last executing test programs: 22m4.223673261s ago: executing program 32 (id=861): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='ntfs3\x00', 0x1000080, 0x0) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1200100004000000080000000280000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r7 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$sysctl(r7, &(0x7f0000000580)='1\x00', 0x2) write$sysctl(r7, &(0x7f00000000c0)='2\x00', 0x2) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r6, 0x0, 0x0}, 0x20) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x200000, 0x2) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r2, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x190, 0x16, 0xa, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xa8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x100}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'pimreg0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x6c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'nr0\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x401}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}]}]}], {0x14}}, 0x1ec}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x18, 0x0, 0x1, 0x0, 0x1, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x18}}, 0x80) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=r9, @ANYBLOB="01000400000001000000090000003c00038008000300000000001400020076000000080001000100000014000600ff02000000000000000000000000000100"/74], 0x50}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r9, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x40}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc}]}, 0x30}}, 0x4810) 21m40.73568622s ago: executing program 33 (id=1018): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xb4}}, 0x40040) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, 0x0) 20m48.774440425s ago: executing program 5 (id=1287): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001340)={{r0}, &(0x7f00000012c0), &(0x7f0000001300)}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r4, 0x0, 0x6, 0xc) vmsplice(r2, &(0x7f0000000200)=[{&(0x7f0000001740)='\x00', 0x1}], 0x1, 0x6) 20m44.892995285s ago: executing program 5 (id=1291): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) r2 = syz_open_dev$vim2m(0x0, 0xa, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000140)={0x0, 0x34324142, 0x2, @discrete={0x1, 0x401}}) r3 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r3, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setstatus(r4, 0x4, 0x22bc2fc78e92c4cb) lseek(r3, 0x0, 0x4) 20m39.126525246s ago: executing program 5 (id=1303): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(r0, &(0x7f0000000040)='./file1/file4/file5\x00', 0x100, 0xfffffffc) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x2) 20m38.92246638s ago: executing program 5 (id=1304): io_uring_setup(0x56c5, 0x0) syslog(0x2, &(0x7f0000001d80)=""/117, 0x75) io_uring_enter(0xffffffffffffffff, 0x100000, 0x2, 0xf, &(0x7f0000000000), 0x18) 20m37.552054589s ago: executing program 5 (id=1305): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c0c8) tkill(0x0, 0xb) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000480)="aa", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmmsg(r3, &(0x7f0000001140), 0x700, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048054}, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) 20m36.990663404s ago: executing program 5 (id=1306): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) r2 = syz_open_dev$vim2m(0x0, 0xa, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000140)={0x0, 0x34324142, 0x2, @discrete={0x1, 0x401}}) r3 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r3, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setstatus(r4, 0x4, 0x22bc2fc78e92c4cb) lseek(r3, 0x0, 0x4) 20m21.596530819s ago: executing program 34 (id=1302): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000b0f000/0x3000)=nil, 0x3000, &(0x7f0000000040)='{-[+-\x00') sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = epoll_create1(0x80000) r4 = socket(0x1, 0x80802, 0x0) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_vif\x00') epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)={0x10000001}) shutdown(r4, 0x0) 20m21.382570998s ago: executing program 35 (id=1301): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000b0f000/0x3000)=nil, 0x3000, &(0x7f0000000040)='{-[+-\x00') sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = epoll_create1(0x80000) r4 = socket(0x1, 0x80802, 0x0) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_vif\x00') epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)={0x10000001}) shutdown(r4, 0x0) epoll_create1(0x80000) socket$nl_generic(0x10, 0x3, 0x10) 20m21.055386198s ago: executing program 36 (id=1306): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) r2 = syz_open_dev$vim2m(0x0, 0xa, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000140)={0x0, 0x34324142, 0x2, @discrete={0x1, 0x401}}) r3 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r3, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setstatus(r4, 0x4, 0x22bc2fc78e92c4cb) lseek(r3, 0x0, 0x4) 17m51.878264018s ago: executing program 6 (id=1425): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x14, r3, 0x1, 0x70bd2c}, 0x14}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48040}, 0x0) 17m51.794863826s ago: executing program 6 (id=1426): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e02000000000000000000000000000006040000"], 0x0, 0x37}, 0x28) 17m51.712132688s ago: executing program 6 (id=1427): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) listen(r3, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(0xffffffffffffffff, 0x12, 0x0, 0x0) syz_genetlink_get_family_id$gtp(0x0, r4) socket$phonet_pipe(0x23, 0x5, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 17m48.268122523s ago: executing program 6 (id=1428): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x80000, 0x0) 17m48.204214651s ago: executing program 6 (id=1429): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8003) write$sndseq(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000280), 0x4) 17m47.576282369s ago: executing program 6 (id=1430): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8003) write$sndseq(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000280), 0x4) 17m47.38645117s ago: executing program 37 (id=1430): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8003) write$sndseq(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000280), 0x4) 17m26.537265448s ago: executing program 9 (id=1433): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002100010000000000000000000745f477598000000000000000002000080017007597169b882a4be287e809fc938719d9c43963d470597561929a2a00ff7e9e917c0dd3679fd21615d4c5e0be4782eb28d896c3ddfec0907526171383d903edd6e44f8c5e1e5f4221ef10f3dd87b5bcf07bb26e01852792de7799feecb8ee5abd392c8fb77121b7056f4b58c68e"], 0x24}}, 0xbde3a02a7081ba0c) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x20ba, &(0x7f0000000000)={0x0, 0x0, 0x20, 0x0, 0xfff7fffc}) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000000)=ANY=[]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f00000003c0)={0x2, 0x3, "d1c236566863f1bd3f54e05cc46654796a3b800413745c40579438931fffaa91", 0x8001, 0x4, 0xc, 0x9, 0x1980}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0xff, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 17m25.462062457s ago: executing program 9 (id=1434): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r2], 0x28}}, 0x802) 17m24.558066088s ago: executing program 9 (id=1435): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) mount$9p_fd(0x0, 0x0, 0x0, 0x1200810, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x56, 0x0, 0x0, {0x0, 0x1}, {0x45, 0x2}, @cond=[{0x8, 0xfff, 0x44, 0x2, 0x0, 0x3}, {0xfff, 0x3, 0x7fff, 0x8, 0xf, 0x8}]}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 17m24.454793106s ago: executing program 9 (id=1436): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x80000, 0x0) 17m24.40250375s ago: executing program 9 (id=1437): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) listen(r3, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) 17m23.359960108s ago: executing program 9 (id=1438): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c0c8) tkill(0x0, 0xb) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000480)="aa", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmmsg(r3, &(0x7f0000001140), 0x700, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048054}, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) 17m23.009346428s ago: executing program 38 (id=1438): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c0c8) tkill(0x0, 0xb) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000480)="aa", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmmsg(r3, &(0x7f0000001140), 0x700, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048054}, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) 17m22.625059464s ago: executing program 7 (id=1440): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000020601020000000000000000000000f5140007800800124000060000080008400000003712000300686173683a6e65742c706f7274000000050005000a00000005000400000000000900020073797a31000000000500010007"], 0x60}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f0000000080)={0x6b16, 0x3, 0x10001, 0x400e0a, 0x10, "203c5e0000ff765e000080fffffffffffffff2", 0xb, 0x5}) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0xff) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f0000001fc0)=ANY=[@ANYRES16=r7], 0x1015, 0x2) r8 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000540)={'bond0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r9}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r1, {0x0, 0x4}, {0xffff, 0xffff}, {0x7, 0xffe5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x4}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 17m21.4051672s ago: executing program 7 (id=1441): r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) writev(r0, 0x0, 0x0) 17m21.236209309s ago: executing program 7 (id=1442): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) mount$9p_fd(0x0, 0x0, 0x0, 0x1200810, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x56, 0x0, 0x0, {0x0, 0x1}, {0x45, 0x2}, @cond=[{0x8, 0xfff, 0x44, 0x2, 0x0, 0x3}, {0xfff, 0x3, 0x7fff, 0x8, 0xf, 0x8}]}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 17m21.150022498s ago: executing program 7 (id=1443): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x80000, 0x0) 17m21.0868325s ago: executing program 7 (id=1444): socket(0x10, 0x80805, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xa43d, 0x80, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000000)) syz_io_uring_submit(r4, r5, 0x0, &(0x7f0000000000)) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) shutdown(r3, 0x1) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f080, 0x1}) syz_open_dev$sndctrl(0x0, 0x8b6000, 0x40) 17m20.340000002s ago: executing program 7 (id=1445): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, 0x33, 0x701, 0x0, 0x25dfdbfe, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4040004}, 0x24044094) 17m20.149644614s ago: executing program 39 (id=1445): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, 0x33, 0x701, 0x0, 0x25dfdbfe, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4040004}, 0x24044094) 17m3.962869862s ago: executing program 1 (id=1455): openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_clone3(&(0x7f0000000300)={0x101004880, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_emit_ethernet(0x6e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r3 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) creat(&(0x7f00000005c0)='./file0\x00', 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000005c0)="0800000014001923", 0xfff2}], 0x1) 16m59.26247662s ago: executing program 1 (id=1458): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4, @private=0xa010102}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d7"], 0x10b8}, 0x20000004) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 16m59.074216421s ago: executing program 1 (id=1460): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) 16m55.34032507s ago: executing program 1 (id=1461): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x400040c0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) 16m52.264686071s ago: executing program 1 (id=1465): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x7) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/45, 0x44, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x200000000622c, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) listen(r1, 0x3) accept4$bt_l2cap(r1, 0x0, 0x0, 0x80000) 16m49.755861955s ago: executing program 1 (id=1467): openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_clone3(&(0x7f0000000300)={0x101004880, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_emit_ethernet(0x6e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r3 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) creat(&(0x7f00000005c0)='./file0\x00', 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) writev(r6, &(0x7f0000000540)=[{&(0x7f00000005c0)="0800000014001923", 0xfff2}], 0x1) 16m33.72227219s ago: executing program 40 (id=1467): openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_clone3(&(0x7f0000000300)={0x101004880, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_emit_ethernet(0x6e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r3 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) creat(&(0x7f00000005c0)='./file0\x00', 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) writev(r6, &(0x7f0000000540)=[{&(0x7f00000005c0)="0800000014001923", 0xfff2}], 0x1) 15.031707661s ago: executing program 4 (id=2691): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = add_key$user(&(0x7f0000000100), 0x0, &(0x7f0000000180), 0x0, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x20, r2, 0xffffffffffffffff, 0xe1) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) write$sndseq(r3, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) 9.806358495s ago: executing program 0 (id=2708): syz_io_uring_setup(0x10e6, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) openat$iommufd(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b18, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) 9.068315637s ago: executing program 4 (id=2711): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$loop(&(0x7f00000000c0), 0x2, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r5) getsockopt$inet6_buf(r3, 0x29, 0x44, 0x0, &(0x7f0000000180)) r6 = dup(0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, r6) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000580)={&(0x7f0000000080), 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, r2, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB="200000000514210626bd700000000000080001"], 0x20}}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x18) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001b"], 0x34}}, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000040)) 8.499524581s ago: executing program 3 (id=2713): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r1, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x11}, 0xa, 0x1}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0xc8844) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x100000000000002) socket$inet(0x2, 0x4000000000000001, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) 8.419783357s ago: executing program 0 (id=2714): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b01020301090224000100", @ANYRES16], 0x0) 8.263686364s ago: executing program 8 (id=2716): mkdirat(0xffffffffffffff9c, 0x0, 0x33455aed6cbf4c1b) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xc00) r0 = open(0x0, 0x80, 0x122) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0xfffffffffffffcb5, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xd, 0x0, 0x4000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x700}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xb0ff}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fcntl$notify(r0, 0x402, 0x8000003d) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_open_dev$vim2m(0x0, 0x40000000e, 0x2) 8.176169977s ago: executing program 4 (id=2717): socket(0x2, 0x80805, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) 7.360382053s ago: executing program 4 (id=2719): ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000140)={0x4, 0x1, 0x4, 0x0, 0x9}) 5.971271638s ago: executing program 2 (id=2720): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b2a, &(0x7f0000000040)) 5.905473814s ago: executing program 0 (id=2721): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = add_key$user(&(0x7f0000000100), 0x0, &(0x7f0000000180), 0x0, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x20, r2, 0xffffffffffffffff, 0xe1) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) write$sndseq(r3, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) 5.819985235s ago: executing program 4 (id=2722): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 5.37560948s ago: executing program 2 (id=2723): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000580)}], 0x1}, 0x4011) recvmsg$unix(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x10061) recvmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2122) sendmsg$inet(r1, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000003c40)=[{&(0x7f0000000680)="98", 0x1}], 0x1}, 0x20000011) 4.880007483s ago: executing program 3 (id=2724): mkdirat(0xffffffffffffff9c, 0x0, 0x101) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(0xffffffffffffffff, 0xc0285840, &(0x7f0000000040)={0x8000000000000001, 0x9, 0x800000, 0x0, 0x5, 0x2, 0x0, &(0x7f0000000000)=[{0x14, 0x101, 0x6}, {0x11, 0xfe, 0x1}]}) syz_open_dev$sg(0x0, 0x10001, 0x2a00) 4.595884089s ago: executing program 3 (id=2725): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(0xffffffffffffffff, 0xc0285840, &(0x7f0000000040)={0x8000000000000001, 0x9, 0x800000, 0x0, 0x5, 0x2, 0x0, &(0x7f0000000000)=[{0x14, 0x101, 0x6}, {0x11, 0xfe, 0x1}]}) 4.472002958s ago: executing program 2 (id=2726): r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7fb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x4, 0x1, 0x4, 0x0, 0x9}) 4.315151391s ago: executing program 3 (id=2727): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_open_dev$loop(0x0, 0x1000, 0x16e1e2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000600)) 4.312786624s ago: executing program 8 (id=2728): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, 0x0, 0x0) 4.040505316s ago: executing program 8 (id=2729): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a72b7a104c05e102c8e201020301090224000100000000090471020216fa1f0009051402"], 0x0) 3.997992625s ago: executing program 2 (id=2730): sched_setscheduler(0x0, 0x1, 0x0) syz_emit_ethernet(0x5e, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ptrace$ARCH_SHSTK_STATUS(0x1e, 0x0, 0x0, 0x5005) syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) write(r0, &(0x7f0000000180)="b4", 0x1) recvmmsg$unix(r0, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x121, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) syz_create_resource$binfmt(0x0) shmctl$SHM_STAT_ANY(0x0, 0xf, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000240)=ANY=[], 0x15, 0x1) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) getpriority(0x2, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000200)) socket$nl_generic(0x10, 0x3, 0x10) 2.368666837s ago: executing program 2 (id=2731): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a3000000000080002400000"], 0x7c}}, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000002900000002000000", 0xfe60) 2.121051328s ago: executing program 2 (id=2732): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000002400)={0x20, 0xe, 0x2, "02cf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000580)={0x0, 0x16, 0x2, "f610"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x40, 0x9, 0x1, 0x80}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 1.325520193s ago: executing program 8 (id=2733): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b2a, &(0x7f0000000040)) 1.224119023s ago: executing program 4 (id=2734): socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x1, 0x6, 0xfa11, 0xffefffff}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp\x00') pread64(r2, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) 1.123679515s ago: executing program 3 (id=2735): mkdirat(0xffffffffffffff9c, 0x0, 0x101) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(0xffffffffffffffff, 0xc0285840, &(0x7f0000000040)={0x8000000000000001, 0x9, 0x800000, 0x0, 0x5, 0x2, 0x0, &(0x7f0000000000)=[{0x14, 0x101, 0x6}, {0x11, 0xfe, 0x1}]}) syz_open_dev$sg(0x0, 0x10001, 0x2a00) 1.069282002s ago: executing program 8 (id=2736): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000580)}], 0x1}, 0x4011) recvmsg$unix(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x10061) recvmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2122) sendmsg$inet(r1, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000003c40)=[{&(0x7f0000000680)="98", 0x1}], 0x1}, 0x20000011) 991.533921ms ago: executing program 0 (id=2737): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(0xffffffffffffffff, 0xc0285840, &(0x7f0000000040)={0x8000000000000001, 0x9, 0x800000, 0x0, 0x5, 0x2, 0x0, &(0x7f0000000000)=[{0x14, 0x101, 0x6}, {0x11, 0xfe, 0x1}]}) 832.0329ms ago: executing program 3 (id=2738): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0xa) fchdir(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0xb4) ftruncate(r2, 0x2007ffb) close(r2) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000003d) fcntl$setsig(r3, 0xa, 0x21) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) 767.882195ms ago: executing program 0 (id=2739): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 349.194109ms ago: executing program 0 (id=2740): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000740)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e20, @local}, 0x1}}, 0x26) 0s ago: executing program 8 (id=2741): sched_setscheduler(0x0, 0x1, 0x0) syz_emit_ethernet(0x5e, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ptrace$ARCH_SHSTK_STATUS(0x1e, 0x0, 0x0, 0x5005) syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) write(r0, &(0x7f0000000180)="b4", 0x1) recvmmsg$unix(r0, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x121, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) syz_create_resource$binfmt(0x0) shmctl$SHM_STAT_ANY(0x0, 0xf, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000240)=ANY=[], 0x15, 0x1) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) getpriority(0x2, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000200)) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): [ 1147.574900][T12303] Bluetooth: hci1: command tx timeout [ 1148.095762][T13597] nfs: Unknown parameter '¸' [ 1149.591921][ T5801] Bluetooth: hci1: command tx timeout [ 1149.591957][ T5801] Bluetooth: hci5: command tx timeout [ 1149.591981][ T5801] Bluetooth: hci6: command tx timeout [ 1151.671063][T12303] Bluetooth: hci5: command tx timeout [ 1151.671099][T12303] Bluetooth: hci1: command tx timeout [ 1153.179406][T13568] chnl_net:caif_netlink_parms(): no params data found [ 1153.483734][T13564] chnl_net:caif_netlink_parms(): no params data found [ 1153.751592][ T5801] Bluetooth: hci1: command tx timeout [ 1154.299272][T13580] chnl_net:caif_netlink_parms(): no params data found [ 1154.356955][T13568] bridge0: port 1(bridge_slave_0) entered blocking state [ 1154.357325][T13568] bridge0: port 1(bridge_slave_0) entered disabled state [ 1154.358123][T13568] bridge_slave_0: entered allmulticast mode [ 1154.400424][T13568] bridge_slave_0: entered promiscuous mode [ 1154.523190][T13568] bridge0: port 2(bridge_slave_1) entered blocking state [ 1154.524338][T13568] bridge0: port 2(bridge_slave_1) entered disabled state [ 1154.525156][T13568] bridge_slave_1: entered allmulticast mode [ 1154.559307][T13568] bridge_slave_1: entered promiscuous mode [ 1155.173821][T13564] bridge0: port 1(bridge_slave_0) entered blocking state [ 1155.174007][T13564] bridge0: port 1(bridge_slave_0) entered disabled state [ 1155.174274][T13564] bridge_slave_0: entered allmulticast mode [ 1155.177514][T13564] bridge_slave_0: entered promiscuous mode [ 1155.428513][ T37] audit: type=1326 audit(1775912983.924:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13631 comm="syz.2.1876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f15a2c819 code=0x7ffc0000 [ 1155.458011][T13564] bridge0: port 2(bridge_slave_1) entered blocking state [ 1155.458124][T13564] bridge0: port 2(bridge_slave_1) entered disabled state [ 1155.458376][T13564] bridge_slave_1: entered allmulticast mode [ 1155.469470][T13564] bridge_slave_1: entered promiscuous mode [ 1155.475179][ T37] audit: type=1326 audit(1775912983.964:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13631 comm="syz.2.1876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f15a2c819 code=0x7ffc0000 [ 1155.475425][ T37] audit: type=1326 audit(1775912983.974:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13631 comm="syz.2.1876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f15a2c819 code=0x7ffc0000 [ 1155.475550][ T37] audit: type=1326 audit(1775912983.974:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13631 comm="syz.2.1876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2f15a2c819 code=0x7ffc0000 [ 1155.475667][ T37] audit: type=1326 audit(1775912983.974:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13631 comm="syz.2.1876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f15a2c819 code=0x7ffc0000 [ 1155.501899][ T37] audit: type=1326 audit(1775912983.994:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13631 comm="syz.2.1876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f15a2c819 code=0x7ffc0000 [ 1155.502090][ T37] audit: type=1326 audit(1775912983.994:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13631 comm="syz.2.1876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f15a2c819 code=0x7ffc0000 [ 1155.552644][ T37] audit: type=1326 audit(1775912984.034:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13631 comm="syz.2.1876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f15a2c819 code=0x7ffc0000 [ 1155.552850][ T37] audit: type=1326 audit(1775912984.054:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13631 comm="syz.2.1876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2f15a2c819 code=0x7ffc0000 [ 1155.552984][ T37] audit: type=1326 audit(1775912984.054:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13631 comm="syz.2.1876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2f159ed04e code=0x7ffc0000 [ 1155.573845][T13568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1155.937782][T13568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1156.189679][T13564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1156.520409][T13564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1156.529385][T13568] team0: Port device team_slave_0 added [ 1156.529825][T13580] bridge0: port 1(bridge_slave_0) entered blocking state [ 1156.530114][T13580] bridge0: port 1(bridge_slave_0) entered disabled state [ 1156.531136][T13580] bridge_slave_0: entered allmulticast mode [ 1156.533387][T13580] bridge_slave_0: entered promiscuous mode [ 1157.973731][T13568] team0: Port device team_slave_1 added [ 1158.566998][T13580] bridge0: port 2(bridge_slave_1) entered blocking state [ 1158.567124][T13580] bridge0: port 2(bridge_slave_1) entered disabled state [ 1158.567402][T13580] bridge_slave_1: entered allmulticast mode [ 1158.570284][T13580] bridge_slave_1: entered promiscuous mode [ 1158.833874][T13564] team0: Port device team_slave_0 added [ 1158.893418][T13568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1158.893437][T13568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1158.893492][T13568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1158.899683][T13564] team0: Port device team_slave_1 added [ 1158.965117][T13580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1158.966940][T13568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1158.966952][T13568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1158.966974][T13568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1159.116976][T13580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1159.662028][T13564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1159.662043][T13564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1159.662065][T13564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1161.881988][T13564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1161.882002][T13564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1161.882024][T13564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1161.943615][T13580] team0: Port device team_slave_0 added [ 1162.247890][ T37] kauditd_printk_skb: 160 callbacks suppressed [ 1162.247918][ T37] audit: type=1326 audit(1775912990.744:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13652 comm="syz.4.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4a16c819 code=0x7ffc0000 [ 1162.248260][ T37] audit: type=1326 audit(1775912990.744:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13652 comm="syz.4.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4a16c819 code=0x7ffc0000 [ 1162.248636][ T37] audit: type=1326 audit(1775912990.744:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13652 comm="syz.4.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4a16c819 code=0x7ffc0000 [ 1162.249418][ T37] audit: type=1326 audit(1775912990.744:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13652 comm="syz.4.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4a16c819 code=0x7ffc0000 [ 1162.249472][ T37] audit: type=1326 audit(1775912990.744:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13652 comm="syz.4.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9f4a16c819 code=0x7ffc0000 [ 1162.249505][ T37] audit: type=1326 audit(1775912990.744:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13652 comm="syz.4.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4a16c819 code=0x7ffc0000 [ 1162.249535][ T37] audit: type=1326 audit(1775912990.744:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13652 comm="syz.4.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4a16c819 code=0x7ffc0000 [ 1162.249569][ T37] audit: type=1326 audit(1775912990.744:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13652 comm="syz.4.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9f4a16c819 code=0x7ffc0000 [ 1162.249601][ T37] audit: type=1326 audit(1775912990.744:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13652 comm="syz.4.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4a16c819 code=0x7ffc0000 [ 1162.249986][ T37] audit: type=1326 audit(1775912990.744:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13652 comm="syz.4.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4a16c819 code=0x7ffc0000 [ 1164.710072][T13580] team0: Port device team_slave_1 added [ 1164.822504][T13568] hsr_slave_0: entered promiscuous mode [ 1164.823529][T13568] hsr_slave_1: entered promiscuous mode [ 1164.824391][T13568] debugfs: 'hsr0' already exists in 'hsr' [ 1164.824411][T13568] Cannot create hsr debugfs directory [ 1165.312770][T13580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1165.312784][T13580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1165.312805][T13580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1165.875715][T13580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1165.875735][T13580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1165.875775][T13580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1165.978781][T13564] hsr_slave_0: entered promiscuous mode [ 1165.996322][T13564] hsr_slave_1: entered promiscuous mode [ 1166.010478][T13564] debugfs: 'hsr0' already exists in 'hsr' [ 1166.010585][T13564] Cannot create hsr debugfs directory [ 1175.188610][T13580] hsr_slave_0: entered promiscuous mode [ 1175.189812][T13580] hsr_slave_1: entered promiscuous mode [ 1175.219065][T13580] debugfs: 'hsr0' already exists in 'hsr' [ 1175.219088][T13580] Cannot create hsr debugfs directory [ 1177.944106][T13692] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1185.885378][T13725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1187.702782][ T9771] Bluetooth: hci2: Frame reassembly failed (-84) [ 1189.671554][ T5801] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 1192.672336][T13733] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1194.298422][ T151] bridge_slave_1: left allmulticast mode [ 1194.298582][ T151] bridge_slave_1: left promiscuous mode [ 1194.340434][ T151] bridge0: port 2(bridge_slave_1) entered disabled state [ 1196.012614][ T151] bridge_slave_0: left allmulticast mode [ 1196.012645][ T151] bridge_slave_0: left promiscuous mode [ 1196.012910][ T151] bridge0: port 1(bridge_slave_0) entered disabled state [ 1196.147317][ T151] bridge_slave_1: left allmulticast mode [ 1196.147340][ T151] bridge_slave_1: left promiscuous mode [ 1196.147533][ T151] bridge0: port 2(bridge_slave_1) entered disabled state [ 1196.232623][ T151] bridge_slave_0: left allmulticast mode [ 1196.232646][ T151] bridge_slave_0: left promiscuous mode [ 1196.232826][ T151] bridge0: port 1(bridge_slave_0) entered disabled state [ 1196.324148][ T151] bridge_slave_1: left allmulticast mode [ 1196.324173][ T151] bridge_slave_1: left promiscuous mode [ 1196.324350][ T151] bridge0: port 2(bridge_slave_1) entered disabled state [ 1196.413256][ T151] bridge_slave_0: left allmulticast mode [ 1196.413280][ T151] bridge_slave_0: left promiscuous mode [ 1196.413469][ T151] bridge0: port 1(bridge_slave_0) entered disabled state [ 1196.474396][ T151] bridge_slave_1: left allmulticast mode [ 1196.474420][ T151] bridge_slave_1: left promiscuous mode [ 1196.474608][ T151] bridge0: port 2(bridge_slave_1) entered disabled state [ 1196.532257][ T151] bridge_slave_0: left allmulticast mode [ 1196.532282][ T151] bridge_slave_0: left promiscuous mode [ 1196.532478][ T151] bridge0: port 1(bridge_slave_0) entered disabled state [ 1196.852949][ T151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1196.944938][ T151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1197.002918][ T151] bond0 (unregistering): Released all slaves [ 1197.308200][T12303] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1197.320175][T12303] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1197.323434][T12303] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1197.324770][T12303] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1197.325887][T12303] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1198.811685][ T151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1201.423085][ T5801] Bluetooth: hci2: command tx timeout [ 1201.423139][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1201.423200][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1201.528949][ T151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1201.890200][T13760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1202.063536][ T151] bond0 (unregistering): Released all slaves [ 1202.515623][ T151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1202.581941][ T151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1202.625968][ T151] bond0 (unregistering): Released all slaves [ 1202.831907][ T151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1202.910786][ T151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1202.916483][ T5801] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1202.942117][ T5801] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1202.947460][ T5801] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1202.948812][ T5801] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1202.950052][ T5801] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1202.983295][ T151] bond0 (unregistering): Released all slaves [ 1203.561002][ T5116] Bluetooth: hci2: command tx timeout [ 1204.667448][ T5801] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1204.689740][ T5801] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1204.698957][ T5801] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1204.700272][ T5801] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1204.718861][ T5801] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1205.422897][ T5801] Bluetooth: hci4: command tx timeout [ 1205.779960][ T5801] Bluetooth: hci2: command tx timeout [ 1207.085291][ T5801] Bluetooth: hci7: command tx timeout [ 1208.267958][ T5801] Bluetooth: hci4: command tx timeout [ 1208.268034][ T5801] Bluetooth: hci2: command tx timeout [ 1208.324921][T13782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1209.111085][ T5116] Bluetooth: hci7: command tx timeout [ 1210.311539][ T5116] Bluetooth: hci4: command tx timeout [ 1211.191108][ T5116] Bluetooth: hci7: command tx timeout [ 1212.391494][ T5116] Bluetooth: hci4: command tx timeout [ 1215.015846][ T5116] Bluetooth: hci7: command tx timeout [ 1215.452250][ T37] kauditd_printk_skb: 36 callbacks suppressed [ 1215.452299][ T37] audit: type=1800 audit(1775913043.944:956): pid=13800 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1918" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1215.951037][ T151] hsr_slave_0: left promiscuous mode [ 1216.291572][ T151] hsr_slave_1: left promiscuous mode [ 1216.295922][ T151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1216.341588][ T151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1217.831297][ T151] hsr_slave_0: left promiscuous mode [ 1218.042278][ T151] hsr_slave_1: left promiscuous mode [ 1218.044683][ T151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1218.102448][ T151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1218.327563][ T151] hsr_slave_0: left promiscuous mode [ 1218.352531][ T151] hsr_slave_1: left promiscuous mode [ 1218.353587][ T151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1218.406519][ T151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1218.557372][ T151] hsr_slave_0: left promiscuous mode [ 1218.591138][ T151] hsr_slave_1: left promiscuous mode [ 1218.591911][ T151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1218.614921][ T151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1219.559659][ T151] team0 (unregistering): Port device team_slave_1 removed [ 1219.856535][ T151] team0 (unregistering): Port device team_slave_0 removed [ 1219.935032][ T68] Bluetooth: hci8: Frame reassembly failed (-84) [ 1220.671775][ T151] team0 (unregistering): Port device team_slave_1 removed [ 1220.721980][ T151] team0 (unregistering): Port device team_slave_0 removed [ 1222.116252][ T5801] Bluetooth: hci8: command 0xfc11 tx timeout [ 1222.191052][ T5116] Bluetooth: hci8: Entering manufacturer mode failed (-110) [ 1222.414762][ T151] team0 (unregistering): Port device team_slave_1 removed [ 1223.548016][ T151] team0 (unregistering): Port device team_slave_0 removed [ 1224.376136][ T37] audit: type=1800 audit(1775913052.874:957): pid=13827 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1928" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 1229.251770][ T151] team0 (unregistering): Port device team_slave_1 removed [ 1229.311249][ T12] Bluetooth: hci8: Frame reassembly failed (-84) [ 1229.313100][ T151] team0 (unregistering): Port device team_slave_0 removed [ 1231.356940][ T5116] Bluetooth: hci8: Entering manufacturer mode failed (-110) [ 1231.398237][T13763] chnl_net:caif_netlink_parms(): no params data found [ 1231.527068][T13747] chnl_net:caif_netlink_parms(): no params data found [ 1232.137633][ T1542] Bluetooth: hci1: Frame reassembly failed (-84) [ 1232.562247][T13777] chnl_net:caif_netlink_parms(): no params data found [ 1233.267910][T13763] bridge0: port 1(bridge_slave_0) entered blocking state [ 1233.268115][T13763] bridge0: port 1(bridge_slave_0) entered disabled state [ 1233.268318][T13763] bridge_slave_0: entered allmulticast mode [ 1233.270181][T13763] bridge_slave_0: entered promiscuous mode [ 1233.338775][T13747] bridge0: port 1(bridge_slave_0) entered blocking state [ 1233.338935][T13747] bridge0: port 1(bridge_slave_0) entered disabled state [ 1233.339218][T13747] bridge_slave_0: entered allmulticast mode [ 1233.341747][T13747] bridge_slave_0: entered promiscuous mode [ 1233.408989][T13763] bridge0: port 2(bridge_slave_1) entered blocking state [ 1233.409083][T13763] bridge0: port 2(bridge_slave_1) entered disabled state [ 1233.409278][T13763] bridge_slave_1: entered allmulticast mode [ 1233.432533][T13763] bridge_slave_1: entered promiscuous mode [ 1233.460468][T13747] bridge0: port 2(bridge_slave_1) entered blocking state [ 1233.460553][T13747] bridge0: port 2(bridge_slave_1) entered disabled state [ 1233.460701][T13747] bridge_slave_1: entered allmulticast mode [ 1233.472758][T13747] bridge_slave_1: entered promiscuous mode [ 1233.763316][T13763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1233.813941][T13747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1233.814136][T13777] bridge0: port 1(bridge_slave_0) entered blocking state [ 1233.814228][T13777] bridge0: port 1(bridge_slave_0) entered disabled state [ 1233.814404][T13777] bridge_slave_0: entered allmulticast mode [ 1233.816725][T13777] bridge_slave_0: entered promiscuous mode [ 1233.872065][T13763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1233.906671][T13777] bridge0: port 2(bridge_slave_1) entered blocking state [ 1233.906815][T13777] bridge0: port 2(bridge_slave_1) entered disabled state [ 1233.907077][T13777] bridge_slave_1: entered allmulticast mode [ 1233.929996][T13777] bridge_slave_1: entered promiscuous mode [ 1233.992564][T13747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1234.147164][T13763] team0: Port device team_slave_0 added [ 1234.151897][ T5801] Bluetooth: hci1: command 0xfc11 tx timeout [ 1234.152914][ T5116] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 1234.209758][T13777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1234.215189][T13763] team0: Port device team_slave_1 added [ 1234.218279][T13747] team0: Port device team_slave_0 added [ 1234.227717][T13777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1234.328740][T13747] team0: Port device team_slave_1 added [ 1234.592062][T13763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1234.592083][T13763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1234.592114][T13763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1241.366643][ T68] Bluetooth: hci1: Frame reassembly failed (-84) [ 1242.002811][T13777] team0: Port device team_slave_0 added [ 1242.462138][T13763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1242.462157][T13763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1242.462190][T13763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1242.464043][T13747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1242.464058][T13747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1242.464088][T13747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1242.468672][T13777] team0: Port device team_slave_1 added [ 1242.592972][T13747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1242.592992][T13747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1242.593022][T13747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1242.805654][T13763] hsr_slave_0: entered promiscuous mode [ 1242.807243][T13763] hsr_slave_1: entered promiscuous mode [ 1242.808300][T13763] debugfs: 'hsr0' already exists in 'hsr' [ 1242.808326][T13763] Cannot create hsr debugfs directory [ 1242.847325][T13747] hsr_slave_0: entered promiscuous mode [ 1242.848876][T13747] hsr_slave_1: entered promiscuous mode [ 1242.849893][T13747] debugfs: 'hsr0' already exists in 'hsr' [ 1242.849919][T13747] Cannot create hsr debugfs directory [ 1243.351056][ T5801] Bluetooth: hci1: command 0xfc11 tx timeout [ 1243.351414][ T5116] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 1244.347917][T13777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1244.347934][T13777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1244.347957][T13777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1244.980503][T13915] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1246.035035][T13777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1246.035054][T13777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1246.035083][T13777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1247.089458][T13777] hsr_slave_0: entered promiscuous mode [ 1247.097283][T13777] hsr_slave_1: entered promiscuous mode [ 1247.106649][T13777] debugfs: 'hsr0' already exists in 'hsr' [ 1247.107992][T13777] Cannot create hsr debugfs directory [ 1249.522678][T13763] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1249.982789][T13763] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1250.085179][ T151] bridge_slave_1: left allmulticast mode [ 1250.085203][ T151] bridge_slave_1: left promiscuous mode [ 1250.085431][ T151] bridge0: port 2(bridge_slave_1) entered disabled state [ 1250.186427][ T151] bridge_slave_0: left allmulticast mode [ 1250.186460][ T151] bridge_slave_0: left promiscuous mode [ 1250.186734][ T151] bridge0: port 1(bridge_slave_0) entered disabled state [ 1250.267474][ T151] bridge_slave_1: left allmulticast mode [ 1250.267507][ T151] bridge_slave_1: left promiscuous mode [ 1250.267751][ T151] bridge0: port 2(bridge_slave_1) entered disabled state [ 1250.412811][ T151] bridge_slave_0: left allmulticast mode [ 1250.412845][ T151] bridge_slave_0: left promiscuous mode [ 1250.413109][ T151] bridge0: port 1(bridge_slave_0) entered disabled state [ 1250.488046][ T151] bridge_slave_1: left allmulticast mode [ 1250.488081][ T151] bridge_slave_1: left promiscuous mode [ 1250.488327][ T151] bridge0: port 2(bridge_slave_1) entered disabled state [ 1250.552789][ T151] bridge_slave_0: left allmulticast mode [ 1250.552822][ T151] bridge_slave_0: left promiscuous mode [ 1250.553093][ T151] bridge0: port 1(bridge_slave_0) entered disabled state [ 1250.911866][ T151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1251.032034][ T151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1252.328276][T13987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1254.370372][ T5801] Bluetooth: hci1: command 0xfc11 tx timeout [ 1254.377096][ T5116] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 1254.685894][ T151] bond0 (unregistering): Released all slaves [ 1255.233900][ T151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1255.312301][ T151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1255.373044][ T151] bond0 (unregistering): Released all slaves [ 1255.812883][ T151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1255.951296][T13996] nfs: Unknown parameter '¸' [ 1258.365222][ T151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1258.567910][ T5801] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1258.580306][ T5801] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1258.581947][ T5801] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1258.583129][ T5801] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1258.583903][ T5801] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1258.713373][ T151] bond0 (unregistering): Released all slaves [ 1258.907478][T13763] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1258.976731][T13763] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1260.633276][ T5801] Bluetooth: hci1: command tx timeout [ 1260.744425][T13777] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1261.717845][T13777] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1261.773286][T13777] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1261.872846][T13777] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1262.397795][ T151] hsr_slave_0: left promiscuous mode [ 1262.450669][ T151] hsr_slave_1: left promiscuous mode [ 1262.469496][ T151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1262.504324][ T151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1262.711645][ T5801] Bluetooth: hci1: command tx timeout [ 1262.978931][ T5116] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1262.982632][ T151] hsr_slave_0: left promiscuous mode [ 1263.005992][ T5116] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1263.007418][ T5116] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1263.009170][ T5116] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1263.034397][ T151] hsr_slave_1: left promiscuous mode [ 1263.035443][ T151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1263.035585][ T5116] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1263.100083][T14045] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1961'. [ 1263.147797][ T151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1263.301142][ T151] hsr_slave_0: left promiscuous mode [ 1263.320992][ T151] hsr_slave_1: left promiscuous mode [ 1263.321754][ T151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1263.347566][ T151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1263.904040][ T151] team0 (unregistering): Port device team_slave_1 removed [ 1263.951816][ T151] team0 (unregistering): Port device team_slave_0 removed [ 1264.421818][ T151] team0 (unregistering): Port device team_slave_1 removed [ 1264.472146][ T151] team0 (unregistering): Port device team_slave_0 removed [ 1264.568515][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1264.568590][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1264.791715][ T5116] Bluetooth: hci1: command tx timeout [ 1265.051756][ T151] team0 (unregistering): Port device team_slave_1 removed [ 1265.111687][ T151] team0 (unregistering): Port device team_slave_0 removed [ 1265.111761][ T5116] Bluetooth: hci2: command tx timeout [ 1265.342947][ T5801] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1265.346448][ T5801] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1265.347874][ T5801] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1265.388544][ T5801] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1265.389404][ T5801] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1266.085617][T14050] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1961'. [ 1266.515111][T14070] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1266.872319][ T5116] Bluetooth: hci1: command tx timeout [ 1267.192789][ T5116] Bluetooth: hci2: command tx timeout [ 1267.521284][ T5116] Bluetooth: hci4: command tx timeout [ 1269.769366][ T5116] Bluetooth: hci2: command tx timeout [ 1269.769373][ T5801] Bluetooth: hci4: command tx timeout [ 1270.820384][T14000] chnl_net:caif_netlink_parms(): no params data found [ 1271.834298][ T5801] Bluetooth: hci4: command tx timeout [ 1273.515885][ T5116] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 1273.910992][ T5801] Bluetooth: hci4: command tx timeout [ 1274.071667][T14000] bridge0: port 1(bridge_slave_0) entered blocking state [ 1274.071892][T14000] bridge0: port 1(bridge_slave_0) entered disabled state [ 1274.072519][T14000] bridge_slave_0: entered allmulticast mode [ 1274.101901][T14000] bridge_slave_0: entered promiscuous mode [ 1274.152195][T14000] bridge0: port 2(bridge_slave_1) entered blocking state [ 1274.152374][T14000] bridge0: port 2(bridge_slave_1) entered disabled state [ 1274.152963][T14000] bridge_slave_1: entered allmulticast mode [ 1274.155787][T14000] bridge_slave_1: entered promiscuous mode [ 1274.294232][ T5801] Bluetooth: hci2: command tx timeout [ 1274.478201][T14000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1274.541656][T14000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1274.762073][T14000] team0: Port device team_slave_0 added [ 1274.777350][T14047] chnl_net:caif_netlink_parms(): no params data found [ 1274.854369][T14000] team0: Port device team_slave_1 added [ 1275.169966][ T37] audit: type=1800 audit(1775913103.654:958): pid=14117 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.1973" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1275.719036][T14060] chnl_net:caif_netlink_parms(): no params data found [ 1278.337821][T14000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1278.337840][T14000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1278.337871][T14000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1278.627571][T14000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1278.627593][T14000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1278.627625][T14000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1281.265206][T14047] bridge0: port 1(bridge_slave_0) entered blocking state [ 1281.265439][T14047] bridge0: port 1(bridge_slave_0) entered disabled state [ 1281.265641][T14047] bridge_slave_0: entered allmulticast mode [ 1281.269561][T14047] bridge_slave_0: entered promiscuous mode [ 1281.604086][T14000] hsr_slave_0: entered promiscuous mode [ 1281.678186][T14000] hsr_slave_1: entered promiscuous mode [ 1281.684175][T14000] debugfs: 'hsr0' already exists in 'hsr' [ 1281.684245][T14000] Cannot create hsr debugfs directory [ 1281.729375][T14047] bridge0: port 2(bridge_slave_1) entered blocking state [ 1281.729732][T14047] bridge0: port 2(bridge_slave_1) entered disabled state [ 1281.730617][T14047] bridge_slave_1: entered allmulticast mode [ 1281.749679][T14047] bridge_slave_1: entered promiscuous mode [ 1281.802748][T14144] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1282.162857][T14060] bridge0: port 1(bridge_slave_0) entered blocking state [ 1282.163396][T14060] bridge0: port 1(bridge_slave_0) entered disabled state [ 1282.164068][T14060] bridge_slave_0: entered allmulticast mode [ 1282.210672][T14060] bridge_slave_0: entered promiscuous mode [ 1282.604584][T14060] bridge0: port 2(bridge_slave_1) entered blocking state [ 1282.607584][T14060] bridge0: port 2(bridge_slave_1) entered disabled state [ 1282.609571][T14060] bridge_slave_1: entered allmulticast mode [ 1282.675237][T14060] bridge_slave_1: entered promiscuous mode [ 1284.345663][T14047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1284.470685][T14047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1284.867181][T14060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1284.957686][T14060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1284.976676][T14047] team0: Port device team_slave_0 added [ 1285.125832][T14047] team0: Port device team_slave_1 added [ 1285.287098][T14060] team0: Port device team_slave_0 added [ 1285.369774][T14060] team0: Port device team_slave_1 added [ 1285.377328][T14047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1285.377346][T14047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1285.377376][T14047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1286.622010][T14047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1286.622029][T14047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1286.622058][T14047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1287.169417][T14060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1287.169437][T14060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1287.169470][T14060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1287.239597][T14060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1287.239615][T14060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1287.239640][T14060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1290.471361][ T5116] Bluetooth: hci5: command 0xfc11 tx timeout [ 1290.479885][ T5801] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 1290.582095][T14047] hsr_slave_0: entered promiscuous mode [ 1290.674268][T14047] hsr_slave_1: entered promiscuous mode [ 1290.840063][T14047] debugfs: 'hsr0' already exists in 'hsr' [ 1290.890355][T14047] Cannot create hsr debugfs directory [ 1292.558309][T14060] hsr_slave_0: entered promiscuous mode [ 1292.563525][T14060] hsr_slave_1: entered promiscuous mode [ 1292.566615][T14060] debugfs: 'hsr0' already exists in 'hsr' [ 1292.566676][T14060] Cannot create hsr debugfs directory [ 1297.317412][T14196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1300.832747][ T37] audit: type=1326 audit(1775913129.334:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14205 comm="syz.4.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4a16c819 code=0x7ffc0000 [ 1300.833113][ T37] audit: type=1326 audit(1775913129.334:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14205 comm="syz.4.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4a16c819 code=0x7ffc0000 [ 1300.833442][ T37] audit: type=1326 audit(1775913129.334:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14205 comm="syz.4.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9f4a16c819 code=0x7ffc0000 [ 1300.883184][ T37] audit: type=1326 audit(1775913129.344:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14205 comm="syz.4.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4a16c819 code=0x7ffc0000 [ 1300.883431][ T37] audit: type=1326 audit(1775913129.344:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14205 comm="syz.4.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4a16c819 code=0x7ffc0000 [ 1300.883565][ T37] audit: type=1326 audit(1775913129.384:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14205 comm="syz.4.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4a16c819 code=0x7ffc0000 [ 1300.883691][ T37] audit: type=1326 audit(1775913129.384:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14205 comm="syz.4.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4a16c819 code=0x7ffc0000 [ 1300.883791][ T37] audit: type=1326 audit(1775913129.384:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14205 comm="syz.4.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4a16c819 code=0x7ffc0000 [ 1300.883907][ T37] audit: type=1326 audit(1775913129.384:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14205 comm="syz.4.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9f4a16c819 code=0x7ffc0000 [ 1300.971033][ T37] audit: type=1326 audit(1775913129.444:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14205 comm="syz.4.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9f4a12d04e code=0x7ffc0000 [ 1301.416840][T14000] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1301.487297][T14000] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1304.091153][T14000] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1306.381802][T14000] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1306.634074][ T5116] Bluetooth: hci5: command 0xfc11 tx timeout [ 1306.637459][ T5801] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 1307.699491][T14000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1307.731869][T14000] 8021q: adding VLAN 0 to HW filter on device team0 [ 1307.740716][ T1560] bridge0: port 1(bridge_slave_0) entered blocking state [ 1307.758882][ T1560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1307.777601][ T1560] bridge0: port 2(bridge_slave_1) entered blocking state [ 1307.777816][ T1560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1310.105368][T14000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1310.272607][ T151] bridge_slave_1: left allmulticast mode [ 1310.272644][ T151] bridge_slave_1: left promiscuous mode [ 1310.272904][ T151] bridge0: port 2(bridge_slave_1) entered disabled state [ 1310.553479][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 1310.572850][ T151] bridge_slave_0: left allmulticast mode [ 1310.572874][ T151] bridge_slave_0: left promiscuous mode [ 1310.573075][ T151] bridge0: port 1(bridge_slave_0) entered disabled state [ 1310.654283][ T151] bridge_slave_1: left allmulticast mode [ 1310.654307][ T151] bridge_slave_1: left promiscuous mode [ 1310.654524][ T151] bridge0: port 2(bridge_slave_1) entered disabled state [ 1310.742844][ T151] bridge_slave_0: left allmulticast mode [ 1310.742876][ T151] bridge_slave_0: left promiscuous mode [ 1310.743121][ T151] bridge0: port 1(bridge_slave_0) entered disabled state [ 1310.848308][ T151] bridge_slave_1: left allmulticast mode [ 1310.848332][ T151] bridge_slave_1: left promiscuous mode [ 1310.848517][ T151] bridge0: port 2(bridge_slave_1) entered disabled state [ 1310.936171][ T151] bridge_slave_0: left allmulticast mode [ 1310.936195][ T151] bridge_slave_0: left promiscuous mode [ 1310.937641][ T151] bridge0: port 1(bridge_slave_0) entered disabled state [ 1311.331766][ T151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1311.339951][ T37] kauditd_printk_skb: 82 callbacks suppressed [ 1311.339965][ T37] audit: type=1326 audit(1775913139.834:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14284 comm="syz.4.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4a16c819 code=0x7ffc0000 [ 1311.340330][ T37] audit: type=1326 audit(1775913139.834:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14284 comm="syz.4.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4a16c819 code=0x7ffc0000 [ 1311.340552][ T37] audit: type=1326 audit(1775913139.834:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14284 comm="syz.4.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4a16c819 code=0x7ffc0000 [ 1311.340770][ T37] audit: type=1326 audit(1775913139.834:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14284 comm="syz.4.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9f4a16c819 code=0x7ffc0000 [ 1311.355425][ T37] audit: type=1326 audit(1775913139.834:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14284 comm="syz.4.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4a16c819 code=0x7ffc0000 [ 1311.355708][ T37] audit: type=1326 audit(1775913139.854:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14284 comm="syz.4.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4a16c819 code=0x7ffc0000 [ 1311.376333][ T37] audit: type=1326 audit(1775913139.854:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14284 comm="syz.4.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4a16c819 code=0x7ffc0000 [ 1311.376394][ T37] audit: type=1326 audit(1775913139.854:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14284 comm="syz.4.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4a16c819 code=0x7ffc0000 [ 1311.384854][ T37] audit: type=1326 audit(1775913139.884:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14284 comm="syz.4.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9f4a16c819 code=0x7ffc0000 [ 1311.384914][ T37] audit: type=1326 audit(1775913139.884:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14284 comm="syz.4.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4a16c819 code=0x7ffc0000 [ 1311.558736][ T151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1311.643589][ T151] bond0 (unregistering): Released all slaves [ 1311.872927][ T151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1311.971603][ T151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1312.035054][ T151] bond0 (unregistering): Released all slaves [ 1312.244797][ T151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1312.341795][ T151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1312.417122][ T151] bond0 (unregistering): Released all slaves [ 1312.582040][ T5801] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 1313.604351][T14296] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1314.854116][T14000] veth0_vlan: entered promiscuous mode [ 1315.291670][ T151] hsr_slave_0: left promiscuous mode [ 1315.366634][ T151] hsr_slave_1: left promiscuous mode [ 1315.367787][ T151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1315.402305][ T151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1315.641125][ T151] hsr_slave_0: left promiscuous mode [ 1315.683564][ T151] hsr_slave_1: left promiscuous mode [ 1315.684773][ T151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1315.724016][ T151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1315.911112][ T151] hsr_slave_0: left promiscuous mode [ 1316.042420][ T151] hsr_slave_1: left promiscuous mode [ 1316.043154][ T151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1316.082708][ T151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1316.908240][ T151] team0 (unregistering): Port device team_slave_1 removed [ 1317.021638][ T151] team0 (unregistering): Port device team_slave_0 removed [ 1319.392559][ T151] team0 (unregistering): Port device team_slave_1 removed [ 1319.441776][ T151] team0 (unregistering): Port device team_slave_0 removed [ 1319.602130][ T5801] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 1320.063472][ T151] team0 (unregistering): Port device team_slave_1 removed [ 1320.112998][ T151] team0 (unregistering): Port device team_slave_0 removed [ 1320.578522][T14343] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1321.955033][ T5116] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1322.086116][ T5116] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1322.087836][ T5116] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1322.093326][ T5116] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1322.094442][ T5116] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1322.336577][ T37] kauditd_printk_skb: 459 callbacks suppressed [ 1322.336599][ T37] audit: type=1326 audit(1775913150.834:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14352 comm="syz.2.2023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f15a2c819 code=0x7ffc0000 [ 1322.383030][ T37] audit: type=1326 audit(1775913150.884:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14352 comm="syz.2.2023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f15a2c819 code=0x7ffc0000 [ 1322.383086][ T37] audit: type=1326 audit(1775913150.884:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14352 comm="syz.2.2023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f15a2c819 code=0x7ffc0000 [ 1322.383158][ T37] audit: type=1326 audit(1775913150.884:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14352 comm="syz.2.2023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f15a2c819 code=0x7ffc0000 [ 1322.402107][ T37] audit: type=1326 audit(1775913150.884:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14352 comm="syz.2.2023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2f15a2c819 code=0x7ffc0000 [ 1322.402179][ T37] audit: type=1326 audit(1775913150.904:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14352 comm="syz.2.2023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f15a2c819 code=0x7ffc0000 [ 1322.402227][ T37] audit: type=1326 audit(1775913150.904:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14352 comm="syz.2.2023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f15a2c819 code=0x7ffc0000 [ 1322.402273][ T37] audit: type=1326 audit(1775913150.904:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14352 comm="syz.2.2023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f15a2c819 code=0x7ffc0000 [ 1322.402319][ T37] audit: type=1326 audit(1775913150.904:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14352 comm="syz.2.2023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f15a2c819 code=0x7ffc0000 [ 1322.402366][ T37] audit: type=1326 audit(1775913150.904:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14352 comm="syz.2.2023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2f15a2c819 code=0x7ffc0000 [ 1324.151321][ T5801] Bluetooth: hci5: command tx timeout [ 1324.662269][ T5116] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1324.687536][ T5116] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1324.719017][ T5116] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1324.733908][ T5116] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1324.739856][ T5116] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1325.455802][T14350] chnl_net:caif_netlink_parms(): no params data found [ 1326.024023][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1326.024100][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1326.259459][ T5801] Bluetooth: hci5: command tx timeout [ 1326.599061][T14350] bridge0: port 1(bridge_slave_0) entered blocking state [ 1326.599278][T14350] bridge0: port 1(bridge_slave_0) entered disabled state [ 1326.599499][T14350] bridge_slave_0: entered allmulticast mode [ 1326.602774][T14350] bridge_slave_0: entered promiscuous mode [ 1326.607141][T14350] bridge0: port 2(bridge_slave_1) entered blocking state [ 1326.607268][T14350] bridge0: port 2(bridge_slave_1) entered disabled state [ 1326.607563][T14350] bridge_slave_1: entered allmulticast mode [ 1326.632546][T14350] bridge_slave_1: entered promiscuous mode [ 1326.790972][ T5801] Bluetooth: hci1: command tx timeout [ 1326.877830][T14350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1327.207381][T14350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1327.633249][ T5116] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1327.704716][ T5116] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1327.869947][ T5116] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1327.941112][ T5116] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1327.958668][ T5116] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1328.311677][ T5801] Bluetooth: hci5: command tx timeout [ 1328.347791][T14435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1328.871125][ T5801] Bluetooth: hci1: command tx timeout [ 1329.335700][T14350] team0: Port device team_slave_0 added [ 1329.409353][T14350] team0: Port device team_slave_1 added [ 1329.623668][T14350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1329.623688][T14350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1329.623717][T14350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1329.685326][T14350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1329.685346][T14350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1329.685377][T14350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1329.897959][T14389] chnl_net:caif_netlink_parms(): no params data found [ 1330.090996][ T5801] Bluetooth: hci2: command tx timeout [ 1330.214911][T14350] hsr_slave_0: entered promiscuous mode [ 1330.216520][T14350] hsr_slave_1: entered promiscuous mode [ 1330.217556][T14350] debugfs: 'hsr0' already exists in 'hsr' [ 1330.217582][T14350] Cannot create hsr debugfs directory [ 1330.506988][ T5801] Bluetooth: hci5: command tx timeout [ 1331.416076][ T5801] Bluetooth: hci1: command tx timeout [ 1332.152432][ T5801] Bluetooth: hci2: command tx timeout [ 1333.061244][T14389] bridge0: port 1(bridge_slave_0) entered blocking state [ 1333.061437][T14389] bridge0: port 1(bridge_slave_0) entered disabled state [ 1333.061693][T14389] bridge_slave_0: entered allmulticast mode [ 1333.064647][T14389] bridge_slave_0: entered promiscuous mode [ 1333.123620][T14389] bridge0: port 2(bridge_slave_1) entered blocking state [ 1333.126251][T14389] bridge0: port 2(bridge_slave_1) entered disabled state [ 1333.126491][T14389] bridge_slave_1: entered allmulticast mode [ 1333.152355][T14389] bridge_slave_1: entered promiscuous mode [ 1333.553716][ T5801] Bluetooth: hci1: command tx timeout [ 1334.231017][ T5801] Bluetooth: hci2: command tx timeout [ 1334.297186][T14487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1335.650388][T14389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1335.728060][T14389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1336.256349][ T37] kauditd_printk_skb: 39 callbacks suppressed [ 1336.256394][ T37] audit: type=1326 audit(1775913164.724:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14494 comm="syz.2.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f15a2c819 code=0x7ffc0000 [ 1336.256696][ T37] audit: type=1326 audit(1775913164.724:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14494 comm="syz.2.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f15a2c819 code=0x7ffc0000 [ 1336.257008][ T37] audit: type=1326 audit(1775913164.734:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14494 comm="syz.2.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2f15a2c819 code=0x7ffc0000 [ 1336.257284][ T37] audit: type=1326 audit(1775913164.744:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14494 comm="syz.2.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f15a2c819 code=0x7ffc0000 [ 1336.257608][ T37] audit: type=1326 audit(1775913164.744:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14494 comm="syz.2.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f15a2c819 code=0x7ffc0000 [ 1336.257806][ T37] audit: type=1326 audit(1775913164.744:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14494 comm="syz.2.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2f15a2c819 code=0x7ffc0000 [ 1336.619207][ T5801] Bluetooth: hci2: command tx timeout [ 1337.042878][T14501] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 1337.435271][T14389] team0: Port device team_slave_0 added [ 1337.739099][T14389] team0: Port device team_slave_1 added [ 1338.751471][T14389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1338.751490][T14389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1338.751519][T14389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1338.818022][T14389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1338.818042][T14389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1338.818074][T14389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1339.415511][T14542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1341.072952][T14430] chnl_net:caif_netlink_parms(): no params data found [ 1342.261071][T14389] hsr_slave_0: entered promiscuous mode [ 1342.262693][T14389] hsr_slave_1: entered promiscuous mode [ 1342.263753][T14389] debugfs: 'hsr0' already exists in 'hsr' [ 1342.263779][T14389] Cannot create hsr debugfs directory [ 1344.191855][T14554] nfs: Unknown parameter '¸' [ 1345.253919][T14430] bridge0: port 1(bridge_slave_0) entered blocking state [ 1345.254052][T14430] bridge0: port 1(bridge_slave_0) entered disabled state [ 1345.254295][T14430] bridge_slave_0: entered allmulticast mode [ 1345.282320][T14430] bridge_slave_0: entered promiscuous mode [ 1345.314520][T14430] bridge0: port 2(bridge_slave_1) entered blocking state [ 1345.314665][T14430] bridge0: port 2(bridge_slave_1) entered disabled state [ 1345.314855][T14430] bridge_slave_1: entered allmulticast mode [ 1345.319024][T14430] bridge_slave_1: entered promiscuous mode [ 1345.446042][T14430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1345.469407][T14430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1347.058133][ T37] audit: type=1326 audit(1775913175.524:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14559 comm="syz.2.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f15a2c819 code=0x7ffc0000 [ 1347.058465][ T37] audit: type=1326 audit(1775913175.524:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14559 comm="syz.2.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f15a2c819 code=0x7ffc0000 [ 1347.058742][ T37] audit: type=1326 audit(1775913175.534:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14559 comm="syz.2.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2f15a2c819 code=0x7ffc0000 [ 1347.058880][ T37] audit: type=1326 audit(1775913175.534:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14559 comm="syz.2.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f15a2c819 code=0x7ffc0000 [ 1347.059143][ T37] audit: type=1326 audit(1775913175.534:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14559 comm="syz.2.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f15a2c819 code=0x7ffc0000 [ 1347.059410][ T37] audit: type=1326 audit(1775913175.544:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14559 comm="syz.2.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2f15a2c819 code=0x7ffc0000 [ 1347.873334][T14563] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 1348.056081][T14430] team0: Port device team_slave_0 added [ 1350.660600][T14430] team0: Port device team_slave_1 added [ 1350.741574][T14572] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1354.073464][ T5801] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 1354.814529][T14430] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1354.814549][T14430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1354.814581][T14430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1354.821209][T14430] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1354.821228][T14430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1354.821257][T14430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1355.179982][T14430] hsr_slave_0: entered promiscuous mode [ 1355.181914][T14430] hsr_slave_1: entered promiscuous mode [ 1355.182958][T14430] debugfs: 'hsr0' already exists in 'hsr' [ 1355.182985][T14430] Cannot create hsr debugfs directory [ 1355.230182][ T37] audit: type=1326 audit(1775913183.724:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14588 comm="syz.2.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f15a2c819 code=0x7ffc0000 [ 1355.230531][ T37] audit: type=1326 audit(1775913183.724:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14588 comm="syz.2.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f15a2c819 code=0x7ffc0000 [ 1355.238731][ T37] audit: type=1326 audit(1775913183.734:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14588 comm="syz.2.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f15a2c819 code=0x7ffc0000 [ 1355.238788][ T37] audit: type=1326 audit(1775913183.734:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14588 comm="syz.2.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f15a2c819 code=0x7ffc0000 [ 1355.238831][ T37] audit: type=1326 audit(1775913183.734:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14588 comm="syz.2.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2f15a2c819 code=0x7ffc0000 [ 1355.238872][ T37] audit: type=1326 audit(1775913183.734:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14588 comm="syz.2.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f15a2c819 code=0x7ffc0000 [ 1355.238916][ T37] audit: type=1326 audit(1775913183.734:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14588 comm="syz.2.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f15a2c819 code=0x7ffc0000 [ 1355.238959][ T37] audit: type=1326 audit(1775913183.734:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14588 comm="syz.2.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f15a2c819 code=0x7ffc0000 [ 1355.239005][ T37] audit: type=1326 audit(1775913183.734:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14588 comm="syz.2.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2f15a2c819 code=0x7ffc0000 [ 1355.239049][ T37] audit: type=1326 audit(1775913183.734:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14588 comm="syz.2.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f15a2c819 code=0x7ffc0000 [ 1356.518197][ T1560] bridge_slave_1: left allmulticast mode [ 1356.518222][ T1560] bridge_slave_1: left promiscuous mode [ 1356.518426][ T1560] bridge0: port 2(bridge_slave_1) entered disabled state [ 1356.612005][ T1560] bridge_slave_0: left allmulticast mode [ 1356.612030][ T1560] bridge_slave_0: left promiscuous mode [ 1356.612256][ T1560] bridge0: port 1(bridge_slave_0) entered disabled state [ 1356.677164][ T1560] bridge_slave_1: left allmulticast mode [ 1356.677219][ T1560] bridge_slave_1: left promiscuous mode [ 1356.677475][ T1560] bridge0: port 2(bridge_slave_1) entered disabled state [ 1356.735979][ T1560] bridge_slave_0: left allmulticast mode [ 1356.736003][ T1560] bridge_slave_0: left promiscuous mode [ 1356.736204][ T1560] bridge0: port 1(bridge_slave_0) entered disabled state [ 1356.805337][ T1560] bridge_slave_1: left allmulticast mode [ 1356.805360][ T1560] bridge_slave_1: left promiscuous mode [ 1356.805533][ T1560] bridge0: port 2(bridge_slave_1) entered disabled state [ 1356.912665][ T1560] bridge_slave_0: left allmulticast mode [ 1356.912695][ T1560] bridge_slave_0: left promiscuous mode [ 1356.912950][ T1560] bridge0: port 1(bridge_slave_0) entered disabled state [ 1357.531054][ T1560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1357.622786][ T1560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1357.898526][ T1560] bond0 (unregistering): Released all slaves [ 1358.481693][ T1560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1358.584444][ T1560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1358.646909][ T1560] bond0 (unregistering): Released all slaves [ 1359.424097][ T1560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1359.531631][ T1560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1359.559357][ T1560] bond0 (unregistering): Released all slaves [ 1360.134693][T14350] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1360.394969][T14350] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1360.581194][T14350] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1360.651814][T14350] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1363.671644][ T5801] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 1365.435638][ T1560] hsr_slave_0: left promiscuous mode [ 1365.576293][ T1560] hsr_slave_1: left promiscuous mode [ 1365.577057][ T1560] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1365.630522][ T1560] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1365.801097][ T1560] hsr_slave_0: left promiscuous mode [ 1365.841152][ T1560] hsr_slave_1: left promiscuous mode [ 1365.842204][ T1560] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1365.871889][ T1560] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1366.047677][ T1560] hsr_slave_0: left promiscuous mode [ 1366.065063][ T1560] hsr_slave_1: left promiscuous mode [ 1366.066418][ T1560] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1366.102924][ T1560] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1366.164494][ T1560] veth0_vlan: left promiscuous mode [ 1367.000556][ T1560] team0 (unregistering): Port device team_slave_1 removed [ 1367.069085][ T1560] team0 (unregistering): Port device team_slave_0 removed [ 1367.641623][ T1560] team0 (unregistering): Port device team_slave_1 removed [ 1367.712396][ T1560] team0 (unregistering): Port device team_slave_0 removed [ 1368.361617][ T1560] team0 (unregistering): Port device team_slave_1 removed [ 1368.423001][ T1560] team0 (unregistering): Port device team_slave_0 removed [ 1369.051152][T14389] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1373.344694][T14389] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1373.510997][T14389] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1373.604583][T14389] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1375.008429][T14350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1375.074818][T14350] 8021q: adding VLAN 0 to HW filter on device team0 [ 1375.110233][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1375.126177][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1375.144635][T14389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1375.170415][ T9771] bridge0: port 2(bridge_slave_1) entered blocking state [ 1375.179707][ T9771] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1375.237336][T14389] 8021q: adding VLAN 0 to HW filter on device team0 [ 1375.332104][ T1395] bridge0: port 1(bridge_slave_0) entered blocking state [ 1375.343887][ T1395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1375.495069][ T37] kauditd_printk_skb: 207 callbacks suppressed [ 1375.495116][ T37] audit: type=1326 audit(1775913203.944:1798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14646 comm="syz.4.2070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4a16c819 code=0x7ffc0000 [ 1375.495406][ T37] audit: type=1326 audit(1775913203.954:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14646 comm="syz.4.2070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4a16c819 code=0x7ffc0000 [ 1375.495730][ T37] audit: type=1326 audit(1775913203.954:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14646 comm="syz.4.2070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9f4a16c819 code=0x7ffc0000 [ 1375.496001][ T37] audit: type=1326 audit(1775913203.964:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14646 comm="syz.4.2070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4a16c819 code=0x7ffc0000 [ 1375.496269][ T37] audit: type=1326 audit(1775913203.964:1802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14646 comm="syz.4.2070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4a16c819 code=0x7ffc0000 [ 1375.496531][ T37] audit: type=1326 audit(1775913203.974:1803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14646 comm="syz.4.2070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9f4a16c819 code=0x7ffc0000 [ 1376.208858][T14651] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR [ 1376.239828][ T1395] bridge0: port 2(bridge_slave_1) entered blocking state [ 1376.239989][ T1395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1378.932302][T14430] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1380.301438][T14430] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1380.435680][T14430] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1380.599834][T14430] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1380.873887][T14389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1381.331427][T14389] veth0_vlan: entered promiscuous mode [ 1381.659349][T14389] veth1_vlan: entered promiscuous mode [ 1381.708384][T14430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1381.911768][ T37] audit: type=1326 audit(1775913210.374:1804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14679 comm="syz.2.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f15a2c819 code=0x7ffc0000 [ 1381.911830][ T37] audit: type=1326 audit(1775913210.384:1805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14679 comm="syz.2.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f2f15a2c819 code=0x7ffc0000 [ 1381.911881][ T37] audit: type=1326 audit(1775913210.384:1806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14679 comm="syz.2.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f15a2c819 code=0x7ffc0000 [ 1381.911931][ T37] audit: type=1326 audit(1775913210.384:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14679 comm="syz.2.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2f159ed04e code=0x7ffc0000 [ 1381.911979][ T37] audit: type=1326 audit(1775913210.384:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14679 comm="syz.2.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f15a2c819 code=0x7ffc0000 [ 1381.912027][ T37] audit: type=1326 audit(1775913210.384:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14679 comm="syz.2.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2f15a2c819 code=0x7ffc0000 [ 1381.912075][ T37] audit: type=1326 audit(1775913210.384:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14679 comm="syz.2.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f15a2c819 code=0x7ffc0000 [ 1381.912123][ T37] audit: type=1326 audit(1775913210.384:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14679 comm="syz.2.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f2f15a2c819 code=0x7ffc0000 [ 1381.912170][ T37] audit: type=1326 audit(1775913210.394:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14679 comm="syz.2.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f15a2c819 code=0x7ffc0000 [ 1381.912219][ T37] audit: type=1326 audit(1775913210.394:1813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14679 comm="syz.2.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f2f15a2c819 code=0x7ffc0000 [ 1381.939953][ T5116] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1381.963531][ T5116] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1381.966576][ T5116] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1381.969475][ T5116] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1381.970285][ T5116] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1383.154607][T14430] 8021q: adding VLAN 0 to HW filter on device team0 [ 1384.157977][ T9771] bridge0: port 1(bridge_slave_0) entered blocking state [ 1384.158234][ T9771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1384.184992][T14389] veth0_macvtap: entered promiscuous mode [ 1384.208803][ T9771] bridge0: port 2(bridge_slave_1) entered blocking state [ 1384.208984][ T9771] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1384.302021][T14389] veth1_macvtap: entered promiscuous mode [ 1384.402572][ T5116] Bluetooth: hci4: command tx timeout [ 1385.032694][T14684] chnl_net:caif_netlink_parms(): no params data found [ 1385.889566][ T5801] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1385.905654][ T5801] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1385.906962][ T5801] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1385.910358][ T5801] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1385.973303][ T5801] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1386.535621][T14706] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2076'. [ 1386.535768][T14706] openvswitch: netlink: Flow key attr not present in new flow. [ 1386.547241][ T5116] Bluetooth: hci4: command tx timeout [ 1387.438488][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1387.438559][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1387.771402][T14684] bridge0: port 1(bridge_slave_0) entered blocking state [ 1387.771533][T14684] bridge0: port 1(bridge_slave_0) entered disabled state [ 1387.771798][T14684] bridge_slave_0: entered allmulticast mode [ 1387.774528][T14684] bridge_slave_0: entered promiscuous mode [ 1388.017700][T14684] bridge0: port 2(bridge_slave_1) entered blocking state [ 1388.017826][T14684] bridge0: port 2(bridge_slave_1) entered disabled state [ 1388.018103][T14684] bridge_slave_1: entered allmulticast mode [ 1388.020282][T14684] bridge_slave_1: entered promiscuous mode [ 1388.123663][T14684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1388.154109][T14684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1388.168756][ T5116] Bluetooth: hci1: command tx timeout [ 1388.450259][T14684] team0: Port device team_slave_0 added [ 1388.476111][T14684] team0: Port device team_slave_1 added [ 1388.603780][T14684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1388.603800][T14684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1388.603831][T14684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1388.642357][T14684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1388.642421][T14684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1388.642498][T14684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1388.644367][ T5116] Bluetooth: hci4: command tx timeout [ 1388.779212][T14718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2077'. [ 1389.160078][T14684] hsr_slave_0: entered promiscuous mode [ 1389.161994][T14684] hsr_slave_1: entered promiscuous mode [ 1389.163009][T14684] debugfs: 'hsr0' already exists in 'hsr' [ 1389.163036][T14684] Cannot create hsr debugfs directory [ 1389.292337][ T5801] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1389.311444][ T5801] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1389.314462][ T5801] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1389.315734][ T5801] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1389.316522][ T5801] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1390.558735][T12303] Bluetooth: hci1: command tx timeout [ 1391.271947][T12303] Bluetooth: hci4: command tx timeout [ 1391.773725][ T1560] bridge_slave_1: left allmulticast mode [ 1391.773757][ T1560] bridge_slave_1: left promiscuous mode [ 1391.774015][ T1560] bridge0: port 2(bridge_slave_1) entered disabled state [ 1391.830922][ T5116] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 1391.836001][ T1560] bridge_slave_0: left allmulticast mode [ 1391.836033][ T1560] bridge_slave_0: left promiscuous mode [ 1391.836285][ T1560] bridge0: port 1(bridge_slave_0) entered disabled state [ 1392.077311][ T5116] Bluetooth: hci2: command tx timeout [ 1392.631033][ T5116] Bluetooth: hci1: command tx timeout [ 1394.173919][ T5116] Bluetooth: hci2: command tx timeout [ 1394.710905][ T5116] Bluetooth: hci1: command tx timeout [ 1395.107055][ T37] kauditd_printk_skb: 20 callbacks suppressed [ 1395.107179][ T37] audit: type=1800 audit(1775913223.604:1834): pid=14744 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.2083" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 1396.230959][ T5116] Bluetooth: hci2: command tx timeout [ 1396.987795][T14755] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2085'. [ 1397.202554][ T1560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1397.312256][ T1560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1397.333435][ T1560] bond0 (unregistering): Released all slaves [ 1397.393915][T14757] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2085'. [ 1397.547614][T14753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2086'. [ 1397.631486][T14704] chnl_net:caif_netlink_parms(): no params data found [ 1399.020974][ T5116] Bluetooth: hci2: command tx timeout [ 1400.019496][ T1560] hsr_slave_0: left promiscuous mode [ 1400.051314][ T1560] hsr_slave_1: left promiscuous mode [ 1400.052157][ T1560] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1400.101883][ T1560] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1400.165505][T14763] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2088'. [ 1400.165538][T14763] openvswitch: netlink: Flow key attr not present in new flow. [ 1400.831621][ T1560] team0 (unregistering): Port device team_slave_1 removed [ 1400.904963][ T1560] team0 (unregistering): Port device team_slave_0 removed [ 1401.380081][T14795] tipc: Can't bind to reserved service type 2 [ 1402.039597][T14704] bridge0: port 1(bridge_slave_0) entered blocking state [ 1402.039726][T14704] bridge0: port 1(bridge_slave_0) entered disabled state [ 1402.039981][T14704] bridge_slave_0: entered allmulticast mode [ 1402.072624][T14704] bridge_slave_0: entered promiscuous mode [ 1402.126239][T14704] bridge0: port 2(bridge_slave_1) entered blocking state [ 1402.126363][T14704] bridge0: port 2(bridge_slave_1) entered disabled state [ 1402.126627][T14704] bridge_slave_1: entered allmulticast mode [ 1402.128732][T14704] bridge_slave_1: entered promiscuous mode [ 1403.799635][T14704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1403.858690][T14704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1404.010229][T14821] Invalid logical block size (18) [ 1404.123846][T14704] team0: Port device team_slave_0 added [ 1404.673371][T14704] team0: Port device team_slave_1 added [ 1405.045215][T14832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2110'. [ 1405.172159][T14704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1405.172176][T14704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1405.172200][T14704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1405.242198][T14704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1405.242217][T14704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1405.242248][T14704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1405.723250][T14704] hsr_slave_0: entered promiscuous mode [ 1405.725536][T14704] hsr_slave_1: entered promiscuous mode [ 1405.726572][T14704] debugfs: 'hsr0' already exists in 'hsr' [ 1405.726599][T14704] Cannot create hsr debugfs directory [ 1405.731195][T14722] chnl_net:caif_netlink_parms(): no params data found [ 1405.831731][T13931] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 1405.985235][T13931] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1405.986132][T13931] usb 3-1: not running at top speed; connect to a high speed hub [ 1405.987759][T13931] usb 3-1: config 15 has an invalid interface number: 131 but max is 0 [ 1405.987785][T13931] usb 3-1: config 15 has no interface number 0 [ 1405.987830][T13931] usb 3-1: config 15 interface 131 has no altsetting 0 [ 1405.991370][T13931] usb 3-1: New USB device found, idVendor=093a, idProduct=010f, bcdDevice=ea.30 [ 1405.991399][T13931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1405.991419][T13931] usb 3-1: Product: syz [ 1405.991434][T13931] usb 3-1: Manufacturer: syz [ 1405.991456][T13931] usb 3-1: SerialNumber: syz [ 1408.516268][T14860] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 1408.542238][T14859] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2116'. [ 1408.582374][T13931] gspca_main: mr97310a-2.14.0 probing 093a:010f [ 1408.582506][T13931] gspca_mr97310a: reg write [21] error -22 [ 1408.582606][T13931] mr97310a 3-1:15.131: probe with driver mr97310a failed with error -22 [ 1408.614164][T13931] usb 3-1: USB disconnect, device number 9 [ 1410.158969][T14875] openvswitch: netlink: Tunnel attr 146 out of range max 16 [ 1410.637876][T14879] capability: warning: `syz.2.2118' uses deprecated v2 capabilities in a way that may be insecure [ 1410.698980][T14722] bridge0: port 1(bridge_slave_0) entered blocking state [ 1410.699209][T14722] bridge0: port 1(bridge_slave_0) entered disabled state [ 1410.699457][T14722] bridge_slave_0: entered allmulticast mode [ 1410.733273][T14722] bridge_slave_0: entered promiscuous mode [ 1410.771783][T14722] bridge0: port 2(bridge_slave_1) entered blocking state [ 1410.771910][T14722] bridge0: port 2(bridge_slave_1) entered disabled state [ 1410.772159][T14722] bridge_slave_1: entered allmulticast mode [ 1410.774871][T14722] bridge_slave_1: entered promiscuous mode [ 1411.042500][T14884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2123'. [ 1411.291467][T14887] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2124'. [ 1411.387064][T14684] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1411.428585][T14722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1411.472633][T14684] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1411.509014][T14722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1411.533945][T14684] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1411.672721][T14684] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1411.767788][T14722] team0: Port device team_slave_0 added [ 1413.807405][T14908] netlink: 'syz.4.2128': attribute type 1 has an invalid length. [ 1413.827899][T14722] team0: Port device team_slave_1 added [ 1414.972589][T14924] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2131'. [ 1415.429475][T14722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1415.431571][T14722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1415.433909][T14722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1415.495521][T14722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1415.495535][T14722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1415.495556][T14722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1415.805609][T14932] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1416.352659][T14722] hsr_slave_0: entered promiscuous mode [ 1416.353779][T14722] hsr_slave_1: entered promiscuous mode [ 1416.354421][T14722] debugfs: 'hsr0' already exists in 'hsr' [ 1416.354438][T14722] Cannot create hsr debugfs directory [ 1417.328694][T14945] use of bytesused == 0 is deprecated and will be removed in the future, [ 1417.328707][T14945] use the actual size instead. [ 1417.507480][ T1560] bridge_slave_1: left allmulticast mode [ 1417.507513][ T1560] bridge_slave_1: left promiscuous mode [ 1417.507769][ T1560] bridge0: port 2(bridge_slave_1) entered disabled state [ 1417.632577][ T1560] bridge_slave_0: left allmulticast mode [ 1417.632614][ T1560] bridge_slave_0: left promiscuous mode [ 1417.632838][ T1560] bridge0: port 1(bridge_slave_0) entered disabled state [ 1417.662408][T14954] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2139'. [ 1417.725200][ T1560] bridge_slave_1: left allmulticast mode [ 1417.725224][ T1560] bridge_slave_1: left promiscuous mode [ 1417.725432][ T1560] bridge0: port 2(bridge_slave_1) entered disabled state [ 1417.789392][T14957] comedi: No check for data length of config insn id 1986356271 is implemented [ 1417.789407][T14957] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 1417.789417][T14957] comedi: Assuming n=86 is correct [ 1417.831171][ T5786] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1417.852282][ T1560] bridge_slave_0: left allmulticast mode [ 1417.852306][ T1560] bridge_slave_0: left promiscuous mode [ 1417.852488][ T1560] bridge0: port 1(bridge_slave_0) entered disabled state [ 1418.003433][ T5786] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1418.003477][ T5786] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1418.003506][ T5786] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1418.003550][ T5786] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1418.003575][ T5786] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1418.008600][ T5786] usb 5-1: config 0 descriptor?? [ 1418.474781][ T5786] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1419.315202][ T1560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1419.393292][ T1560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1419.466936][ T1560] bond0 (unregistering): Released all slaves [ 1419.695117][ C0] plantronics 0003:047F:FFFF.000B: usb_submit_urb(ctrl) failed: -1 [ 1420.075650][ T1560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1420.308051][ T1560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1420.653208][ T5786] usb 5-1: USB disconnect, device number 15 [ 1420.682666][ T1560] bond0 (unregistering): Released all slaves [ 1421.805208][ T1560] hsr_slave_0: left promiscuous mode [ 1421.823223][ T1560] hsr_slave_1: left promiscuous mode [ 1421.824528][ T1560] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1421.933645][ T1560] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1422.585983][ T1560] hsr_slave_0: left promiscuous mode [ 1422.632865][ T1560] hsr_slave_1: left promiscuous mode [ 1422.633773][ T1560] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1422.673387][ T1560] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1422.821443][ T1560] veth1_macvtap: left promiscuous mode [ 1422.821518][ T1560] veth0_macvtap: left promiscuous mode [ 1422.821688][ T1560] veth1_vlan: left promiscuous mode [ 1422.821809][ T1560] veth0_vlan: left promiscuous mode [ 1423.231006][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1424.103124][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 1424.108505][ T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1424.108538][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1424.108560][ T9] usb 5-1: Product: syz [ 1424.108575][ T9] usb 5-1: Manufacturer: syz [ 1424.108590][ T9] usb 5-1: SerialNumber: syz [ 1424.202507][ T9] usb 5-1: config 0 descriptor?? [ 1424.413845][ T9] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1424.703374][ T1560] team0 (unregistering): Port device team_slave_1 removed [ 1424.762776][ T1560] team0 (unregistering): Port device team_slave_0 removed [ 1425.572790][ T1560] team0 (unregistering): Port device team_slave_1 removed [ 1425.623251][ T1560] team0 (unregistering): Port device team_slave_0 removed [ 1425.894032][ T9] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1425.927119][ T9] usb 5-1: USB disconnect, device number 16 [ 1426.223671][T14704] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1426.267932][T14704] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1426.595577][T14704] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1427.161186][T14704] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1428.173877][T14684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1428.236521][T14684] 8021q: adding VLAN 0 to HW filter on device team0 [ 1428.264441][ T2244] bridge0: port 1(bridge_slave_0) entered blocking state [ 1428.265517][ T2244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1428.323209][ T463] bridge0: port 2(bridge_slave_1) entered blocking state [ 1428.323433][ T463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1429.698632][T14029] kernel write not supported for file /sg0 (pid: 14029 comm: kworker/0:1) [ 1430.703298][T14704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1431.392745][T14704] 8021q: adding VLAN 0 to HW filter on device team0 [ 1431.655799][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 1431.659437][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1431.843743][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 1431.843881][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1432.040393][T14722] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1432.093788][T14722] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1432.156982][T14722] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1432.282858][T14722] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1432.335054][T14684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1432.669194][T14684] veth0_vlan: entered promiscuous mode [ 1432.708302][T14684] veth1_vlan: entered promiscuous mode [ 1432.853571][T14722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1432.876079][T14684] veth0_macvtap: entered promiscuous mode [ 1432.907278][T14684] veth1_macvtap: entered promiscuous mode [ 1432.923388][T14704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1432.949877][T14722] 8021q: adding VLAN 0 to HW filter on device team0 [ 1433.008394][ T2244] bridge0: port 1(bridge_slave_0) entered blocking state [ 1433.009463][ T2244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1433.043592][T14684] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1433.073306][ T2244] bridge0: port 2(bridge_slave_1) entered blocking state [ 1433.073605][ T2244] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1433.088855][T14684] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1433.156335][ T151] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1433.171531][ T151] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1433.191209][ T151] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1433.209888][ T151] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1433.609597][T15137] 9pnet_virtio: no channels available for device syz [ 1433.902139][T15137] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1434.136370][T15137] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1436.900532][T14704] veth0_vlan: entered promiscuous mode [ 1437.161116][T14704] veth1_vlan: entered promiscuous mode [ 1437.237417][ T1395] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1437.237441][ T1395] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1437.391075][ T463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1437.391097][ T463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1437.456293][T14704] veth0_macvtap: entered promiscuous mode [ 1437.478034][T14704] veth1_macvtap: entered promiscuous mode [ 1437.647399][T14704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1437.730112][T14704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1437.833850][ T463] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1437.837014][ T463] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1437.837969][T10366] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1437.838979][ T463] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1438.521040][T14029] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1438.635650][ T143] kworker/u8:5 (143) used greatest stack depth: 15008 bytes left [ 1438.718330][T14029] usb 5-1: Using ep0 maxpacket: 8 [ 1438.846215][T14722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1438.865897][T12236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1438.865920][T12236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1439.321847][ T2244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1439.321869][ T2244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1440.487381][T15195] input: syz0 as /devices/virtual/input/input6 [ 1441.153600][T14029] usb 5-1: device descriptor read/all, error -71 [ 1441.164560][T14722] veth0_vlan: entered promiscuous mode [ 1441.289200][T14722] veth1_vlan: entered promiscuous mode [ 1441.565121][T14722] veth0_macvtap: entered promiscuous mode [ 1441.609634][T15209] batadv_slave_1: entered promiscuous mode [ 1441.617693][T14722] veth1_macvtap: entered promiscuous mode [ 1441.661725][T15206] batadv_slave_1: left promiscuous mode [ 1441.704398][T14722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1441.740223][T14722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1441.768276][T12236] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1441.776901][ T463] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1441.790231][ T463] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1441.790477][ T463] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1441.982160][T15213] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1442.442957][T12236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1442.442981][T12236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1442.645479][T15229] vlan2: entered promiscuous mode [ 1442.645736][T15229] vlan2: entered allmulticast mode [ 1442.645751][T15229] hsr_slave_1: entered allmulticast mode [ 1442.726769][T15229] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2203'. [ 1443.735172][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1443.735195][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1444.030942][T15250] batadv_slave_1: entered promiscuous mode [ 1444.031638][T15250] batadv_slave_1: left promiscuous mode [ 1448.991483][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1448.991535][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1450.791291][T15300] could not allocate digest TFM handle [ 1451.215096][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1451.384287][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1451.389251][ T9] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1451.389282][ T9] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1451.389302][ T9] usb 3-1: Product: syz [ 1451.389317][ T9] usb 3-1: Manufacturer: syz [ 1451.389331][ T9] usb 3-1: SerialNumber: syz [ 1451.478197][ T9] usb 3-1: config 0 descriptor?? [ 1451.581001][ T5853] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1451.602707][T15327] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1451.603052][T15327] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1451.733687][ T5853] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1451.733724][ T5853] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1451.733748][ T5853] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1451.733793][ T5853] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1451.733817][ T5853] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1451.739968][ T5853] usb 1-1: config 0 descriptor?? [ 1452.183101][ T9] usb 3-1: USB disconnect, device number 10 [ 1452.454917][ T5853] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1453.502524][ C0] plantronics 0003:047F:FFFF.000C: usb_submit_urb(ctrl) failed: -1 [ 1453.740229][T15334] udevd[15334]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1454.762595][T14355] usb 1-1: USB disconnect, device number 11 [ 1458.847703][T15411] netlink: 'syz.8.2255': attribute type 1 has an invalid length. [ 1473.888871][T15547] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1475.390876][T14029] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1475.547526][T14029] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1475.547557][T14029] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1475.547579][T14029] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1475.547599][T14029] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1475.552054][T14029] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1475.552137][T14029] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1475.552158][T14029] usb 1-1: Product: syz [ 1475.552172][T14029] usb 1-1: Manufacturer: syz [ 1475.552186][T14029] usb 1-1: SerialNumber: syz [ 1475.596772][T14029] usb 1-1: config 0 descriptor?? [ 1475.702059][T14029] iguanair 1-1:0.0: failed to submit urb: -90 [ 1475.702379][T14029] iguanair 1-1:0.0: probe with driver iguanair failed with error -90 [ 1475.876917][ T5921] usb 1-1: USB disconnect, device number 12 [ 1480.566497][T14029] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1480.820840][T14029] usb 3-1: Using ep0 maxpacket: 8 [ 1480.853838][T14029] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1480.854415][T14029] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1480.854565][T14029] usb 3-1: Product: syz [ 1480.855072][T14029] usb 3-1: Manufacturer: syz [ 1480.855638][T14029] usb 3-1: SerialNumber: syz [ 1481.031637][T14029] usb 3-1: config 0 descriptor?? [ 1481.521841][T14029] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1482.891550][T14029] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1482.899771][T14029] usb 3-1: USB disconnect, device number 11 [ 1483.301075][ T5921] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1483.959517][ T5921] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1483.959545][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1483.959564][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1483.959581][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1484.004729][ T5921] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1484.004764][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1484.004786][ T5921] usb 5-1: Product: syz [ 1484.004802][ T5921] usb 5-1: Manufacturer: syz [ 1484.004817][ T5921] usb 5-1: SerialNumber: syz [ 1484.066056][ T5921] usb 5-1: config 0 descriptor?? [ 1484.114375][ T5921] iguanair 5-1:0.0: failed to submit urb: -90 [ 1484.114659][ T5921] iguanair 5-1:0.0: probe with driver iguanair failed with error -90 [ 1484.414581][T14029] usb 5-1: USB disconnect, device number 19 [ 1486.788054][T15687] netlink: 'syz.3.2337': attribute type 1 has an invalid length. [ 1487.586320][ T5853] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1488.280888][ T5853] usb 3-1: Using ep0 maxpacket: 8 [ 1488.311942][ T5853] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1488.311977][ T5853] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1488.311992][ T5853] usb 3-1: Product: syz [ 1488.312003][ T5853] usb 3-1: Manufacturer: syz [ 1488.312013][ T5853] usb 3-1: SerialNumber: syz [ 1488.316534][ T5853] usb 3-1: config 0 descriptor?? [ 1488.552976][ T5853] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1488.603422][T15712] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2343'. [ 1488.605940][T15712] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2343'. [ 1489.530878][ T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1489.717010][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1489.717045][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1489.717077][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1489.717094][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1489.720977][ T9] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1489.721008][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1489.721077][ T9] usb 5-1: Product: syz [ 1489.721128][ T9] usb 5-1: Manufacturer: syz [ 1489.721143][ T9] usb 5-1: SerialNumber: syz [ 1489.774413][ T9] usb 5-1: config 0 descriptor?? [ 1489.847586][ T9] iguanair 5-1:0.0: failed to submit urb: -90 [ 1489.870294][ T9] iguanair 5-1:0.0: probe with driver iguanair failed with error -90 [ 1489.884589][ T5853] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1489.999268][ T9] usb 5-1: USB disconnect, device number 20 [ 1490.062803][ T5853] usb 3-1: USB disconnect, device number 12 [ 1491.832982][T15742] netlink: 'syz.3.2351': attribute type 1 has an invalid length. [ 1492.562060][T15746] netlink: 'syz.4.2353': attribute type 1 has an invalid length. [ 1493.095019][T14029] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1494.317770][T14029] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1494.317808][T14029] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1494.317831][T14029] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1494.317875][T14029] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1494.317900][T14029] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1494.361324][T14029] usb 9-1: config 0 descriptor?? [ 1494.451009][T12585] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1495.000904][T12585] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1495.000941][T12585] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1495.000965][T12585] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1495.001009][T12585] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1495.001032][T12585] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1495.099124][T12585] usb 4-1: config 0 descriptor?? [ 1495.217547][T14029] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1495.388809][T14029] usb 9-1: USB disconnect, device number 2 [ 1496.230162][T12585] usbhid 4-1:0.0: can't add hid device: -71 [ 1496.230291][T12585] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1496.384615][T12585] usb 4-1: USB disconnect, device number 8 [ 1496.464468][T15774] fido_id[15774]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1497.449046][T15788] netlink: 'syz.4.2365': attribute type 1 has an invalid length. [ 1497.565428][T14029] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1498.119644][T14029] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1498.119670][T14029] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1498.119689][T14029] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1498.119706][T14029] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1498.130041][T14029] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1498.130132][T14029] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1498.130190][T14029] usb 3-1: Product: syz [ 1498.130233][T14029] usb 3-1: Manufacturer: syz [ 1498.130276][T14029] usb 3-1: SerialNumber: syz [ 1498.220108][T14029] usb 3-1: config 0 descriptor?? [ 1498.224745][T12585] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1498.284284][T14029] iguanair 3-1:0.0: failed to submit urb: -90 [ 1498.284475][T14029] iguanair 3-1:0.0: probe with driver iguanair failed with error -90 [ 1498.390963][T12585] usb 4-1: Using ep0 maxpacket: 8 [ 1498.397251][T12585] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1498.397275][T12585] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1498.397289][T12585] usb 4-1: Product: syz [ 1498.397300][T12585] usb 4-1: Manufacturer: syz [ 1498.397310][T12585] usb 4-1: SerialNumber: syz [ 1498.452804][T12585] usb 4-1: config 0 descriptor?? [ 1498.481775][T14029] usb 3-1: USB disconnect, device number 13 [ 1498.734581][T12585] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1499.203704][T15801] netlink: 'syz.8.2369': attribute type 1 has an invalid length. [ 1501.239424][T12585] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1501.254973][T12585] usb 4-1: USB disconnect, device number 9 [ 1504.256143][T12585] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1504.677497][T15837] netlink: 'syz.2.2378': attribute type 1 has an invalid length. [ 1505.164483][T12585] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1505.164521][T12585] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1505.164545][T12585] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1505.164590][T12585] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1505.164614][T12585] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1505.263183][T12585] usb 1-1: config 0 descriptor?? [ 1506.504441][T12585] usbhid 1-1:0.0: can't add hid device: -71 [ 1506.504573][T12585] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1506.545656][T12585] usb 1-1: USB disconnect, device number 13 [ 1507.086133][T15855] netlink: 'syz.4.2384': attribute type 1 has an invalid length. [ 1507.270930][ T5116] Bluetooth: hci4: command 0x0406 tx timeout [ 1510.338197][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1510.338264][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1510.546171][T15895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2393'. [ 1512.551051][ T5116] Bluetooth: hci1: command 0x0406 tx timeout [ 1513.380881][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1513.560892][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1514.077736][T15920] netlink: 'syz.0.2397': attribute type 1 has an invalid length. [ 1514.104120][ T9] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1514.104145][ T9] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1514.104160][ T9] usb 3-1: Product: syz [ 1514.104170][ T9] usb 3-1: Manufacturer: syz [ 1514.104181][ T9] usb 3-1: SerialNumber: syz [ 1514.151167][ T9] usb 3-1: config 0 descriptor?? [ 1515.219143][T14355] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1515.577283][ T9] usb 3-1: USB disconnect, device number 14 [ 1515.748598][T14355] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1515.748637][T14355] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1515.748654][T14355] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1515.748686][T14355] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1515.748703][T14355] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1516.369673][T14355] usb 9-1: config 0 descriptor?? [ 1516.801563][T14355] usbhid 9-1:0.0: can't add hid device: -71 [ 1516.801657][T14355] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1516.837195][T14355] usb 9-1: USB disconnect, device number 3 [ 1517.910316][T15950] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 1518.574191][T15964] netlink: 'syz.4.2410': attribute type 1 has an invalid length. [ 1519.510862][T12303] Bluetooth: hci0: command 0x0406 tx timeout [ 1519.680926][T14029] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1520.250974][T14029] usb 3-1: Using ep0 maxpacket: 16 [ 1520.320539][T14029] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1520.320575][T14029] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1520.320597][T14029] usb 3-1: Product: syz [ 1520.320611][T14029] usb 3-1: Manufacturer: syz [ 1520.320625][T14029] usb 3-1: SerialNumber: syz [ 1521.458287][T14029] usb 3-1: config 0 descriptor?? [ 1522.200881][T14029] usb 3-1: USB disconnect, device number 15 [ 1522.721588][T16007] netlink: 'syz.4.2424': attribute type 1 has an invalid length. [ 1525.700860][ T5921] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1526.987841][ T5853] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1527.401348][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1527.401395][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1527.401420][ T5921] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1527.401467][ T5921] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1527.401491][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1527.479847][ T5921] usb 5-1: config 0 descriptor?? [ 1527.560855][ T5853] usb 3-1: Using ep0 maxpacket: 16 [ 1527.589545][ T5853] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1527.589980][ T5853] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1527.590007][ T5853] usb 3-1: Product: syz [ 1527.590023][ T5853] usb 3-1: Manufacturer: syz [ 1527.590038][ T5853] usb 3-1: SerialNumber: syz [ 1527.639256][ T5853] usb 3-1: config 0 descriptor?? [ 1527.751460][T12303] Bluetooth: hci2: command 0x0405 tx timeout [ 1527.900855][ T5921] usbhid 5-1:0.0: can't add hid device: -71 [ 1527.900989][ T5921] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1527.949179][ T5921] usb 5-1: USB disconnect, device number 21 [ 1528.159938][ T5853] usb 3-1: USB disconnect, device number 16 [ 1528.943813][T15577] udevd[15577]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1533.370920][T14300] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1533.960797][T14300] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1533.960841][T14300] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1533.960869][T14300] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1533.960893][T14300] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1533.967769][T14300] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1533.967800][T14300] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1533.967821][T14300] usb 1-1: Product: syz [ 1533.967844][T14300] usb 1-1: Manufacturer: syz [ 1533.967860][T14300] usb 1-1: SerialNumber: syz [ 1534.011213][T14029] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1534.067090][T14300] usb 1-1: config 0 descriptor?? [ 1534.096674][T14300] iguanair 1-1:0.0: probe with driver iguanair failed with error -12 [ 1534.160938][T14029] usb 5-1: Using ep0 maxpacket: 16 [ 1534.169354][T14029] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1534.169391][T14029] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1534.169407][T14029] usb 5-1: Product: syz [ 1534.169417][T14029] usb 5-1: Manufacturer: syz [ 1534.169428][T14029] usb 5-1: SerialNumber: syz [ 1534.224107][T14029] usb 5-1: config 0 descriptor?? [ 1534.845371][T14300] usb 1-1: USB disconnect, device number 14 [ 1535.953448][T14029] usb 5-1: USB disconnect, device number 22 [ 1536.287167][T15577] udevd[15577]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1539.284089][T16167] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 1541.831626][ T5786] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1541.980867][ T5786] usb 5-1: Using ep0 maxpacket: 16 [ 1541.986803][ T5786] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1541.986837][ T5786] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1541.986860][ T5786] usb 5-1: Product: syz [ 1541.986874][ T5786] usb 5-1: Manufacturer: syz [ 1541.986888][ T5786] usb 5-1: SerialNumber: syz [ 1542.038306][ T5786] usb 5-1: config 0 descriptor?? [ 1542.302793][T16196] netlink: 'syz.0.2481': attribute type 1 has an invalid length. [ 1542.356719][T12585] usb 5-1: USB disconnect, device number 23 [ 1547.632841][T16235] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 1548.210881][ T5921] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1548.410965][ T5921] usb 5-1: Using ep0 maxpacket: 16 [ 1548.417763][ T5921] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1548.417795][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1548.417815][ T5921] usb 5-1: Product: syz [ 1548.417833][ T5921] usb 5-1: Manufacturer: syz [ 1548.417844][ T5921] usb 5-1: SerialNumber: syz [ 1548.435768][ T5921] usb 5-1: config 0 descriptor?? [ 1548.791401][ T5116] Bluetooth: hci0: command 0x0406 tx timeout [ 1549.382087][ T5921] usb 5-1: USB disconnect, device number 24 [ 1550.056056][T16242] udevd[16242]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1553.710411][T16290] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 1553.802408][T16304] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2515'. [ 1553.802429][T16304] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2515'. [ 1554.749499][ T5116] Bluetooth: hci0: command 0x0406 tx timeout [ 1562.414675][T16428] netlink: 'syz.0.2553': attribute type 1 has an invalid length. [ 1566.777481][T16465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2566'. [ 1567.688303][T16466] netlink: 'syz.4.2567': attribute type 1 has an invalid length. [ 1571.736001][T16514] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 1571.777542][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1571.777596][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1573.200894][ T5116] Bluetooth: hci0: command 0x0406 tx timeout [ 1575.613684][T16555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2597'. [ 1576.063743][T16561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2598'. [ 1578.072118][ T5853] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1578.760937][ T5853] usb 9-1: device descriptor read/64, error -71 [ 1579.000879][ T5853] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1579.130949][ T5853] usb 9-1: device descriptor read/64, error -71 [ 1579.241416][ T5853] usb usb9-port1: attempt power cycle [ 1580.610906][ T5853] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1580.633478][ T5853] usb 9-1: device descriptor read/8, error -71 [ 1584.271066][ T5921] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1584.402985][ T5921] usb 5-1: device descriptor read/64, error -71 [ 1585.000892][ T5921] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1585.131076][ T5921] usb 5-1: device descriptor read/64, error -71 [ 1585.241388][ T5921] usb usb5-port1: attempt power cycle [ 1585.850902][ T5921] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1585.878047][ T5921] usb 5-1: device descriptor read/8, error -71 [ 1586.510855][ T5921] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1586.535006][ T5921] usb 5-1: device descriptor read/8, error -71 [ 1586.641135][ T5921] usb usb5-port1: unable to enumerate USB device [ 1591.071019][T14355] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1591.201092][T14355] usb 9-1: device descriptor read/64, error -71 [ 1591.440885][T14355] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1591.574047][T14355] usb 9-1: device descriptor read/64, error -71 [ 1591.683811][T14355] usb usb9-port1: attempt power cycle [ 1592.565324][T14355] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1592.825802][T14355] usb 9-1: device descriptor read/8, error -71 [ 1593.526092][T14355] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1593.541991][T14355] usb 9-1: device descriptor read/8, error -71 [ 1593.662281][T14355] usb usb9-port1: unable to enumerate USB device [ 1603.332257][T16811] netlink: 'syz.2.2690': attribute type 1 has an invalid length. [ 1605.322967][T16834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2696'. [ 1609.342442][T16873] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2711'. [ 1609.705453][T16883] netlink: 'syz.2.2715': attribute type 4 has an invalid length. [ 1609.906798][T12655] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1610.049949][T14355] IPVS: starting estimator thread 0... [ 1610.103323][T12655] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1610.103346][T12655] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1610.106814][T12655] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1610.106837][T12655] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1610.106852][T12655] usb 1-1: Product: syz [ 1610.106862][T12655] usb 1-1: Manufacturer: syz [ 1610.106873][T12655] usb 1-1: SerialNumber: syz [ 1610.176859][T12655] usb 1-1: config 0 descriptor?? [ 1610.254942][T16895] IPVS: using max 10 ests per chain, 24000 per kthread [ 1610.489595][T12655] usb 1-1: USB disconnect, device number 15 [ 1615.144159][T16928] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 1615.230939][ T5786] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 1615.396972][ T5786] usb 9-1: config 0 has an invalid interface number: 113 but max is 0 [ 1615.396996][ T5786] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1615.397010][ T5786] usb 9-1: config 0 has no interface number 0 [ 1615.397041][ T5786] usb 9-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 1615.397060][ T5786] usb 9-1: config 0 interface 113 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1615.397077][ T5786] usb 9-1: config 0 interface 113 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1615.397096][ T5786] usb 9-1: config 0 interface 113 has no altsetting 0 [ 1615.492325][ T5786] usb 9-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1615.492360][ T5786] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1615.492380][ T5786] usb 9-1: Product: syz [ 1615.492393][ T5786] usb 9-1: Manufacturer: syz [ 1615.492407][ T5786] usb 9-1: SerialNumber: syz [ 1615.542619][ T5786] usb 9-1: config 0 descriptor?? [ 1615.549724][ T5786] pn533_usb 9-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 1615.824560][ T5786] usb 9-1: USB disconnect, device number 12 [ 1615.831583][ T5116] Bluetooth: hci0: command 0x0406 tx timeout [ 1616.230907][T12655] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1616.381129][T12655] usb 3-1: Using ep0 maxpacket: 32 [ 1616.383657][T12655] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 1616.383689][T12655] usb 3-1: config 0 has no interface number 0 [ 1616.383739][T12655] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1616.387385][T12655] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1616.387419][T12655] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1616.387440][T12655] usb 3-1: Product: syz [ 1616.387455][T12655] usb 3-1: Manufacturer: syz [ 1616.387470][T12655] usb 3-1: SerialNumber: syz [ 1616.491093][T12655] usb 3-1: config 0 descriptor?? [ 1616.492353][T16938] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1616.744715][T16938] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1724.060686][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1724.060712][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P1484/1:b..l P1560/2:b..l P9/3:b..l [ 1724.060783][ C0] rcu: (detected by 0, t=10502 jiffies, g=82977, q=67 ncpus=2) [ 1724.060815][ C0] task:kworker/0:0 state:R running task stack:21440 pid:9 tgid:9 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1724.060884][ C0] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 1724.061117][ C0] Call Trace: [ 1724.061127][ C0] [ 1724.061144][ C0] __schedule+0x1553/0x5240 [ 1724.061316][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1724.061411][ C0] ? __pfx___schedule+0x10/0x10 [ 1724.061436][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1724.061472][ C0] preempt_schedule_irq+0x4d/0xa0 [ 1724.061499][ C0] irqentry_exit+0x599/0x620 [ 1724.061536][ C0] ? trace_irq_disable+0x3b/0x150 [ 1724.061588][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1724.061634][ C0] RIP: 0010:wg_packet_receive+0x132b/0x2410 [ 1724.061666][ C0] Code: ff ff 84 c0 0f 84 2b 07 00 00 4c 89 74 24 70 4c 8b 6c 24 40 49 8d 9d 08 04 00 00 4c 89 e0 49 89 dc 49 c1 ec 03 41 0f b6 04 04 <84> c0 0f 85 d1 0c 00 00 44 8b 33 bf ff ff ff ff 44 89 f6 e8 3d 75 [ 1724.061687][ C0] RSP: 0000:ffffc900000e6fa0 EFLAGS: 00000a06 [ 1724.061706][ C0] RAX: 0000000000000000 RBX: ffff8880abb51388 RCX: ffffffff85ea6e43 [ 1724.061723][ C0] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffff88805e1f9568 [ 1724.061738][ C0] RBP: ffffc900000e7110 R08: ffff88805e1f956f R09: 1ffff1100bc3f2ad [ 1724.061755][ C0] R10: dffffc0000000000 R11: ffffed100bc3f2ae R12: 1ffff1101576a271 [ 1724.061773][ C0] R13: ffff8880abb50f80 R14: ffff88803ba50400 R15: 1ffff1101321556f [ 1724.061800][ C0] ? wg_prev_queue_enqueue+0xd3/0x140 [ 1724.061839][ C0] ? wg_packet_receive+0x1062/0x2410 [ 1724.061882][ C0] ? __pfx_wg_packet_receive+0x10/0x10 [ 1724.061935][ C0] wg_receive+0x75/0xa0 [ 1724.061968][ C0] udpv6_queue_rcv_one_skb+0x15bb/0x18e0 [ 1724.062063][ C0] ? __pfx_wg_receive+0x10/0x10 [ 1724.062096][ C0] ? __pfx_udpv6_queue_rcv_one_skb+0x10/0x10 [ 1724.062128][ C0] ? udpv6_queue_rcv_skb+0xec/0x5f0 [ 1724.062163][ C0] udp6_unicast_rcv_skb+0x227/0x380 [ 1724.062187][ C0] ? __udp6_lib_rcv+0x6cc/0x17d0 [ 1724.062224][ C0] ? __pfx_udpv6_rcv+0x10/0x10 [ 1724.062256][ C0] ip6_protocol_deliver_rcu+0xd09/0x1600 [ 1724.062365][ C0] ip6_input_finish+0x191/0x370 [ 1724.062401][ C0] NF_HOOK+0x336/0x3c0 [ 1724.062438][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 1724.062469][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1724.062496][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1724.062529][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 1724.062573][ C0] ip6_input+0x16a/0x270 [ 1724.062601][ C0] ? ip6_input+0x23/0x270 [ 1724.062633][ C0] NF_HOOK+0x336/0x3c0 [ 1724.062660][ C0] ? skb_orphan+0xaf/0xd0 [ 1724.062691][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1724.062719][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1724.062747][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1724.062785][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1724.062822][ C0] ? process_backlog+0x271/0xc60 [ 1724.062930][ C0] process_backlog+0x3ce/0xc60 [ 1724.062985][ C0] __napi_poll+0xaf/0x580 [ 1724.063015][ C0] ? skb_defer_free_flush+0x233/0x260 [ 1724.063053][ C0] net_rx_action+0x696/0xe00 [ 1724.063085][ C0] ? ip6_output+0x408/0x550 [ 1724.063132][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1724.063164][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 1724.063206][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1724.063238][ C0] ? send6+0x6c7/0x940 [ 1724.063285][ C0] handle_softirqs+0x1de/0x6f0 [ 1724.063342][ C0] __local_bh_enable_ip+0x170/0x2b0 [ 1724.063374][ C0] ? wg_socket_send_skb_to_peer+0x59/0x200 [ 1724.063407][ C0] wg_socket_send_skb_to_peer+0x199/0x200 [ 1724.063445][ C0] wg_packet_tx_worker+0x1c8/0x7c0 [ 1724.063480][ C0] ? process_scheduled_works+0xa8d/0x18c0 [ 1724.063521][ C0] process_scheduled_works+0xb6e/0x18c0 [ 1724.063588][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1724.063631][ C0] ? assign_work+0x3d5/0x5e0 [ 1724.063669][ C0] worker_thread+0xa53/0xfc0 [ 1724.063732][ C0] kthread+0x388/0x470 [ 1724.063756][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1724.063785][ C0] ? __pfx_kthread+0x10/0x10 [ 1724.063810][ C0] ret_from_fork+0x51e/0xb90 [ 1724.063853][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1724.063882][ C0] ? __switch_to+0xc7d/0x1450 [ 1724.063935][ C0] ? __pfx_kthread+0x10/0x10 [ 1724.063961][ C0] ret_from_fork_asm+0x1a/0x30 [ 1724.064014][ C0] [ 1724.064023][ C0] task:kworker/u8:14 state:R running task stack:15008 pid:1560 tgid:1560 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1724.064083][ C0] Workqueue: tipc_send tipc_conn_send_work [ 1724.064164][ C0] Call Trace: [ 1724.064187][ C0] [ 1724.064216][ C0] __schedule+0x1553/0x5240 [ 1724.064328][ C0] ? __pfx___schedule+0x10/0x10 [ 1724.064362][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1724.064406][ C0] ? trace_irq_disable+0x3b/0x150 [ 1724.064463][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 1724.064519][ C0] preempt_schedule_common+0x82/0xd0 [ 1724.064578][ C0] preempt_schedule_thunk+0x16/0x30 [ 1724.064624][ C0] rt_spin_lock+0x316/0x400 [ 1724.064658][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1724.064680][ C0] ? __pfx_rt_spin_lock+0x10/0x10 [ 1724.064713][ C0] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 1724.064738][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1724.064775][ C0] prepare_to_wait_exclusive+0x44/0x220 [ 1724.064817][ C0] __lock_sock+0x154/0x2e0 [ 1724.064885][ C0] ? __pfx___lock_sock+0x10/0x10 [ 1724.064916][ C0] ? rt_spin_lock+0x20e/0x400 [ 1724.064948][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1724.064983][ C0] ? __pfx_rt_spin_lock+0x10/0x10 [ 1724.065016][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 1724.065055][ C0] ? lock_sock_nested+0x5f/0x130 [ 1724.065113][ C0] ? lock_sock_nested+0x5f/0x130 [ 1724.065144][ C0] lock_sock_nested+0xb3/0x130 [ 1724.065179][ C0] tipc_send_packet+0x6e/0xa0 [ 1724.065207][ C0] ? __pfx_tipc_send_packet+0x10/0x10 [ 1724.065229][ C0] sock_sendmsg+0x3fb/0x450 [ 1724.065309][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1724.065343][ C0] ? __pfx_sock_sendmsg+0x10/0x10 [ 1724.065388][ C0] ? iov_iter_kvec+0xb8/0x180 [ 1724.065487][ C0] tipc_conn_send_work+0x330/0xaa0 [ 1724.065514][ C0] ? tipc_conn_send_work+0x1bd/0xaa0 [ 1724.065548][ C0] ? __pfx_tipc_conn_send_work+0x10/0x10 [ 1724.065570][ C0] ? wakeup_preempt_fair+0x6a1/0xa40 [ 1724.065609][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1724.065645][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 1724.065703][ C0] ? process_scheduled_works+0xa8d/0x18c0 [ 1724.065733][ C0] ? process_scheduled_works+0xa8d/0x18c0 [ 1724.065766][ C0] process_scheduled_works+0xb6e/0x18c0 [ 1724.065833][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1724.065872][ C0] ? assign_work+0x3d5/0x5e0 [ 1724.065908][ C0] worker_thread+0xa53/0xfc0 [ 1724.065976][ C0] kthread+0x388/0x470 [ 1724.066000][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1724.066030][ C0] ? __pfx_kthread+0x10/0x10 [ 1724.066056][ C0] ret_from_fork+0x51e/0xb90 [ 1724.066091][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1724.066122][ C0] ? __switch_to+0xc7d/0x1450 [ 1724.066153][ C0] ? __pfx_kthread+0x10/0x10 [ 1724.066178][ C0] ret_from_fork_asm+0x1a/0x30 [ 1724.066225][ C0] [ 1724.066233][ C0] task:kworker/u8:9 state:R running task stack:14392 pid:1484 tgid:1484 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1724.066295][ C0] Workqueue: tipc_rcv tipc_conn_recv_work [ 1724.066319][ C0] Call Trace: [ 1724.066326][ C0] [ 1724.066339][ C0] __schedule+0x1553/0x5240 [ 1724.066394][ C0] ? __pfx___schedule+0x10/0x10 [ 1724.066428][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1724.066483][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1724.066506][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 1724.066536][ C0] preempt_schedule_common+0x82/0xd0 [ 1724.066562][ C0] preempt_schedule_thunk+0x16/0x30 [ 1724.066596][ C0] rt_mutex_slowunlock+0x681/0x8b0 [ 1724.066629][ C0] ? reacquire_held_locks+0x104/0x190 [ 1724.066661][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1724.066697][ C0] ? rt_spin_unlock+0x14f/0x200 [ 1724.066735][ C0] ? rt_spin_unlock+0x160/0x200 [ 1724.066771][ C0] tipc_sk_rcv+0x2777/0x2bb0 [ 1724.066844][ C0] ? tipc_sk_rcv+0x1df/0x2bb0 [ 1724.066893][ C0] ? __pfx_tipc_sk_rcv+0x10/0x10 [ 1724.066944][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 1724.066995][ C0] ? tipc_loopback_trace+0x48/0x1b0 [ 1724.067037][ C0] tipc_node_xmit+0x227/0xf10 [ 1724.067062][ C0] ? kasan_save_track+0x4f/0x80 [ 1724.067171][ C0] ? kasan_save_track+0x3e/0x80 [ 1724.067210][ C0] ? kmem_cache_alloc_node_noprof+0x22a/0x6e0 [ 1724.067284][ C0] ? __alloc_skb+0x27d/0x7d0 [ 1724.067304][ C0] ? tipc_msg_create+0x51/0x4d0 [ 1724.067379][ C0] ? tipc_recvmsg+0xd13/0x1430 [ 1724.067399][ C0] ? sock_recvmsg+0x172/0x1b0 [ 1724.067430][ C0] ? __pfx_tipc_node_xmit+0x10/0x10 [ 1724.067451][ C0] ? kthread+0x388/0x470 [ 1724.067472][ C0] ? ret_from_fork+0x51e/0xb90 [ 1724.067501][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 1724.067567][ C0] ? rcu_is_watching+0x15/0xb0 [ 1724.067602][ C0] tipc_node_xmit_skb+0x139/0x1b0 [ 1724.067629][ C0] ? __pfx_tipc_node_xmit_skb+0x10/0x10 [ 1724.067673][ C0] ? tipc_sk_send_ack+0x101/0x590 [ 1724.067694][ C0] ? tipc_sk_send_ack+0x30e/0x590 [ 1724.067724][ C0] tipc_recvmsg+0xd13/0x1430 [ 1724.067763][ C0] ? __pfx_tipc_recvmsg+0x10/0x10 [ 1724.067805][ C0] ? __local_bh_enable+0x1e1/0x2f0 [ 1724.067840][ C0] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1724.067927][ C0] ? security_socket_recvmsg+0x7e/0x2c0 [ 1724.068024][ C0] ? __pfx_tipc_recvmsg+0x10/0x10 [ 1724.068046][ C0] sock_recvmsg+0x172/0x1b0 [ 1724.068083][ C0] tipc_conn_recv_work+0x29d/0x510 [ 1724.068118][ C0] ? __pfx_tipc_conn_recv_work+0x10/0x10 [ 1724.068172][ C0] ? process_scheduled_works+0xa8d/0x18c0 [ 1724.068210][ C0] ? process_scheduled_works+0xa8d/0x18c0 [ 1724.068244][ C0] process_scheduled_works+0xb6e/0x18c0 [ 1724.068310][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1724.068349][ C0] ? assign_work+0x3d5/0x5e0 [ 1724.068386][ C0] worker_thread+0xa53/0xfc0 [ 1724.068449][ C0] kthread+0x388/0x470 [ 1724.068473][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1724.068503][ C0] ? __pfx_kthread+0x10/0x10 [ 1724.068534][ C0] ret_from_fork+0x51e/0xb90 [ 1724.068569][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1724.068599][ C0] ? __switch_to+0xc7d/0x1450 [ 1724.068630][ C0] ? __pfx_kthread+0x10/0x10 [ 1724.068656][ C0] ret_from_fork_asm+0x1a/0x30 [ 1724.068696][ C0] [ 1724.068705][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g82977 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 1724.068730][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=89425 [ 1724.068743][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g82977 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 1724.068767][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1724.068779][ C0] rcu: RCU grace-period kthread stack dump: [ 1724.068786][ C0] task:rcu_preempt state:I stack:27096 pid:18 tgid:18 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1724.068846][ C0] Call Trace: [ 1724.068853][ C0] [ 1724.068866][ C0] __schedule+0x1553/0x5240 [ 1724.068920][ C0] ? __pfx___schedule+0x10/0x10 [ 1724.068954][ C0] ? schedule+0x90/0x360 [ 1724.068980][ C0] schedule+0x164/0x360 [ 1724.069006][ C0] schedule_timeout+0x158/0x2c0 [ 1724.069033][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1724.069057][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1724.069108][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1724.069135][ C0] ? prepare_to_swait_event+0x340/0x370 [ 1724.069175][ C0] rcu_gp_fqs_loop+0x312/0x11d0 [ 1724.069206][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1724.069234][ C0] ? rcu_gp_init+0x1313/0x15b0 [ 1724.069261][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1724.069281][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1724.069313][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1724.069344][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 1724.069369][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1724.069388][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1724.069416][ C0] ? __kthread_parkme+0x7a/0x1f0 [ 1724.069450][ C0] ? __kthread_parkme+0x19c/0x1f0 [ 1724.069490][ C0] kthread+0x388/0x470 [ 1724.069514][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1724.069543][ C0] ? __pfx_kthread+0x10/0x10 [ 1724.069572][ C0] ret_from_fork+0x51e/0xb90 [ 1724.069612][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1724.069653][ C0] ? __switch_to+0xc7d/0x1450 [ 1724.069689][ C0] ? __pfx_kthread+0x10/0x10 [ 1724.069723][ C0] ret_from_fork_asm+0x1a/0x30 [ 1724.069770][ C0] [ 1724.069778][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1724.069794][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1724.069823][ C1] NMI backtrace for cpu 1 [ 1724.069855][ C1] CPU: 1 UID: 0 PID: 16959 Comm: syz.8.2741 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1724.069888][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1724.069899][ C1] RIP: 0010:lock_acquire+0xc0/0x2e0 [ 1724.069918][ C1] Code: 48 8b 05 eb ac ae 10 83 b8 b4 0b 00 00 00 0f 85 9d 00 00 00 9c 5b fa 48 c7 c7 8c ea 57 8d e8 97 3a 84 09 65 ff 05 70 f3 ae 10 <45> 31 c9 f7 c3 00 02 00 00 41 0f 94 c1 4c 89 ef 8b 74 24 04 89 ea [ 1724.069936][ C1] RSP: 0018:ffffc90006257158 EFLAGS: 00000002 [ 1724.069958][ C1] RAX: 0000000000000001 RBX: 0000000000000246 RCX: 0000000000000046 [ 1724.069969][ C1] RDX: 0000000000000000 RSI: ffffffff8d57ea8c RDI: ffffffff8ba67a80 [ 1724.069981][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1724.069991][ C1] R10: dffffc0000000000 R11: fffffbfff1ed4ef7 R12: 0000000000000002 [ 1724.070002][ C1] R13: ffffffff8ddcb980 R14: 0000000000000000 R15: 0000000000000000 [ 1724.070014][ C1] FS: 00007f1d062be6c0(0000) GS:ffff888126432000(0000) knlGS:0000000000000000 [ 1724.070028][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1724.070040][ C1] CR2: 00002000000e1000 CR3: 0000000039d4c000 CR4: 00000000003526f0 [ 1724.070055][ C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 1724.070067][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1724.070080][ C1] Call Trace: [ 1724.070086][ C1] [ 1724.070096][ C1] ? net_generic+0x1e/0x240 [ 1724.070119][ C1] net_generic+0x3a/0x240 [ 1724.070140][ C1] ? net_generic+0x1e/0x240 [ 1724.070162][ C1] tipc_sk_lookup+0xa6/0x920 [ 1724.070186][ C1] ? __local_bh_enable+0x1e1/0x2f0 [ 1724.070213][ C1] ? __pfx_tipc_sk_lookup+0x10/0x10 [ 1724.070236][ C1] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 1724.070261][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 1724.070283][ C1] tipc_sk_rcv+0x46e/0x2bb0 [ 1724.070306][ C1] ? handle_mm_fault+0xe7/0x13c0 [ 1724.070411][ C1] ? __pfx_handle_mm_fault+0x10/0x10 [ 1724.070442][ C1] ? tipc_sk_rcv+0x1df/0x2bb0 [ 1724.070473][ C1] ? __pfx_tipc_sk_rcv+0x10/0x10 [ 1724.070504][ C1] ? tipc_loopback_trace+0x48/0x1b0 [ 1724.070530][ C1] tipc_node_xmit+0x227/0xf10 [ 1724.070548][ C1] ? rcu_is_watching+0x15/0xb0 [ 1724.070570][ C1] ? __pfx_tipc_node_xmit+0x10/0x10 [ 1724.070587][ C1] ? __kmalloc_node_track_caller_noprof+0x390/0x7e0 [ 1724.070606][ C1] ? __alloc_skb+0x1d0/0x7d0 [ 1724.070630][ C1] ? tipc_msg_build+0x40d/0xd60 [ 1724.070650][ C1] ? tipc_msg_build+0x485/0xd60 [ 1724.070666][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1724.070698][ C1] ? tipc_sk_filtering+0x13c/0x510 [ 1724.070724][ C1] __tipc_sendstream+0xaff/0x12b0 [ 1724.070758][ C1] ? __pfx___tipc_sendstream+0x10/0x10 [ 1724.070773][ C1] ? __local_bh_enable+0x1e1/0x2f0 [ 1724.070798][ C1] ? __pfx_woken_wake_function+0x10/0x10 [ 1724.070817][ C1] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 1724.070846][ C1] tipc_sendstream+0x55/0x70 [ 1724.070878][ C1] ? __pfx_tipc_sendstream+0x10/0x10 [ 1724.070903][ C1] sock_write_iter+0x4a1/0x4f0 [ 1724.070927][ C1] ? __pfx_sock_write_iter+0x10/0x10 [ 1724.070962][ C1] ? __pfx_futex_wait+0x10/0x10 [ 1724.070990][ C1] vfs_write+0x629/0xba0 [ 1724.071081][ C1] ? __pfx_vfs_write+0x10/0x10 [ 1724.071113][ C1] ? __fget_files+0x2a/0x420 [ 1724.071194][ C1] ksys_write+0x156/0x270 [ 1724.071224][ C1] ? __pfx_ksys_write+0x10/0x10 [ 1724.071256][ C1] do_syscall_64+0x14d/0xf80 [ 1724.071307][ C1] ? trace_irq_disable+0x3b/0x150 [ 1724.071330][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1724.071348][ C1] ? clear_bhb_loop+0x40/0x90 [ 1724.071369][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1724.071387][ C1] RIP: 0033:0x7f1d0806c819 [ 1724.071411][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1724.071427][ C1] RSP: 002b:00007f1d062be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1724.071446][ C1] RAX: ffffffffffffffda RBX: 00007f1d082e5fa0 RCX: 00007f1d0806c819 [ 1724.071459][ C1] RDX: 000000002000011a RSI: 0000200000000340 RDI: 0000000000000004 [ 1724.071471][ C1] RBP: 00007f1d08102c91 R08: 0000000000000000 R09: 0000000000000000 [ 1724.071482][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1724.071493][ C1] R13: 00007f1d082e6038 R14: 00007f1d082e5fa0 R15: 00007ffe0c3a5b18 [ 1724.071515][ C1] [ 1727.359789][T12655] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -110 [ 1727.364428][T12655] asix 3-1:0.188: probe with driver asix failed with error -110 [ 1727.394499][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1727.394692][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1727.481009][ T5166] udevd[5166]: worker [16899] /devices/platform/dummy_hcd.2/usb3/3-1 is taking a long time [ 1728.008347][ T37] audit: type=1800 audit(1775913556.504:1835): pid=16953 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.2738" name="bus" dev="ramfs" ino=61201 res=0 errno=0 [ 1728.422461][T12655] usb 3-1: USB disconnect, device number 17 SYZFAIL: failed to send rpc fd=3 want=32072 sent=0 n=-1 (errno 32: Broken pipe) [ 1732.675877][T12236] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1732.967436][T12236] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1733.186318][T12236] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1733.394532][T12236] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1733.707592][T12236] bridge_slave_1: left allmulticast mode [ 1733.707616][T12236] bridge_slave_1: left promiscuous mode [ 1733.707808][T12236] bridge0: port 2(bridge_slave_1) entered disabled state [ 1733.792504][T12236] bridge_slave_0: left allmulticast mode [ 1733.792535][T12236] bridge_slave_0: left promiscuous mode [ 1733.792807][T12236] bridge0: port 1(bridge_slave_0) entered disabled state [ 1734.671757][T12236] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1734.751537][T12236] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1734.774624][T12236] bond0 (unregistering): Released all slaves [ 1736.160870][T12236] hsr_slave_0: left promiscuous mode [ 1736.204059][T12236] hsr_slave_1: left promiscuous mode [ 1736.205259][T12236] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1736.205299][T12236] batman_adv: batadv0: Removing interface: batadv_slave_0