered promiscuous mode [ 928.540401][T10540] bond1: entered allmulticast mode [ 928.541074][T10540] 8021q: adding VLAN 0 to HW filter on device bond1 [ 929.066348][T10530] netlink: 72 bytes leftover after parsing attributes in process `syz.8.922'. [ 933.213474][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 933.213558][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 934.595859][ T31] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 934.604420][ T31] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 936.553887][T10589] fido_id[10589]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 938.828628][ C1] vkms_vblank_simulate: vblank timer overrun [ 939.195848][T10611] netlink: 256 bytes leftover after parsing attributes in process `syz.5.937'. [ 941.586306][ T5860] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 942.030901][ T5860] usb 6-1: Using ep0 maxpacket: 8 [ 942.063285][ T5860] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 942.063319][ T5860] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.122700][ T5860] usb 6-1: config 0 descriptor?? [ 942.528263][ T5860] asix 6-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 945.212659][T10654] Device name not specified. [ 945.212659][T10654] [ 945.637199][ T5860] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 945.637522][ T5860] asix 6-1:0.0: probe with driver asix failed with error -71 [ 945.667303][ T5860] usb 6-1: USB disconnect, device number 13 [ 947.422999][T10693] fuse: Bad value for 'fd' [ 948.028089][T10699] random: crng reseeded on system resumption [ 949.546326][T10709] netlink: 356 bytes leftover after parsing attributes in process `syz.5.959'. [ 950.996055][T10737] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 951.407215][T10727] netlink: 356 bytes leftover after parsing attributes in process `syz.4.963'. [ 951.680599][T10743] fuse: Bad value for 'fd' [ 952.179690][T10755] netlink: 356 bytes leftover after parsing attributes in process `syz.7.969'. [ 953.442972][ T5874] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 953.466951][ T5874] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 954.266112][T10783] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 954.825313][T10789] overlayfs: missing 'lowerdir' [ 956.421691][T10806] fuse: Bad value for 'fd' [ 961.206068][T10843] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 963.780095][T10862] fuse: Unknown parameter '0x0000000000000003' [ 967.077289][T10887] netlink: 'syz.6.1000': attribute type 1 has an invalid length. [ 969.170046][ T5805] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 969.197915][ T5805] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 969.569032][T10919] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 970.263200][T10924] netlink: 'syz.6.1006': attribute type 1 has an invalid length. [ 971.036296][T10933] fuse: Unknown parameter '0x0000000000000003' [ 971.440235][T10938] 9pnet_virtio: no channels available for device syz [ 972.724455][T10946] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 972.883922][T10950] netlink: 'syz.6.1013': attribute type 1 has an invalid length. [ 974.802046][T10972] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 975.708456][T10984] netlink: 'syz.7.1019': attribute type 1 has an invalid length. [ 975.751943][ T978] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 975.771029][T10985] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1019'. [ 975.777108][ T978] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 976.884443][T10996] fuse: Unknown parameter '0x0000000000000003' [ 977.845123][T11009] random: crng reseeded on system resumption [ 978.782830][T11022] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 979.986687][T11030] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 980.500566][ T5874] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 980.583418][T11039] net veth1_virt_wifi : renamed from virt_wifi0 [ 980.955529][ T5874] usb 6-1: Using ep0 maxpacket: 8 [ 980.958160][ T5874] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 980.958223][ T5874] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 980.958252][ T5874] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 980.958277][ T5874] usb 6-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 980.958323][ T5874] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 980.958347][ T5874] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.982709][ T5874] usbtmc 6-1:16.0: bulk endpoints not found [ 983.440505][ T5805] usb 6-1: USB disconnect, device number 14 [ 985.428412][T10125] Bluetooth: hci2: command 0x0406 tx timeout [ 986.259790][T11085] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 988.555923][ T5860] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 989.679081][ T5860] usb 9-1: Using ep0 maxpacket: 8 [ 989.711347][ T5860] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 989.711382][ T5860] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.757108][ T5860] usb 9-1: config 0 descriptor?? [ 989.991560][ T5860] asix 9-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 990.655481][ T5939] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 990.807435][ T5939] usb 6-1: Using ep0 maxpacket: 8 [ 990.813580][ T5939] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 990.813603][ T5939] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 990.813617][ T5939] usb 6-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 990.813630][ T5939] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 990.813659][ T5939] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 990.813672][ T5939] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.927823][ T5939] usbtmc 6-1:16.0: bulk endpoints not found [ 992.095074][ T5860] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 992.095601][ T5860] asix 9-1:0.0: probe with driver asix failed with error -71 [ 993.356131][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.356218][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.629198][ T5860] usb 9-1: USB disconnect, device number 2 [ 993.872052][T10486] usb 6-1: USB disconnect, device number 15 [ 995.483603][ T994] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 995.635548][T10125] Bluetooth: hci0: command 0x0406 tx timeout [ 995.686468][ T994] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 997.360444][ T978] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 997.401084][ T978] hid-generic 0000:0000:0000.0010: hidraw1: HID v0.00 Device [syz1] on syz0 [ 998.321348][T11174] fido_id[11174]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1000.545760][T10125] Bluetooth: hci3: command 0x0406 tx timeout [ 1000.615654][ T5939] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1000.835436][ T5939] usb 7-1: Using ep0 maxpacket: 8 [ 1000.837959][ T5939] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1000.837996][ T5939] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1000.838021][ T5939] usb 7-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1000.838043][ T5939] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1000.838088][ T5939] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1000.838111][ T5939] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.977551][ T5939] usbtmc 7-1:16.0: bulk endpoints not found [ 1003.474070][T11221] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1003.507492][ T5939] usb 7-1: USB disconnect, device number 2 [ 1005.115654][T11229] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 1007.207629][T11247] overlayfs: missing 'workdir' [ 1007.311012][T11245] netlink: 356 bytes leftover after parsing attributes in process `syz.6.1070'. [ 1012.385673][T10486] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1012.536655][T10486] usb 5-1: Using ep0 maxpacket: 8 [ 1012.539560][T10486] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1012.539598][T10486] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1012.539623][T10486] usb 5-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1012.539645][T10486] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1012.539692][T10486] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1012.539716][T10486] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.676247][T10486] usbtmc 5-1:16.0: bulk endpoints not found [ 1012.842895][T11285] netlink: 256 bytes leftover after parsing attributes in process `syz.8.1079'. [ 1013.105991][T11291] netlink: 'syz.6.1081': attribute type 1 has an invalid length. [ 1013.216563][T11297] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1081'. [ 1013.247940][T11295] fuse: Bad value for 'fd' [ 1013.411999][T11291] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1013.953179][T11311] overlayfs: missing 'workdir' [ 1014.180257][T11296] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1015.533416][ T5939] usb 5-1: USB disconnect, device number 13 [ 1015.620109][T11325] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 1015.835560][ T5874] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1015.985687][ T5874] usb 9-1: Using ep0 maxpacket: 32 [ 1015.991805][ T5874] usb 9-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1015.991838][ T5874] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.019435][ T5874] usb 9-1: config 0 descriptor?? [ 1016.136363][ T5874] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1016.684400][T11340] netlink: 'syz.5.1090': attribute type 1 has an invalid length. [ 1017.309501][ T5874] gspca_nw80x: reg_w err -110 [ 1017.310591][ T5874] nw80x 9-1:0.0: probe with driver nw80x failed with error -110 [ 1018.488834][T11359] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1093'. [ 1019.457795][ T5874] usb 9-1: USB disconnect, device number 3 [ 1022.734413][T11373] overlayfs: missing 'lowerdir' [ 1023.204356][T11379] net veth1_virt_wifi : renamed from virt_wifi0 [ 1024.246272][ T5874] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1024.415453][ T5874] usb 5-1: Using ep0 maxpacket: 8 [ 1024.418318][ T5874] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1024.418353][ T5874] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1024.418379][ T5874] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1024.418402][ T5874] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1024.418427][ T5874] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1024.418471][ T5874] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1024.418495][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1024.443549][ T5874] usbtmc 5-1:16.0: probe with driver usbtmc failed with error -22 [ 1026.551004][T11403] netlink: 277 bytes leftover after parsing attributes in process `syz.8.1105'. [ 1026.665652][T11405] netlink: 'syz.7.1106': attribute type 1 has an invalid length. [ 1026.875926][ T31] usb 5-1: USB disconnect, device number 14 [ 1027.026994][T11413] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1108'. [ 1027.504379][T11423] overlayfs: missing 'lowerdir' [ 1029.597912][T11413] ieee80211 phy31: Failed to add default virtual iface [ 1031.133293][ T5874] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1031.148458][ T5874] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1031.337147][T11451] netlink: 277 bytes leftover after parsing attributes in process `syz.7.1117'. [ 1032.518410][T11458] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1032.749478][T11464] overlayfs: missing 'lowerdir' [ 1037.859632][T11485] binder: 11484:11485 ioctl c0306201 0 returned -14 [ 1038.006788][T11490] netlink: 277 bytes leftover after parsing attributes in process `syz.8.1129'. [ 1038.048523][T11488] netlink: 356 bytes leftover after parsing attributes in process `syz.7.1128'. [ 1039.897587][T11502] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1039.897663][T11502] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1040.315739][T11508] overlay: Unknown parameter '/' [ 1041.304308][T11516] netlink: 356 bytes leftover after parsing attributes in process `syz.8.1133'. [ 1042.383751][ T994] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1042.396690][ T994] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1042.567268][T11537] netlink: 277 bytes leftover after parsing attributes in process `syz.7.1141'. [ 1042.851982][T11543] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1044.809475][T11549] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 1046.587356][ T5805] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1046.610029][ T5805] hid-generic 0000:0000:0000.0013: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1051.291504][T11586] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1052.575068][T11590] netlink: 277 bytes leftover after parsing attributes in process `syz.6.1155'. [ 1056.026366][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1056.026452][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1057.805594][ T978] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1058.357494][ T978] usb 9-1: Using ep0 maxpacket: 8 [ 1058.360972][ T978] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1058.361005][ T978] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.412017][ T978] usb 9-1: config 0 descriptor?? [ 1058.662776][ T978] asix 9-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1059.931756][T11630] netlink: 'syz.5.1166': attribute type 1 has an invalid length. [ 1060.826531][T11632] netlink: 277 bytes leftover after parsing attributes in process `syz.6.1168'. [ 1060.977965][T11639] bond16: (slave bridge6): making interface the new active one [ 1060.979458][T11639] bond16: (slave bridge6): Enslaving as an active interface with an up link [ 1061.362514][ T978] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1061.362873][ T978] asix 9-1:0.0: probe with driver asix failed with error -71 [ 1061.664237][ T978] usb 9-1: USB disconnect, device number 4 [ 1066.248615][T11672] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 1067.075609][ T5939] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1067.245984][ T5939] usb 6-1: Using ep0 maxpacket: 8 [ 1067.251600][ T5939] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1067.251620][ T5939] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.297670][ T5939] usb 6-1: config 0 descriptor?? [ 1067.627377][ T5939] asix 6-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1067.680104][T11680] netlink: 277 bytes leftover after parsing attributes in process `syz.6.1179'. [ 1067.828678][ T5939] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1067.828708][ T5939] asix 6-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 1067.828909][ T5939] asix 6-1:0.0: probe with driver asix failed with error -61 [ 1070.747015][ T994] usb 6-1: USB disconnect, device number 16 [ 1074.928891][T11715] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 1076.364035][T11722] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1191'. [ 1077.101406][T11734] netlink: 356 bytes leftover after parsing attributes in process `syz.8.1193'. [ 1077.766799][T11739] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1077.767029][T11739] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1078.265425][ T31] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1078.436386][ T31] usb 6-1: Using ep0 maxpacket: 32 [ 1078.832641][ T31] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1078.832674][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1078.885589][ T31] usb 6-1: config 0 descriptor?? [ 1078.902250][ T31] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1080.869276][ T31] gspca_nw80x: reg_w err -110 [ 1080.869353][ T31] nw80x 6-1:0.0: probe with driver nw80x failed with error -110 [ 1081.317864][ T994] usb 6-1: USB disconnect, device number 17 [ 1085.068315][ T31] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 1085.086415][ T31] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1085.306783][T11785] netlink: 277 bytes leftover after parsing attributes in process `syz.8.1206'. [ 1085.391456][ T994] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1085.396239][ T994] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1085.862581][T11788] fido_id[11788]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1087.856652][T11794] fido_id[11794]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1088.203805][T11796] tmpfs: Unknown parameter 'mpol' [ 1088.232906][T11796] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1209'. [ 1088.233098][T11796] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1209'. [ 1089.599778][T11796] geneve2: entered promiscuous mode [ 1089.599808][T11796] geneve2: entered allmulticast mode [ 1090.517168][T10125] Bluetooth: hci3: command 0x0406 tx timeout [ 1093.720686][T10486] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1094.488005][T11842] 9pnet_virtio: no channels available for device syz [ 1094.940880][T10486] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1095.158520][T11843] netlink: 277 bytes leftover after parsing attributes in process `syz.8.1221'. [ 1095.834349][T11844] fido_id[11844]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1097.944477][ C0] vkms_vblank_simulate: vblank timer overrun [ 1099.180982][ C0] vkms_vblank_simulate: vblank timer overrun [ 1099.321234][T11876] netlink: 'syz.7.1230': attribute type 1 has an invalid length. [ 1099.635395][ C0] vkms_vblank_simulate: vblank timer overrun [ 1099.846402][ C0] vkms_vblank_simulate: vblank timer overrun [ 1100.312985][T11876] bond3: (slave bridge1): making interface the new active one [ 1100.347608][T11876] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 1100.819350][ C0] vkms_vblank_simulate: vblank timer overrun [ 1101.427748][ C0] vkms_vblank_simulate: vblank timer overrun [ 1101.816188][T11893] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1103.541324][T11908] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1103.625412][T10486] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1103.783015][T10486] usb 9-1: Using ep0 maxpacket: 8 [ 1103.784843][T10486] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1103.784886][T10486] usb 9-1: config 0 has no interface number 0 [ 1103.784918][T10486] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1103.784944][T10486] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1103.784958][T10486] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.854544][T10486] usb 9-1: config 0 descriptor?? [ 1103.924920][T10486] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1104.229250][T10486] usb 9-1: USB disconnect, device number 5 [ 1105.621006][T11938] ubi: mtd0 is already attached to ubi31 [ 1105.975516][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1112.345463][ T978] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1112.505415][ T978] usb 8-1: Using ep0 maxpacket: 8 [ 1112.539791][ T978] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1112.539819][ T978] usb 8-1: config 0 has no interface number 0 [ 1112.539859][ T978] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1112.539890][ T978] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1112.539904][ T978] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.627768][ T978] usb 8-1: config 0 descriptor?? [ 1112.725712][ T978] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1112.850261][ T994] usb 8-1: USB disconnect, device number 2 [ 1115.198084][T11998] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1115.201955][T11998] overlayfs: failed to resolve './file1': -2 [ 1115.428468][ C0] vkms_vblank_simulate: vblank timer overrun [ 1115.437007][T10486] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1115.852660][ C0] vkms_vblank_simulate: vblank timer overrun [ 1115.875407][T10486] usb 7-1: Using ep0 maxpacket: 32 [ 1115.877484][T10486] usb 7-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1115.877512][T10486] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1115.914903][T10486] usb 7-1: config 0 descriptor?? [ 1115.940194][T10486] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1116.201107][ C0] vkms_vblank_simulate: vblank timer overrun [ 1116.223517][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.223633][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.740894][ C0] vkms_vblank_simulate: vblank timer overrun [ 1117.038433][ C0] vkms_vblank_simulate: vblank timer overrun [ 1118.558425][T10486] gspca_nw80x: reg_w err -110 [ 1118.558541][T10486] nw80x 7-1:0.0: probe with driver nw80x failed with error -110 [ 1119.578997][T12016] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 1119.702135][T12017] ubi: mtd0 is already attached to ubi31 [ 1119.875397][ T9251] usb 7-1: USB disconnect, device number 3 [ 1124.210443][T12030] netlink: 'syz.4.1263': attribute type 1 has an invalid length. [ 1130.813371][ T31] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1131.032845][ T31] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1133.076254][T12084] ubi: mtd0 is already attached to ubi31 [ 1139.396076][T12100] netlink: 356 bytes leftover after parsing attributes in process `syz.7.1279'. [ 1144.065229][T12113] ubi: mtd0 is already attached to ubi31 [ 1161.559640][T12158] 9pnet_virtio: no channels available for device syz [ 1164.221569][T10125] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1165.042909][T10125] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1165.044628][T10125] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1165.057812][T10125] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1165.059522][T10125] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1165.388097][T12172] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1300'. [ 1165.388126][T12172] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1300'. [ 1167.185523][T10125] Bluetooth: hci1: command tx timeout [ 1167.785972][T12182] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 1168.427212][T12179] ubi: mtd0 is already attached to ubi31 [ 1169.484100][T10125] Bluetooth: hci1: command tx timeout [ 1171.425571][T12188] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1303'. [ 1171.925510][T10125] Bluetooth: hci1: command tx timeout [ 1173.992837][T10125] Bluetooth: hci1: command tx timeout [ 1175.731738][T12203] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(13) [ 1175.731759][T12203] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1175.731821][T12203] vhci_hcd vhci_hcd.0: Device attached [ 1175.762999][T12203] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(15) [ 1175.763030][T12203] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1175.763082][T12203] vhci_hcd vhci_hcd.0: Device attached [ 1175.785476][T12202] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(10) [ 1175.785503][T12202] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1175.785565][T12202] vhci_hcd vhci_hcd.0: Device attached [ 1175.804712][T12203] vhci_hcd vhci_hcd.0: pdev(7) rhport(3) sockfd(17) [ 1175.804739][T12203] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1175.804791][T12203] vhci_hcd vhci_hcd.0: Device attached [ 1175.820988][T12202] vhci_hcd vhci_hcd.0: pdev(7) rhport(4) sockfd(12) [ 1175.821017][T12202] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1175.821078][T12202] vhci_hcd vhci_hcd.0: Device attached [ 1175.906172][T12202] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(20) [ 1175.906197][T12202] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1175.906265][T12202] vhci_hcd vhci_hcd.0: Device attached [ 1175.945967][T12203] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1175.946518][T12202] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1175.985409][ T9251] usb 47-2: new low-speed USB device number 2 using vhci_hcd [ 1177.740854][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.740941][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.819357][T12202] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1178.094754][T12203] vhci_hcd vhci_hcd.0: port 0 already used [ 1178.120140][T12210] vhci_hcd: connection closed [ 1178.120721][T12208] vhci_hcd: connection closed [ 1178.121030][T12204] vhci_hcd: connection closed [ 1178.121486][ T58] vhci_hcd: stop threads [ 1178.121507][ T58] vhci_hcd: release socket [ 1178.121582][ T58] vhci_hcd: disconnect device [ 1178.121898][T12214] vhci_hcd: connection closed [ 1178.122556][ T58] vhci_hcd: stop threads [ 1178.122566][ T58] vhci_hcd: release socket [ 1178.122632][ T58] vhci_hcd: disconnect device [ 1178.122783][ T58] vhci_hcd: stop threads [ 1178.122793][ T58] vhci_hcd: release socket [ 1178.122826][ T58] vhci_hcd: disconnect device [ 1178.123142][ T58] vhci_hcd: stop threads [ 1178.123151][ T58] vhci_hcd: release socket [ 1178.123214][ T58] vhci_hcd: disconnect device [ 1178.213564][T12205] vhci_hcd: connection reset by peer [ 1178.230598][T12212] vhci_hcd: connection closed [ 1178.231477][ T58] vhci_hcd: stop threads [ 1178.231498][ T58] vhci_hcd: release socket [ 1178.231574][ T58] vhci_hcd: disconnect device [ 1178.268472][ T58] vhci_hcd: stop threads [ 1178.268495][ T58] vhci_hcd: release socket [ 1178.268574][ T58] vhci_hcd: disconnect device [ 1181.934541][ T9251] vhci_hcd: vhci_device speed not set [ 1184.685623][ T5805] usb usb48-port1: attempt power cycle [ 1184.726211][T12232] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1311'. [ 1184.997774][T12166] chnl_net:caif_netlink_parms(): no params data found [ 1186.796613][ T5805] usb usb48-port1: unable to enumerate USB device [ 1194.480275][T12250] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1194.518576][T12250] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1194.520140][T12250] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1194.521599][T12250] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1194.565611][T12250] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1196.276412][T12250] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1196.282207][T12250] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1196.285869][T12250] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1196.319351][T12250] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1196.320340][T12250] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1196.755474][T12250] Bluetooth: hci4: command tx timeout [ 1198.595458][T12250] Bluetooth: hci6: command tx timeout [ 1198.780459][T12250] Bluetooth: hci4: command tx timeout [ 1200.751566][T12250] Bluetooth: hci6: command tx timeout [ 1200.857094][T12250] Bluetooth: hci4: command tx timeout [ 1202.775684][T12250] Bluetooth: hci6: command tx timeout [ 1202.935403][T12250] Bluetooth: hci4: command tx timeout [ 1204.874537][T12250] Bluetooth: hci6: command tx timeout [ 1205.166499][T10125] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1205.196977][T10125] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1205.201038][T10125] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1205.202480][T10125] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1205.203434][T10125] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1207.335659][T12250] Bluetooth: hci7: command tx timeout [ 1207.407627][T10125] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1207.432882][T10125] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1207.434606][T10125] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1207.462584][T10125] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1207.463656][T10125] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1209.419373][T12250] Bluetooth: hci7: command tx timeout [ 1209.575706][T12250] Bluetooth: hci8: command tx timeout [ 1211.495336][T12250] Bluetooth: hci7: command tx timeout [ 1211.700872][T12250] Bluetooth: hci8: command tx timeout [ 1213.626082][T12250] Bluetooth: hci7: command tx timeout [ 1213.735377][T12250] Bluetooth: hci8: command tx timeout [ 1213.932908][T10125] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1213.954628][T10125] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1213.964823][T10125] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1214.035606][T10125] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1214.036655][T10125] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1215.815437][T10125] Bluetooth: hci8: command tx timeout [ 1216.725451][T10125] Bluetooth: hci9: command tx timeout [ 1218.863108][T12250] Bluetooth: hci9: command tx timeout [ 1221.019837][T12250] Bluetooth: hci9: command tx timeout [ 1223.095878][T12250] Bluetooth: hci9: command tx timeout [ 1239.102631][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.102727][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1253.253938][T10125] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1253.280616][T10125] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1253.282265][T10125] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1253.284204][T10125] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1253.288253][T10125] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1256.075320][T10125] Bluetooth: hci1: command tx timeout [ 1257.686817][T12250] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1257.754577][T12250] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1257.785515][T12250] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1257.787243][T12250] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1257.788160][T12250] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1258.155649][T10125] Bluetooth: hci1: command tx timeout [ 1259.975533][T10125] Bluetooth: hci2: command tx timeout [ 1260.222170][T10125] Bluetooth: hci1: command tx timeout [ 1262.371732][T10125] Bluetooth: hci2: command tx timeout [ 1262.402888][T12250] Bluetooth: hci1: command tx timeout [ 1264.378573][T10125] Bluetooth: hci2: command tx timeout [ 1266.497088][T10125] Bluetooth: hci2: command tx timeout [ 1271.622663][T12250] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1271.649650][T12250] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1271.674213][T12250] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1271.686185][T12250] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1271.696155][T12250] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1275.561076][T10125] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1275.725949][T10125] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1275.735542][T10125] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1276.326408][T10125] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1276.328619][T10125] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1276.455816][T12250] Bluetooth: hci3: command tx timeout [ 1278.426949][T10125] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1278.463334][T10125] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1278.465413][T10125] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1278.476392][T10125] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1278.477296][T10125] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1278.565515][T10125] Bluetooth: hci3: command tx timeout [ 1279.655415][ T5809] Bluetooth: hci5: command tx timeout [ 1280.625346][ T5809] Bluetooth: hci3: command tx timeout [ 1281.795349][T12250] Bluetooth: hci5: command tx timeout [ 1282.746581][T12250] Bluetooth: hci3: command tx timeout [ 1282.775804][T12250] Bluetooth: hci10: command tx timeout [ 1283.815804][T12250] Bluetooth: hci5: command tx timeout [ 1284.855486][T12250] Bluetooth: hci10: command tx timeout [ 1286.103725][T12250] Bluetooth: hci5: command tx timeout [ 1286.935888][T12250] Bluetooth: hci10: command tx timeout [ 1289.407897][T12250] Bluetooth: hci10: command tx timeout [ 1300.816119][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.816207][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1312.733131][T12286] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 1318.155053][T12250] Bluetooth: hci4: command 0x0406 tx timeout [ 1318.931795][T10125] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1318.953741][T10125] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1318.963657][T10125] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1319.068986][T12319] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1319.164906][T12319] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1321.306937][T12319] Bluetooth: hci7: command tx timeout [ 1323.179563][T12250] Bluetooth: hci6: command 0x0406 tx timeout [ 1323.187273][T10125] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1323.216715][T10125] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1323.218887][T10125] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1323.220702][T10125] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1323.221560][T10125] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1323.431865][T10125] Bluetooth: hci7: command tx timeout [ 1323.610403][T12327] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1323.640016][T12327] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1323.641810][T12327] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1323.643879][T12327] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1323.644933][T12327] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1325.495321][T10125] Bluetooth: hci7: command tx timeout [ 1327.583096][T10125] Bluetooth: hci7: command tx timeout [ 1329.916208][T12319] Bluetooth: hci9: command tx timeout [ 1329.975597][T12319] Bluetooth: hci8: command tx timeout [ 1332.045401][T12327] Bluetooth: hci9: command tx timeout [ 1332.071225][T12327] Bluetooth: hci8: command tx timeout [ 1333.027713][T12319] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1333.246809][T12319] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1333.250027][T12319] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1333.251510][T12319] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1333.276250][T12319] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1333.929537][ T141] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1334.056429][T12327] Bluetooth: hci9: command tx timeout [ 1334.135277][T12327] Bluetooth: hci8: command tx timeout [ 1335.735415][T12327] Bluetooth: hci1: command tx timeout [ 1336.129976][T12319] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1336.136461][ T5809] Bluetooth: hci9: command tx timeout [ 1336.162259][T12319] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1336.193385][T12319] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1336.194981][T12319] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1336.214129][T12319] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1336.217311][ T5809] Bluetooth: hci8: command tx timeout [ 1337.828525][T12327] Bluetooth: hci1: command tx timeout [ 1340.005518][T12319] Bluetooth: hci1: command tx timeout [ 1341.484827][T12319] Bluetooth: hci2: command tx timeout [ 1342.057305][T12319] Bluetooth: hci1: command tx timeout [ 1343.795355][T12319] Bluetooth: hci2: command tx timeout [ 1345.815316][T12319] Bluetooth: hci2: command tx timeout [ 1348.036891][T12319] Bluetooth: hci2: command tx timeout [ 1361.982668][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.982767][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1375.228666][T12327] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1375.255119][T12327] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1375.258772][T12327] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1375.280189][T12327] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1375.298633][T12327] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1377.425334][T12327] Bluetooth: hci5: command tx timeout [ 1377.809347][T12319] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1377.836512][T12319] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1377.844710][T12319] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1377.864772][T12319] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1377.884656][T12319] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1378.615541][ T38] INFO: task syz.8.1301:12177 blocked for more than 143 seconds. [ 1378.615568][ T38] Not tainted syzkaller #0 [ 1378.615579][ T38] Blocked by coredump. [ 1378.615584][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1378.615594][ T38] task:syz.8.1301 state:D stack:20936 pid:12177 tgid:12173 ppid:10032 task_flags:0x40044c flags:0x00080003 [ 1378.615656][ T38] Call Trace: [ 1378.615664][ T38] [ 1378.615680][ T38] __schedule+0x16f3/0x4c20 [ 1378.615946][ T38] ? __pfx___schedule+0x10/0x10 [ 1378.616001][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 1378.616060][ T38] rt_mutex_schedule+0x77/0xf0 [ 1378.616145][ T38] rt_mutex_slowlock_block+0x5ba[ 1378.616145][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 1378.616173][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 1378.616220][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 1378.616251][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 1378.616278][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1378.616302][ T38] ? __lock_acquire+0xab9/0xd20 [ 1378.616335][ T38] ? rcu_barrier+0x4c/0x570 [ 1378.616401][ T38] ? rcu_barrier+0x4c/0x570 [ 1378.616426][ T38] mutex_lock_nested+0x16a/0x1d0 [ 1378.616451][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1378.616479][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 1378.616572][ T38] rcu_barrier+0x4c/0x570 [ 1378.616605][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 1378.616630][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 1378.616656][ T38] netdev_run_todo+0x327/0xea0 [ 1378.616745][ T38] ? __pfx_netif_state_change+0x10/0x10 [ 1378.616793][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 1378.616815][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 1378.616891][ T38] ? netdev_state_change+0x1ca/0x220 [ 1378.616924][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 1378.616951][ T38] tun_chr_close+0x13f/0x1c0 [ 1378.616980][ T38] __fput+0x45b/0xa80 [ 1378.617062][ T38] task_work_run+0x1d4/0x260 [ 1378.617103][ T38] ? __pfx_task_work_run+0x10/0x10 [ 1378.617131][ T38] ? do_exit+0x6b0/0x2300 [ 1378.617165][ T38] ? do_exit+0x6b0/0x2300 [ 1378.617197][ T38] do_exit+0x6b5/0x2300 [ 1378.617223][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1378.617270][ T38] ? __pfx_do_exit+0x10/0x10 [ 1378.617293][ T38] ? rt_mutex_slowunlock+0x493/0x8a0 [ 1378.617320][ T38] ? rt_spin_lock+0x1c1/0x3e0 [ 1378.617364][ T38] do_group_exit+0x21c/0x2d0 [ 1378.617391][ T38] ? rt_spin_unlock+0x161/0x200 [ 1378.617423][ T38] get_signal+0x125d/0x1310 [ 1378.617484][ T38] arch_do_signal_or_restart+0xa0/0x790 [ 1378.617534][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1378.617587][ T38] ? exit_to_user_mode_loop+0x40/0x130 [ 1378.617620][ T38] exit_to_user_mode_loop+0x72/0x130 [ 1378.617644][ T38] do_syscall_64+0x2bd/0xfa0 [ 1378.617699][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 1378.617732][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1378.617779][ T38] ? clear_bhb_loop+0x60/0xb0 [ 1378.617807][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1378.617830][ T38] RIP: 0033:0x7fb042d7eec9 [ 1378.617850][ T38] RSP: 002b:00007fb040fc5038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1378.617881][ T38] RAX: 0000000000010106 RBX: 00007fb042fd6090 RCX: 00007fb042d7eec9 [ 1378.617897][ T38] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1378.617912][ T38] RBP: 00007fb042e01f91 R08: 0000000000000000 R09: 0000000000000000 [ 1378.617926][ T38] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1378.617940][ T38] R13: 00007fb042fd6128 R14: 00007fb042fd6090 R15: 00007ffda2b22828 [ 1378.617980][ T38] [ 1378.617989][ T38] INFO: task syz.5.1306:12196 blocked for more than 143 seconds. [ 1378.618005][ T38] Not tainted syzkaller #0 [ 1378.618015][ T38] Blocked by coredump. [ 1378.618022][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1378.618032][ T38] task:syz.5.1306 state:D stack:25352 pid:12196 tgid:12194 ppid:6206 task_flags:0x40044c flags:0x00080001 [ 1378.618097][ T38] Call Trace: [ 1378.618104][ T38] [ 1378.618119][ T38] __schedule+0x16f3/0x4c20 [ 1378.618183][ T38] ? __pfx___schedule+0x10/0x10 [ 1378.618234][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 1378.618272][ T38] rt_mutex_schedule+0x77/0xf0 [ 1378.618299][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 1378.618327][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 1378.618376][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 1378.618406][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 1378.618436][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1378.618461][ T38] ? __lock_acquire+0xab9/0xd20 [ 1378.618497][ T38] ? rcu_barrier+0x4c/0x570 [ 1378.618544][ T38] ? rcu_barrier+0x4c/0x570 [ 1378.618571][ T38] mutex_lock_nested+0x16a/0x1d0 [ 1378.618595][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1378.618623][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 1378.618650][ T38] rcu_barrier+0x4c/0x570 [ 1378.618684][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 1378.618712][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 1378.618739][ T38] netdev_run_todo+0x327/0xea0 [ 1378.618766][ T38] ? __pfx_netif_state_change+0x10/0x10 [ 1378.618796][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 1378.618818][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 1378.618860][ T38] ? netdev_state_change+0x1ca/0x220 [ 1378.618901][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 1378.618927][ T38] tun_chr_close+0x13f/0x1c0 [ 1378.618955][ T38] __fput+0x45b/0xa80 [ 1378.618998][ T38] task_work_run+0x1d4/0x260 [ 1378.619030][ T38] ? __pfx_task_work_run+0x10/0x10 [ 1378.619058][ T38] ? do_exit+0x6b0/0x2300 [ 1378.619083][ T38] ? do_exit+0x6b0/0x2300 [ 1378.619115][ T38] do_exit+0x6b5/0x2300 [ 1378.619140][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1378.619187][ T38] ? __pfx_do_exit+0x10/0x10 [ 1378.619211][ T38] ? rt_mutex_slowunlock+0x493/0x8a0 [ 1378.619238][ T38] ? rt_spin_lock+0x1c1/0x3e0 [ 1378.619282][ T38] do_group_exit+0x21c/0x2d0 [ 1378.619310][ T38] ? rt_spin_unlock+0x161/0x200 [ 1378.619340][ T38] get_signal+0x125d/0x1310 [ 1378.619401][ T38] arch_do_signal_or_restart+0xa0/0x790 [ 1378.619435][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1378.619488][ T38] ? exit_to_user_mode_loop+0x40/0x130 [ 1378.619515][ T38] exit_to_user_mode_loop+0x72/0x130 [ 1378.619538][ T38] do_syscall_64+0x2bd/0xfa0 [ 1378.619570][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 1378.619601][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1378.619621][ T38] ? clear_bhb_loop+0x60/0xb0 [ 1378.619648][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1378.619670][ T38] RIP: 0033:0x7f1f8af0eec9 [ 1378.619688][ T38] RSP: 002b:00007f1f89155038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1378.619709][ T38] RAX: 0000000000010106 RBX: 00007f1f8b166090 RCX: 00007f1f8af0eec9 [ 1378.619725][ T38] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1378.619739][ T38] RBP: 00007f1f8af91f91 R08: 0000000000000000 R09: 0000000000000000 [ 1378.619752][ T38] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1378.619766][ T38] R13: 00007f1f8b166128 R14: 00007f1f8b166090 R15: 00007ffea5eef888 [ 1378.619805][ T38] [ 1378.619814][ T38] INFO: task syz.7.1311:12232 blocked for more than 143 seconds. [ 1378.619828][ T38] Not tainted syzkaller #0 [ 1378.619839][ T38] Blocked by coredump. [ 1378.619845][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1378.619855][ T38] task:syz.7.1311 state:D stack:20136 pid:12232 tgid:12230 ppid:10123 task_flags:0x40054c flags:0x00080001 [ 1378.619921][ T38] Call Trace: [ 1378.619928][ T38] [ 1378.619942][ T38] __schedule+0x16f3/0x4c20 [ 1378.620005][ T38] ? __pfx___schedule+0x10/0x10 [ 1378.620061][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 1378.620098][ T38] rt_mutex_schedule+0x77/0xf0 [ 1378.620126][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 1378.620154][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 1378.620202][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 1378.620233][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 1378.620261][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1378.620286][ T38] ? __lock_acquire+0xab9/0xd20 [ 1378.620323][ T38] ? rcu_barrier+0x4c/0x570 [ 1378.620367][ T38] ? rcu_barrier+0x4c/0x570 [ 1378.620393][ T38] mutex_lock_nested+0x16a/0x1d0 [ 1378.620418][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1378.620448][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 1378.620475][ T38] rcu_barrier+0x4c/0x570 [ 1378.620509][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 1378.620536][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 1378.620563][ T38] netdev_run_todo+0x327/0xea0 [ 1378.620590][ T38] ? __pfx_netif_state_change+0x10/0x10 [ 1378.620617][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 1378.620639][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 1378.620684][ T38] ? netdev_state_change+0x1ca/0x220 [ 1378.620716][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 1378.620742][ T38] tun_chr_close+0x13f/0x1c0 [ 1378.620770][ T38] __fput+0x45b/0xa80 [ 1378.620812][ T38] task_work_run+0x1d4/0x260 [ 1378.620845][ T38] ? __pfx_task_work_run+0x10/0x10 [ 1378.620882][ T38] ? do_exit+0x6b0/0x2300 [ 1378.620908][ T38] ? do_exit+0x6b0/0x2300 [ 1378.620939][ T38] do_exit+0x6b5/0x2300 [ 1378.620964][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1378.621012][ T38] ? __pfx_do_exit+0x10/0x10 [ 1378.621034][ T38] ? rt_mutex_slowunlock+0x493/0x8a0 [ 1378.621061][ T38] ? rt_spin_lock+0x1c1/0x3e0 [ 1378.621106][ T38] do_group_exit+0x21c/0x2d0 [ 1378.621132][ T38] ? rt_spin_unlock+0x161/0x200 [ 1378.621164][ T38] get_signal+0x125d/0x1310 [ 1378.621225][ T38] arch_do_signal_or_restart+0xa0/0x790 [ 1378.621260][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1378.621291][ T38] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1378.621376][ T38] ? exit_to_user_mode_loop+0x40/0x130 [ 1378.621403][ T38] exit_to_user_mode_loop+0x72/0x130 [ 1378.621427][ T38] do_syscall_64+0x2bd/0xfa0 [ 1378.621458][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 1378.621509][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1378.621531][ T38] ? clear_bhb_loop+0x60/0xb0 [ 1378.621558][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1378.621579][ T38] RIP: 0033:0x7f124d6aeec9 [ 1378.621596][ T38] RSP: 002b:00007f124b90e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1378.621617][ T38] RAX: 000000000000004c RBX: 00007f124d905fa0 RCX: 00007f124d6aeec9 [ 1378.621632][ T38] RDX: 0000000000040004 RSI: 0000200000000300 RDI: 0000000000000003 [ 1378.621645][ T38] RBP: 00007f124d731f91 R08: 0000000000000000 R09: 0000000000000000 [ 1378.621659][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1378.621673][ T38] R13: 00007f124d906038 R14: 00007f124d905fa0 R15: 00007fff491de4e8 [ 1378.621712][ T38] [ 1378.621740][ T38] [ 1378.621740][ T38] Showing all locks held in the system: [ 1378.621750][ T38] 4 locks held by ksoftirqd/0/15: [ 1378.621763][ T38] 3 locks held by rcuc/0/20: [ 1378.621776][ T38] 4 locks held by rcuc/1/28: [ 1378.621788][ T38] 1 lock held by khungtaskd/38: [ 1378.621799][ T38] #0: ffffffff8d7aa4c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1378.621897][ T38] 6 locks held by kworker/u8:5/141: [ 1378.621909][ T38] #0: ffff88801a294938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1378.621971][ T38] #1: ffffc90003a67ba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1378.622032][ T38] #2: ffffffff8ea6b560 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820 [ 1378.622117][ T38] #3: ffff88805ca320d8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x10a/0x3d0 [ 1378.622241][ T38] #4: ffff88805ca33300 (&devlink->lock_key#3){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x11c/0x3d0 [ 1378.622299][ T38] #5: ffffffff8d7afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1378.622378][ T38] 2 locks held by getty/5560: [ 1378.622390][ T38] #0: ffff88823bf620a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1378.622494][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1400 [ 1378.622578][ T38] 6 locks held by kworker/u8:12/5942: [ 1378.622604][ T38] 1 lock held by syz-executor/12166: [ 1378.622616][ T38] #0: ffffffff8d7afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1378.622673][ T38] 1 lock held by syz.8.1301/12177: [ 1378.622684][ T38] #0: ffffffff8d7afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1378.622741][ T38] 1 lock held by syz.5.1306/12196: [ 1378.622754][ T38] #0: ffffffff8d7afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1378.622810][ T38] 1 lock held by syz.7.1311/12232: [ 1378.622822][ T38] #0: ffffffff8d7afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1378.622886][ T38] 1 lock held by syz.6.1314/12243: [ 1378.622898][ T38] #0: ffffffff8d7afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1378.622955][ T38] 2 locks held by syz-executor/12248: [ 1378.622966][ T38] #0: ffffffff8ea6b560 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 1378.623022][ T38] #1: ffffffff8d7afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1378.623079][ T38] 2 locks held by syz-executor/12252: [ 1378.623091][ T38] #0: ffffffff8ea6b560 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 1378.623146][ T38] #1: ffffffff8d7afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1378.623203][ T38] 1 lock held by syz-executor/12257: [ 1378.623216][ T38] #0: ffffffff8d7afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1378.623274][ T38] 1 lock held by syz-executor/12262: [ 1378.623286][ T38] #0: ffffffff8d7afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1378.623344][ T38] 1 lock held by syz-executor/12264: [ 1378.623356][ T38] #0: ffffffff8d7afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1378.623414][ T38] 1 lock held by syz-executor/12279: [ 1378.623426][ T38] #0: ffffffff8d7afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1378.623482][ T38] 1 lock held by syz-executor/12286: [ 1378.623494][ T38] #0: ffffffff8d7afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1378.623550][ T38] 2 locks held by syz-executor/12295: [ 1378.623562][ T38] #0: ffffffff8ea6b560 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 1378.623616][ T38] #1: ffffffff8d7afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1378.623672][ T38] 2 locks held by syz-executor/12316: [ 1378.623684][ T38] #0: ffffffff8ea6b560 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 1378.623739][ T38] #1: ffffffff8d7afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1378.623796][ T38] 4 locks held by syz-executor/12324: [ 1378.623809][ T38] 2 locks held by syz-executor/12326: [ 1378.623821][ T38] #0: ffffffff8ea6b560 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 1378.623885][ T38] #1: ffffffff8ea78478 (rtnl_mutex){+.+.}-{4:4}, at: register_netdev+0x18/0x60 [ 1378.623935][ T38] 2 locks held by syz-executor/12333: [ 1378.623947][ T38] #0: ffffffff8ea6b560 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 1378.624001][ T38] #1: ffffffff8ea78478 (rtnl_mutex){+.+.}-{4:4}, at: register_netdev+0x18/0x60 [ 1378.624050][ T38] 1 lock held by syz-executor/12335: [ 1378.624061][ T38] #0: ffffffff8ea78478 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x37d/0x1df0 [ 1378.624147][ T38] 2 locks held by syz-executor/12341: [ 1378.624159][ T38] #0: ffffffff8ea6b560 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 1378.624212][ T38] #1: ffffffff8ea78478 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 1378.624270][ T38] 1 lock held by syz-executor/12351: [ 1378.624282][ T38] #0: ffffffff8ea78478 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1378.624386][ T38] 1 lock held by dhcpcd/12353: [ 1378.624398][ T38] #0: ffff88805f482ff8 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 1378.624455][ T38] [ 1378.624461][ T38] ============================================= [ 1378.624461][ T38] [ 1378.624470][ T38] NMI backtrace for cpu 1 [ 1378.624485][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1378.624508][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1378.624519][ T38] Call Trace: [ 1378.624528][ T38] [ 1378.624537][ T38] dump_stack_lvl+0x189/0x250 [ 1378.624577][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1378.624601][ T38] ? __pfx__printk+0x10/0x10 [ 1378.624641][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 1378.624725][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1378.624754][ T38] ? __pfx__printk+0x10/0x10 [ 1378.624785][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1378.624825][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1378.624855][ T38] watchdog+0xf60/0xfa0 [ 1378.624912][ T38] ? watchdog+0x1e2/0xfa0 [ 1378.624943][ T38] kthread+0x711/0x8a0 [ 1378.624972][ T38] ? __pfx_watchdog+0x10/0x10 [ 1378.624994][ T38] ? __pfx_kthread+0x10/0x10 [ 1378.625015][ T38] ? rt_spin_unlock+0x150/0x200 [ 1378.625047][ T38] ? rt_spin_unlock+0x161/0x200 [ 1378.625070][ T38] ? __pfx_kthread+0x10/0x10 [ 1378.625096][ T38] ret_from_fork+0x4bc/0x870 [ 1378.625144][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1378.625178][ T38] ? __switch_to_asm+0x39/0x70 [ 1378.625200][ T38] ? __switch_to_asm+0x33/0x70 [ 1378.625221][ T38] ? __pfx_kthread+0x10/0x10 [ 1378.625243][ T38] ret_from_fork_asm+0x1a/0x30 [ 1378.625285][ T38] [ 1378.625334][ T38] Sending NMI from CPU 1 to CPUs 0: [ 1378.625363][ C0] NMI backtrace for cpu 0 [ 1378.625380][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1378.625400][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1378.625417][ C0] RIP: 0010:__schedule+0x40f2/0x4c20 [ 1378.625443][ C0] Code: 00 49 bc 00 00 00 00 00 fc ff df 4c 8b 74 24 18 4c 8b 7c 24 30 4c 8b 6c 24 40 0f 84 48 c5 ff ff e8 13 7c f8 f6 e9 3e c5 ff ff <48> 8b 1c 24 48 8d bb 20 0e 00 00 ba 10 00 00 00 31 f6 e8 e7 eb 58 [ 1378.625458][ C0] RSP: 0018:ffffc90000157a80 EFLAGS: 00000046 [ 1378.625474][ C0] RAX: 1ffff1100375e419 RBX: ffff88801baf20c8 RCX: dffffc0000000000 [ 1378.625487][ C0] RDX: ffffc90000157c10 RSI: 0000000000000001 RDI: ffff8880b883aea0 [ 1378.625498][ C0] RBP: ffffc90000157c98 R08: ffff88801be8b007 R09: 1ffff110037d1600 [ 1378.625509][ C0] R10: dffffc0000000000 R11: ffffffff8192a5d0 R12: ffffffff8d066608 [ 1378.625521][ C0] R13: 1ffff11017107735 R14: ffff8880b883adc0 R15: 0000000000000000 [ 1378.625533][ C0] FS: 0000000000000000(0000) GS:ffff888126bc6000(0000) knlGS:0000000000000000 [ 1378.625547][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1378.625558][ C0] CR2: 00007faa5cbfab45 CR3: 000000000d5a6000 CR4: 00000000003526f0 [ 1378.625575][ C0] Call Trace: [ 1378.625582][ C0] [ 1378.625595][ C0] ? __local_bh_enable+0x27b/0x410 [ 1378.625631][ C0] ? __lock_acquire+0xab9/0xd20 [ 1378.625647][ C0] ? __pfx___schedule+0x10/0x10 [ 1378.625677][ C0] ? schedule+0x91/0x360 [ 1378.625700][ C0] schedule+0x165/0x360 [ 1378.625722][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1378.625737][ C0] smpboot_thread_fn+0x5bd/0xa60 [ 1378.625754][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1378.625773][ C0] kthread+0x711/0x8a0 [ 1378.625792][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1378.625807][ C0] ? __pfx_kthread+0x10/0x10 [ 1378.625824][ C0] ? rt_spin_unlock+0x150/0x200 [ 1378.625845][ C0] ? rt_spin_unlock+0x161/0x200 [ 1378.625863][ C0] ? __pfx_kthread+0x10/0x10 [ 1378.625881][ C0] ret_from_fork+0x4bc/0x870 [ 1378.625906][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1378.625932][ C0] ? __switch_to_asm+0x39/0x70 [ 1378.625959][ C0] ? __switch_to_asm+0x33/0x70 [ 1378.625979][ C0] ? __pfx_kthread+0x10/0x10 [ 1378.625997][ C0] ret_from_fork_asm+0x1a/0x30 [ 1378.626026][ C0] [ 1378.812834][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1378.812856][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1378.812887][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1378.812899][ T38] Call Trace: [ 1378.812907][ T38] [ 1378.812916][ T38] dump_stack_lvl+0x99/0x250 [ 1378.812946][ T38] ? __asan_memcpy+0x40/0x70 [ 1378.812998][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1378.813022][ T38] ? __pfx__printk+0x10/0x10 [ 1378.813057][ T38] vpanic+0x237/0x6d0 [ 1378.813076][ T38] ? __pfx_vpanic+0x10/0x10 [ 1378.813095][ T38] ? preempt_schedule_common+0x83/0xd0 [ 1378.813130][ T38] panic+0xb9/0xc0 [ 1378.813147][ T38] ? __pfx_panic+0x10/0x10 [ 1378.813166][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 1378.813200][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1378.813228][ T38] watchdog+0xf9f/0xfa0 [ 1378.813254][ T38] ? watchdog+0x1e2/0xfa0 [ 1378.813280][ T38] kthread+0x711/0x8a0 [ 1378.813305][ T38] ? __pfx_watchdog+0x10/0x10 [ 1378.813324][ T38] ? __pfx_kthread+0x10/0x10 [ 1378.813344][ T38] ? rt_spin_unlock+0x150/0x200 [ 1378.813370][ T38] ? rt_spin_unlock+0x161/0x200 [ 1378.813391][ T38] ? __pfx_kthread+0x10/0x10 [ 1378.813414][ T38] ret_from_fork+0x4bc/0x870 [ 1378.813444][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1378.813478][ T38] ? __switch_to_asm+0x39/0x70 [ 1378.813500][ T38] ? __switch_to_asm+0x33/0x70 [ 1378.813523][ T38] ? __pfx_kthread+0x10/0x10 [ 1378.813545][ T38] ret_from_fork_asm+0x1a/0x30 [ 1378.813586][ T38] [ 1378.813881][ T38] Kernel Offset: disabled