last executing test programs: 22m25.470168576s ago: executing program 32 (id=27): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x60db, &(0x7f0000000140)={0x0, 0x7cc, 0x40, 0x3, 0x2c0}, &(0x7f00000001c0), &(0x7f0000000200)) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) keyctl$clear(0x7, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) socket$l2tp(0x2, 0x2, 0x73) r5 = socket(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) getsockopt(r5, 0x200000000114, 0x2714, 0x0, &(0x7f0000000000)) close_range(r1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x13, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @printk={@u, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) 21m31.58645625s ago: executing program 33 (id=109): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x1}) writev(r0, &(0x7f0000000bc0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000680)="589daae13ba3b6c4fa", 0x9}], 0x4) 19m42.454459552s ago: executing program 3 (id=267): symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.log\x00', 0x1a10c1, 0x9c37611dc13d0da6) fchown(r0, 0xffffffffffffffff, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) unshare(0x28000600) 19m38.965103254s ago: executing program 3 (id=271): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f00009a9000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000140)=""/43, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) 19m33.873017302s ago: executing program 3 (id=281): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x1, {0x0, 0xff, 0x3}, 0xfe}, 0x18) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4, 0x0, {0x1, 0xf1, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r3, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 19m32.483499128s ago: executing program 3 (id=284): socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) ptrace$setsig(0x4203, r3, 0x10, 0x0) 19m30.552927834s ago: executing program 3 (id=286): socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0xc800) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = dup(0xffffffffffffffff) ioctl$TIOCL_SETVESABLANK(r4, 0x560e, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) write$sndseq(0xffffffffffffffff, &(0x7f0000000000), 0x0) sendto$inet(r5, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r5, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 19m27.244366113s ago: executing program 3 (id=292): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2400, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/65, 0x0, 0x6000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003a00)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000240)=0x1) 19m11.769164722s ago: executing program 34 (id=292): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2400, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/65, 0x0, 0x6000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003a00)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000240)=0x1) 13m53.739467173s ago: executing program 4 (id=887): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() getrlimit(0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xd, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r6}]}, 0x20}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x192}}, 0x20}}, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x6000001, 0x3032, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 13m49.991415075s ago: executing program 4 (id=891): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_elf64(r0, &(0x7f0000002600)=ANY=[], 0x1820) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x12}}, 0x40) 13m45.67690239s ago: executing program 4 (id=899): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f00009a9000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000140)=""/43, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) 13m43.662168744s ago: executing program 4 (id=904): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x25, 0x5, 0x0) r0 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0xa5a1, 0x400, 0x7, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x118, 0x0, 0x0, 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r3) sendmsg$NFC_CMD_FW_DOWNLOAD(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="21042abd7000fddbdf25150000"], 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x4040810) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x40f9, 0x217, 0xa5, 0x0, 0xf5) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) 13m40.904258984s ago: executing program 4 (id=910): creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) write(r3, &(0x7f0000000040)="09000000010001", 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x10, 0x2, 0x0) getsockopt$ARPT_SO_GET_INFO(r4, 0x0, 0x60, 0x0, &(0x7f0000000080)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) r6 = syz_open_pts(r5, 0x141601) write(r6, &(0x7f0000000000)="d5", 0xfffffedf) close_range(r4, 0xffffffffffffffff, 0x0) 13m39.654642552s ago: executing program 4 (id=911): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r3}, 0x20) recvmmsg(r3, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) 13m24.099958424s ago: executing program 35 (id=911): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r3}, 0x20) recvmmsg(r3, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) 11m31.173035507s ago: executing program 5 (id=1160): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x25}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x20}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4018045}, 0x0) 11m29.045522973s ago: executing program 5 (id=1163): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) syz_io_uring_setup(0x110, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x11c, &(0x7f0000019400)=0x1, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "b5d4c27c5c778dd0", "5f128fd81908609c81286d4f6a539024ffb7007ed672afb4be7aec5ca3d27dbf", '\x00', "b690a3fabf2cb970"}, 0x38) 11m27.402363435s ago: executing program 5 (id=1166): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) syz_open_dev$vbi(0x0, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x5, &(0x7f0000000040)=0x29) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) close(0xffffffffffffffff) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x0, 0x1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 11m25.407044298s ago: executing program 5 (id=1168): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() socket$key(0xf, 0x3, 0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) clock_adjtime(0x0, 0x0) openat$binfmt_format(0xffffff9c, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'wlan0\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a010800000000000000000100000b0900030073797a32000000000900010073797a300000000060000000060a010400000000000000000100000008000b40000000000900010073797a300000000038000480340001800a0001006d61746368000000240002800c000300b07346e358c219250b0001006367726f75700000080002"], 0xd4}}, 0x0) 11m17.68512044s ago: executing program 5 (id=1185): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket(0x1, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r4, 0x89fa, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40300, 0x148) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 11m14.710558966s ago: executing program 5 (id=1189): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0x8, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x3, 0x0, 0x3, 0x6, 0x6, 0x9, 0x4, 0xfe, '\x00', 0x4, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10m57.843061227s ago: executing program 36 (id=1189): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0x8, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x3, 0x0, 0x3, 0x6, 0x6, 0x9, 0x4, 0xfe, '\x00', 0x4, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m27.139324274s ago: executing program 8 (id=1846): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x28}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 5m26.372507422s ago: executing program 6 (id=1847): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'ip6gre0\x00'}}, 0x1e) connect$pppoe(r2, &(0x7f00000001c0)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x808) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r5, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 5m26.007539317s ago: executing program 8 (id=1849): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = accept$alg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r5, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r6 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r6, 0x29, 0x10, &(0x7f0000000000)=0x8, 0x4) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendto$inet6(r6, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) 5m24.402045598s ago: executing program 8 (id=1852): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r1, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) 5m24.039216361s ago: executing program 8 (id=1853): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x27, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, 0x0, 0x0) r6 = dup3(r4, r5, 0x0) sendmsg$key(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x40400d5) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020}, 0x2024) syz_genetlink_get_family_id$nl802154(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4810}, 0x4) 5m20.418646258s ago: executing program 8 (id=1855): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1}, 0x4) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0xffffffffffffff1a, &(0x7f0000000580)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000040)={0x24, r0, 0x62c21a4ade68aba1, 0x0, 0x2, {{0x32}, {@val={0x8, 0x1, 0x60}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x48d4}, 0x40010) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000039c7a5407d3588770d810000000109021200010000000109"], 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 5m16.789266647s ago: executing program 8 (id=1859): fcntl$notify(0xffffffffffffffff, 0x402, 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x6) recvfrom$ax25(r1, &(0x7f0000000300)=""/197, 0xc5, 0x12100, &(0x7f00000000c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @bcast, @bcast, @null, @null]}, 0x48) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) 5m16.573772545s ago: executing program 6 (id=1860): close(0xffffffffffffffff) setreuid(0xee01, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 5m16.41268799s ago: executing program 6 (id=1861): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_DEBUG(r1, 0x227e, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000000)={&(0x7f00000001c0)=';', 0x1}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, 0x0, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) recvfrom$inet(r4, &(0x7f00000002c0)=""/29, 0xfffffe19, 0x0, 0x0, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000240), 0x7487e478, 0xc8000) ioctl$MON_IOCG_STATS(r5, 0x80089203, &(0x7f0000000c40)) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r6) sendmsg$DEVLINK_CMD_TRAP_SET(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x20008000) socket$inet6_udp(0xa, 0x2, 0x0) 5m15.225654322s ago: executing program 6 (id=1863): socket(0x400000000010, 0x3, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xe, 0x4010, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r4 = fcntl$dupfd(r3, 0x406, r3) write$cgroup_pid(r4, &(0x7f0000000240), 0xfdef) 5m14.110965605s ago: executing program 6 (id=1866): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0x7000000) 5m9.529265191s ago: executing program 6 (id=1871): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) syz_open_dev$vbi(0x0, 0x2, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x5, &(0x7f0000000040)=0x29) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x0, 0x1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 5m0.530365736s ago: executing program 37 (id=1859): fcntl$notify(0xffffffffffffffff, 0x402, 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x6) recvfrom$ax25(r1, &(0x7f0000000300)=""/197, 0xc5, 0x12100, &(0x7f00000000c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @bcast, @bcast, @null, @null]}, 0x48) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) 4m53.830963541s ago: executing program 38 (id=1871): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) syz_open_dev$vbi(0x0, 0x2, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x5, &(0x7f0000000040)=0x29) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x0, 0x1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 52.177262473s ago: executing program 1 (id=2367): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) epoll_create1(0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f00000001c0)=0x41ce, 0x4) syz_io_uring_setup(0xc97, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000980)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfffff000, 0x3, 0x0, &(0x7f0000000100)="61df71", 0x0, 0x48e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xc92) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) 47.842613065s ago: executing program 1 (id=2372): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mount$cgroup2(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@memory_hugetlb_accounting}, {@favordynmods}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) setxattr(0x0, &(0x7f00000000c0)=@known='system.posix_acl_default\x00', &(0x7f0000000280)='\x00', 0x1, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24040084) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x2, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r3, &(0x7f0000000780)}, 0x20) 46.239136346s ago: executing program 1 (id=2374): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r0, 0x0, r0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000000)={&(0x7f00000001c0)=';', 0x1}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) recvfrom$inet(r3, &(0x7f00000002c0)=""/29, 0xfffffe19, 0x0, 0x0, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000240), 0x7487e478, 0xc8000) ioctl$MON_IOCG_STATS(r4, 0x80089203, &(0x7f0000000c40)) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r5) sendmsg$DEVLINK_CMD_TRAP_SET(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x20008000) socket$inet6_udp(0xa, 0x2, 0x0) 45.32138473s ago: executing program 1 (id=2375): sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x4000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="080005000600"], 0x30}}, 0x0) 44.89331385s ago: executing program 1 (id=2378): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 44.551766211s ago: executing program 1 (id=2381): r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) close_range(r0, r1, 0x0) 30.729041182s ago: executing program 9 (id=2402): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f9, &(0x7f0000000140)="a6cc") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, &(0x7f0000000300)=""/78, 0x0, 0xf250a284784867f7}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) eventfd2(0x8, 0x800) syz_open_dev$vim2m(0x0, 0x7, 0x2) chdir(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x69a04c8e98d914be) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$key(0xf, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r2) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000500)={0x800, 0xf0, 0xf0, 0x360, 0x1, 0x7f80, 0x1, 0x2, {0x1, 0x2, 0x1}, {0x100, 0xffffffb6, 0x1}, {0x5, 0xc5, 0x1}, {0x8, 0x80}, 0x3, 0x0, 0x8, 0x10000, 0x1, 0xfffffbff, 0x2, 0x1, 0x8, 0xd, 0xe4, 0x6, 0x10, 0x202, 0x1, 0x6}) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]}) mount$9p_virtio(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x9c0031, 0x0) 29.23006579s ago: executing program 39 (id=2381): r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) close_range(r0, r1, 0x0) 22.015552682s ago: executing program 7 (id=2417): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fdffffff000000001d00000008000300", @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x4815}, 0x0) 20.301323306s ago: executing program 2 (id=2418): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={0x1c, r4, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008802}, 0x30) 20.283318511s ago: executing program 0 (id=2419): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0x7000000) 20.218826012s ago: executing program 9 (id=2420): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) epoll_create1(0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f00000001c0)=0x41ce, 0x4) syz_io_uring_setup(0xc97, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000980)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfffff000, 0x3, 0x0, &(0x7f0000000100)="61df71", 0x0, 0x48e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xc92) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, 0x0) 20.217150924s ago: executing program 7 (id=2421): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 17.883021611s ago: executing program 2 (id=2422): r0 = semget(0x1, 0x4, 0x39c) r1 = getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) semctl$IPC_RMID(r0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x9, 0x10007a) openat$sysfs(0xffffff9c, &(0x7f0000000340)='/sys/power/pm_async', 0x42, 0x8) 17.739864271s ago: executing program 7 (id=2423): socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x3a) sched_setscheduler(0x0, 0x2, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x0, 0x0, 0x0, 0x34]}, &(0x7f00000000c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0x0) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x0, 0x36, 0x36, 0x0, 0x0, 0x64]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00", 0xfffffffc}, 0x48, 0xfffffffffffffffe) 16.085942563s ago: executing program 2 (id=2424): r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SG_SET_DEBUG(r0, 0x227e, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000000)={&(0x7f00000001c0)=';', 0x1}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) recvfrom$inet(r3, &(0x7f00000002c0)=""/29, 0xfffffe19, 0x0, 0x0, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000240), 0x7487e478, 0xc8000) ioctl$MON_IOCG_STATS(r4, 0x80089203, &(0x7f0000000c40)) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r5) sendmsg$DEVLINK_CMD_TRAP_SET(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x20008000) socket$inet6_udp(0xa, 0x2, 0x0) 14.97092731s ago: executing program 7 (id=2425): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0xffffffffffffff1a, &(0x7f0000000580)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f0000000c80)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001c00000000000000000000000700000000010000000000"], 0x40}, 0x0) 14.463910031s ago: executing program 0 (id=2426): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10, 0x0}}], 0x1, 0x20004840) sendmmsg$inet(r0, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="0f", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000940)}}], 0x2, 0x4004040) shutdown(r0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x0) 13.274677999s ago: executing program 7 (id=2427): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x60db, &(0x7f0000000140)={0x0, 0x7cc, 0x40, 0x3, 0x2c0}, &(0x7f00000001c0), &(0x7f0000000200)) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) keyctl$clear(0x7, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) socket$l2tp(0x2, 0x2, 0x73) r5 = socket(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) getsockopt(r5, 0x200000000114, 0x2714, 0x0, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, 0x0, &(0x7f0000000100)) close_range(r1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x13, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @printk={@u, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) 13.254757336s ago: executing program 9 (id=2428): setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000000240)="9d95ad25050f361f524196f598dd272053e850d1d73056fb0600e44b58837853790a7a08f9dc7c13e4b7dcb4800683eb149dbc7d3dd802418a9b5b4802000000", 0x40) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x9, 0x7, 0x3, 0x80000000000001, 0x0, 0x2, 0x4, 0x0, 0x6, 0x0, 0x0, 0x7, 0x6, 0x7, 0x3], 0xc000, 0x7b652}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd61a7000200442f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0c2088be0000000201009900000086dd080088be000000031c0885140100000000007b40080022eb0000000223022309020000008000000300ebb41b"], 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@x86={0x0, 0x9, 0xc, 0x0, 0x6, 0x1, 0x86, 0x2, 0xe7, 0x40, 0x2, 0x7, 0x0, 0x7, 0x4, 0x7, 0x5, 0xff, 0x4, '\x00', 0x8, 0x7ffffffffffffffe}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11.835159965s ago: executing program 9 (id=2429): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0xffffffffffffff1a, &(0x7f0000000580)=0x5) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000010027bd70010000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000021000008001b00000000001c001a80100002800c00018008001a00040000000800028004000180cd6ec974ea76838eb433b83d0e1985bd896d881e02d7e33091162fbcd719f98793a55ef19dc533a2bf432dc30ddbd46be1a143630e880bf896b11dac5e3f47a08a8f1457f4262eedf0f11a2d4120d654b35f2e3a1e8a4fb198a13a53071831104d422a6c973f8f4a202ffcdb"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r6 = socket$kcm(0x2, 0x5, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0044d10, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x800, 0x0, 0x2, 0x1}, 0x20) setsockopt$sock_attach_bpf(r6, 0x84, 0x6e, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) 9.900766988s ago: executing program 9 (id=2430): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f9, &(0x7f0000000140)="a6cc") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, &(0x7f0000000300)=""/78, 0x0, 0xf250a284784867f7}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) eventfd2(0x8, 0x800) syz_open_dev$vim2m(0x0, 0x7, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x69a04c8e98d914be) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$key(0xf, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r2) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000500)={0x800, 0xf0, 0xf0, 0x360, 0x1, 0x7f80, 0x1, 0x2, {0x1, 0x2, 0x1}, {0x100, 0xffffffb6, 0x1}, {0x5, 0xc5, 0x1}, {0x8, 0x80}, 0x3, 0x0, 0x8, 0x10000, 0x1, 0xfffffbff, 0x2, 0x1, 0x8, 0xd, 0xe4, 0x6, 0x10, 0x202, 0x1, 0x6}) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]}) mount$9p_virtio(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x9c0031, 0x0) 8.13497534s ago: executing program 2 (id=2431): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0xffffffffffffff1a, &(0x7f0000000580)=0x5) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000010027bd70010000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000021000008001b00000000001c001a80100002800c00018008001a00040000000800028004000180cd6ec974ea76838eb433b83d0e1985bd896d881e02d7e33091162fbcd719f98793a55ef19dc533a2bf432dc30ddbd46be1a143630e880bf896b11dac5e3f47a08a8f1457f4262eedf0f11a2d4120d654b35f2e3a1e8a4fb198a13a53071831104d422a6c973f8f4a202ffcdb"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r6 = socket$kcm(0x2, 0x5, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0044d10, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x800, 0x0, 0x2, 0x1}, 0x20) setsockopt$sock_attach_bpf(r6, 0x84, 0x6e, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) 8.048928004s ago: executing program 0 (id=2432): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0xffffffffffffff1a, &(0x7f0000000580)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f0000000c80)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYBLOB="ac1414aa00000000000000001c0000000000000000000000070000000001000000000000"], 0x40}, 0x0) 6.057195959s ago: executing program 2 (id=2433): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) prlimit64(r0, 0x4dcac099e9802ae0, &(0x7f0000000180)={0xd, 0x1}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x70bd29, 0x300, {0x0, 0x0, 0x0, 0x0, 0x100, 0x42004}, [@IFLA_MTU={0x8, 0x4, 0xffcd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x884) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x3}}, 0x18) creat(&(0x7f0000000040)='./file0\x00', 0x8) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000003c0)={'pcl818\x00', [0x4f23, 0x2, 0x1, 0x4000, 0x1, 0x5, 0xa, 0xd287, 0xa, 0xfd, 0xffeffffa, 0x23, 0x4, 0x1, 0x6, 0x101, 0xf7fffffe, 0x1, 0x2, 0x1, 0x8, 0x927, 0xeb96, 0x401, 0xb, 0xe69, 0x6, 0x10008, 0x3, 0x1cdc, 0xfbfffff8]}) fsopen(&(0x7f0000000040)='ocfs2_dlmfs\x00', 0x0) 3.823694979s ago: executing program 0 (id=2434): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000203010400000000000000000000402008000100"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe6, 0x0) 1.868690662s ago: executing program 2 (id=2435): setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000000240)="9d95ad25050f361f524196f598dd272053e850d1d73056fb0600e44b58837853790a7a08f9dc7c13e4b7dcb4800683eb149dbc7d3dd802418a9b5b480200000080000000ec7e3283e611f7", 0x4b) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x9, 0x7, 0x3, 0x80000000000001, 0x0, 0x2, 0x4, 0x0, 0x6, 0x0, 0x0, 0x7, 0x6, 0x7, 0x3], 0xc000, 0x7b652}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd61a7000200442f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0c2088be0000000201009900000086dd080088be000000031c0885140100000000007b40080022eb0000000223022309020000008000000300ebb41b"], 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@x86={0x0, 0x9, 0xc, 0x0, 0x6, 0x1, 0x86, 0x2, 0xe7, 0x40, 0x2, 0x7, 0x0, 0x7, 0x4, 0x7, 0x5, 0xff, 0x4, '\x00', 0x8, 0x7ffffffffffffffe}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.294940627s ago: executing program 0 (id=2436): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) socket$nl_sock_diag(0x10, 0x3, 0x4) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 865.431753ms ago: executing program 7 (id=2437): sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x8200d380, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 33.247717ms ago: executing program 0 (id=2438): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0xffffffffffffff1a, &(0x7f0000000580)=0x5) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000010027bd70010000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000021000008001b00000000001c001a80100002800c00018008001a00040000000800028004000180cd6ec974ea76838eb433b83d0e1985bd896d881e02d7e33091162fbcd719f98793a55ef19dc533a2bf432dc30ddbd46be1a143630e880bf896b11dac5e3f47a08a8f1457f4262eedf0f11a2d4120d654b35f2e3a1e8a4fb198a13a53071831104d422a6c973f8f4a202ffcdb"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) socket$kcm(0x2, 0x5, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x800, 0x0, 0x2, 0x1}, 0x20) socket$inet(0x2, 0x2, 0x0) 0s ago: executing program 9 (id=2439): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x5, &(0x7f0000000040)=0x29) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x0, 0x1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): nnot create hsr debugfs directory [ 851.002838][ T8165] usb 7-1: USB disconnect, device number 4 [ 851.901900][ T68] bridge_slave_1: left allmulticast mode [ 851.901923][ T68] bridge_slave_1: left promiscuous mode [ 851.902091][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 853.369434][ T68] bridge_slave_0: left allmulticast mode [ 853.369469][ T68] bridge_slave_0: left promiscuous mode [ 853.369790][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 858.676368][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 859.407571][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 859.873500][ T68] bond0 (unregistering): Released all slaves [ 864.285060][ T5802] Bluetooth: hci1: command 0x0405 tx timeout [ 867.686397][T11075] fuse: Unknown parameter '0x0000000000000004' [ 870.693616][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.693695][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.497454][ T68] hsr_slave_0: left promiscuous mode [ 871.546475][ T68] hsr_slave_1: left promiscuous mode [ 871.548253][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 871.548274][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 871.655791][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 871.655823][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 871.786976][ T68] veth1_macvtap: left promiscuous mode [ 871.787092][ T68] veth0_macvtap: left promiscuous mode [ 871.787413][ T68] veth1_vlan: left promiscuous mode [ 871.787599][ T68] veth0_vlan: left promiscuous mode [ 874.227077][ T68] team0 (unregistering): Port device team_slave_1 removed [ 874.285868][ T68] team0 (unregistering): Port device team_slave_0 removed [ 875.749013][T10852] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 875.857639][T10852] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 875.930299][T10852] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 876.066805][T10852] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 877.286096][T10852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 877.424267][T10852] 8021q: adding VLAN 0 to HW filter on device team0 [ 877.476609][ T7421] bridge0: port 1(bridge_slave_0) entered blocking state [ 877.476768][ T7421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 877.580054][ T1184] bridge0: port 2(bridge_slave_1) entered blocking state [ 877.580212][ T1184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 879.975214][T10165] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 884.636552][T10852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 884.701587][T10165] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 885.255467][T10165] usb 7-1: config 0 has an invalid interface number: 29 but max is 0 [ 885.255499][T10165] usb 7-1: config 0 has no interface number 0 [ 885.255534][T10165] usb 7-1: config 0 interface 29 has no altsetting 0 [ 885.255572][T10165] usb 7-1: New USB device found, idVendor=357d, idProduct=7788, bcdDevice=81.0d [ 885.255600][T10165] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.316900][T10165] usb 7-1: config 0 descriptor?? [ 885.343219][T10165] usb-storage 7-1:0.29: USB Mass Storage device detected [ 885.391719][T10165] usb-storage 7-1:0.29: Quirks match for vid 357d pid 7788: 4800000 [ 885.710187][T10165] usb 7-1: USB disconnect, device number 5 [ 890.087301][T10852] veth0_vlan: entered promiscuous mode [ 890.106422][T10852] veth1_vlan: entered promiscuous mode [ 891.280104][T10852] veth0_macvtap: entered promiscuous mode [ 891.307269][T10852] veth1_macvtap: entered promiscuous mode [ 895.847933][ T5802] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 895.921690][ T5802] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 895.923538][ T5802] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 895.929784][ T5802] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 895.932011][ T5802] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 898.604828][ T5802] Bluetooth: hci2: command tx timeout [ 900.686865][ T5799] Bluetooth: hci2: command tx timeout [ 903.697431][ T5799] Bluetooth: hci2: command 0x040f tx timeout [ 903.820822][T11267] chnl_net:caif_netlink_parms(): no params data found [ 905.023638][T11337] comedi comedi0: dt2815: I/O port conflict (0x4f27,2) [ 905.261226][T10165] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 905.418366][T10165] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 905.418402][T10165] usb 2-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 905.418418][T10165] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 905.418473][T10165] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 905.418494][T10165] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 52, changing to 7 [ 905.418516][T10165] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 9272, setting to 1024 [ 905.421770][T10165] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 905.421803][T10165] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 905.421827][T10165] usb 2-1: Product: syz [ 905.421843][T10165] usb 2-1: Manufacturer: syz [ 905.615788][T10165] cdc_wdm 2-1:1.0: skipping garbage [ 905.615805][T10165] cdc_wdm 2-1:1.0: skipping garbage [ 905.615886][T10165] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 905.704032][T11340] mmap: syz.6.1347 (11340) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 905.725862][ T5802] Bluetooth: hci2: command 0x040f tx timeout [ 905.845880][T10165] usb 2-1: USB disconnect, device number 18 [ 907.806418][ T5802] Bluetooth: hci2: command 0x040f tx timeout [ 908.009837][T11267] bridge0: port 1(bridge_slave_0) entered blocking state [ 908.010012][T11267] bridge0: port 1(bridge_slave_0) entered disabled state [ 908.010232][T11267] bridge_slave_0: entered allmulticast mode [ 908.052364][T11267] bridge_slave_0: entered promiscuous mode [ 908.154461][T11267] bridge0: port 2(bridge_slave_1) entered blocking state [ 908.154941][T11267] bridge0: port 2(bridge_slave_1) entered disabled state [ 908.155717][T11267] bridge_slave_1: entered allmulticast mode [ 908.354930][T11267] bridge_slave_1: entered promiscuous mode [ 909.215785][T11267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 909.250848][T11267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 910.931291][T11267] team0: Port device team_slave_0 added [ 910.974801][ T5878] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 911.125162][ T5878] usb 2-1: Using ep0 maxpacket: 32 [ 911.127689][ T5878] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 911.127722][ T5878] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 911.127748][ T5878] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 911.127770][ T5878] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 911.127823][ T5878] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 911.127848][ T5878] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 911.127876][ T5878] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 911.127921][ T5878] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 911.127947][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.133085][T11267] team0: Port device team_slave_1 added [ 911.257747][ T5878] usb 2-1: config 0 descriptor?? [ 911.463791][ T5878] usb 2-1: USB disconnect, device number 19 [ 911.638447][T11267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 911.638464][T11267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 911.638490][T11267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 911.736514][T11267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 911.736534][T11267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 911.736566][T11267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 911.918940][T10740] bridge_slave_1: left allmulticast mode [ 911.918972][T10740] bridge_slave_1: left promiscuous mode [ 911.919234][T10740] bridge0: port 2(bridge_slave_1) entered disabled state [ 911.993746][T10740] bridge_slave_0: left allmulticast mode [ 911.993770][T10740] bridge_slave_0: left promiscuous mode [ 911.993974][T10740] bridge0: port 1(bridge_slave_0) entered disabled state [ 912.004778][ T5878] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 912.174778][ T5878] usb 2-1: Using ep0 maxpacket: 32 [ 912.182081][ T5878] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 912.182115][ T5878] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 912.182139][ T5878] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 912.182161][ T5878] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 912.182216][ T5878] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 912.182240][ T5878] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 912.182265][ T5878] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 912.182310][ T5878] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 912.182336][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.297195][ T5878] usb 2-1: config 0 descriptor?? [ 913.186009][ T5858] usb 2-1: USB disconnect, device number 20 [ 918.919768][T10740] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 919.275739][T10740] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 919.351054][T10740] bond0 (unregistering): Released all slaves [ 919.374681][ T5878] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 919.864696][ T5878] usb 7-1: Using ep0 maxpacket: 32 [ 919.876833][ T5878] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 919.876866][ T5878] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 919.876888][ T5878] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 919.876916][ T5878] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 919.876969][ T5878] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 919.876993][ T5878] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 919.877019][ T5878] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 919.877064][ T5878] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 919.877089][ T5878] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.988814][ T5878] usb 7-1: config 0 descriptor?? [ 920.373906][T10165] usb 7-1: USB disconnect, device number 6 [ 920.614064][T11267] hsr_slave_0: entered promiscuous mode [ 920.634343][T11267] hsr_slave_1: entered promiscuous mode [ 920.645894][T11267] debugfs: 'hsr0' already exists in 'hsr' [ 920.645925][T11267] Cannot create hsr debugfs directory [ 920.984675][T10165] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 921.264821][T10165] usb 7-1: Using ep0 maxpacket: 32 [ 921.267391][T10165] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 921.267420][T10165] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 921.267444][T10165] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 921.267465][T10165] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 921.267529][T10165] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 921.267552][T10165] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 921.267578][T10165] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 921.267626][T10165] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 921.267653][T10165] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.087972][T10165] usb 7-1: config 0 descriptor?? [ 922.314018][T10165] usb 7-1: USB disconnect, device number 7 [ 922.611764][T10740] hsr_slave_0: left promiscuous mode [ 923.514655][T10740] hsr_slave_1: left promiscuous mode [ 923.515785][T10740] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 924.065673][T10740] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 925.975499][T10740] veth1_macvtap: left promiscuous mode [ 925.975575][T10740] veth0_macvtap: left promiscuous mode [ 925.975741][T10740] veth1_vlan: left promiscuous mode [ 925.975878][T10740] veth0_vlan: left promiscuous mode [ 927.054884][T11482] binder_alloc: 11481: binder_alloc_buf, no vma [ 927.744673][ T5858] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 927.919890][ T5858] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 927.919924][ T5858] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 927.919947][ T5858] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 927.920000][ T5858] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 927.920030][ T5858] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 927.922245][ T5858] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 927.922275][ T5858] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 927.922298][ T5858] usb 2-1: Product: syz [ 927.922314][ T5858] usb 2-1: Manufacturer: syz [ 928.011576][ T5858] cdc_wdm 2-1:1.0: skipping garbage [ 928.011598][ T5858] cdc_wdm 2-1:1.0: skipping garbage [ 928.076629][ T5858] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 928.076666][ T5858] cdc_wdm 2-1:1.0: Unknown control protocol [ 928.283337][ C0] cdc_wdm 2-1:1.0: unknown notification 91 received: index 64768 len 47969 [ 928.505347][ T5806] usb 2-1: USB disconnect, device number 21 [ 931.217791][ T5878] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 931.544685][ T5878] usb 9-1: Using ep0 maxpacket: 32 [ 931.547010][ T5878] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 931.547042][ T5878] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 931.547065][ T5878] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 931.547087][ T5878] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 931.547140][ T5878] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 931.547164][ T5878] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 931.547189][ T5878] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 931.547235][ T5878] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 931.547261][ T5878] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.615011][T11510] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1396'. [ 931.726281][ T5878] usb 9-1: config 0 descriptor?? [ 931.843611][T10740] team0 (unregistering): Port device team_slave_1 removed [ 932.193429][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.193485][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.221008][T10740] team0 (unregistering): Port device team_slave_0 removed [ 932.403202][ T5878] usb 9-1: USB disconnect, device number 3 [ 933.014643][ T5878] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 933.480144][T11531] vxfs: unable to read disk superblock at 1 [ 933.498169][T11531] vxfs: unable to read disk superblock at 8 [ 933.498223][T11531] vxfs: can't find superblock. [ 933.928895][ T5878] usb 9-1: Using ep0 maxpacket: 32 [ 934.137320][ T5878] usb 9-1: device descriptor read/all, error -71 [ 936.215431][T11551] vxfs: unable to read disk superblock at 1 [ 936.225867][T11551] vxfs: unable to read disk superblock at 8 [ 936.225970][T11551] vxfs: can't find superblock. [ 938.573253][T11562] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1408'. [ 951.508555][T11267] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 951.591939][T11267] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 951.651620][T11267] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 952.282353][T11267] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 953.020340][ T808] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 953.694767][ T808] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 953.694838][ T808] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 953.694861][ T808] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 953.694914][ T808] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 953.694945][ T808] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 953.697898][ T808] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 953.697931][ T808] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 953.697955][ T808] usb 2-1: Product: syz [ 953.697971][ T808] usb 2-1: Manufacturer: syz [ 953.826101][ T808] cdc_wdm 2-1:1.0: skipping garbage [ 953.826125][ T808] cdc_wdm 2-1:1.0: skipping garbage [ 953.849221][ T808] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 953.849246][ T808] cdc_wdm 2-1:1.0: Unknown control protocol [ 954.297983][ T5871] usb 2-1: USB disconnect, device number 22 [ 954.711470][ T5799] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 954.732621][ T5799] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 954.746303][ T5799] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 954.752869][ T5799] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 954.762778][ T5799] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 955.916340][T11707] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 957.731871][ T5799] Bluetooth: hci1: command tx timeout [ 957.974668][T10723] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 958.127326][T10723] usb 7-1: config 0 has an invalid interface number: 29 but max is 0 [ 958.127367][T10723] usb 7-1: config 0 has no interface number 0 [ 958.127401][T10723] usb 7-1: config 0 interface 29 has no altsetting 0 [ 958.127447][T10723] usb 7-1: New USB device found, idVendor=357d, idProduct=7788, bcdDevice=81.0d [ 958.127477][T10723] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.178097][T10723] usb 7-1: config 0 descriptor?? [ 958.228590][T10723] usb-storage 7-1:0.29: USB Mass Storage device detected [ 958.275191][T10723] usb-storage 7-1:0.29: Quirks match for vid 357d pid 7788: 4800000 [ 958.462959][T11690] chnl_net:caif_netlink_parms(): no params data found [ 958.492889][T10723] usb 7-1: USB disconnect, device number 8 [ 959.804773][ T5799] Bluetooth: hci1: command tx timeout [ 961.986925][ T5799] Bluetooth: hci1: command 0x040f tx timeout [ 963.445837][T11690] bridge0: port 1(bridge_slave_0) entered blocking state [ 963.445961][T11690] bridge0: port 1(bridge_slave_0) entered disabled state [ 963.446217][T11690] bridge_slave_0: entered allmulticast mode [ 963.449006][T11690] bridge_slave_0: entered promiscuous mode [ 963.452055][T11690] bridge0: port 2(bridge_slave_1) entered blocking state [ 963.452185][T11690] bridge0: port 2(bridge_slave_1) entered disabled state [ 963.452381][T11690] bridge_slave_1: entered allmulticast mode [ 963.491733][T11690] bridge_slave_1: entered promiscuous mode [ 964.864958][ T5799] Bluetooth: hci1: command 0x040f tx timeout [ 966.962089][ T5799] Bluetooth: hci1: command 0x040f tx timeout [ 968.718368][T11690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 968.766873][T11690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 970.163936][T11690] team0: Port device team_slave_0 added [ 970.183938][T11690] team0: Port device team_slave_1 added [ 971.948654][T11690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 971.948673][T11690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 971.948703][T11690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 972.015746][T11690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 972.015766][T11690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 972.015796][T11690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 972.630588][T11690] hsr_slave_0: entered promiscuous mode [ 972.653479][T11690] hsr_slave_1: entered promiscuous mode [ 972.666251][T11690] debugfs: 'hsr0' already exists in 'hsr' [ 972.666283][T11690] Cannot create hsr debugfs directory [ 972.876567][T10740] bridge_slave_1: left allmulticast mode [ 972.876599][T10740] bridge_slave_1: left promiscuous mode [ 972.876859][T10740] bridge0: port 2(bridge_slave_1) entered disabled state [ 973.130660][T10740] bridge_slave_0: left allmulticast mode [ 973.130683][T10740] bridge_slave_0: left promiscuous mode [ 973.130891][T10740] bridge0: port 1(bridge_slave_0) entered disabled state [ 974.842498][T11890] 9p: Bad value for 'rfdno' [ 978.182372][T10740] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 978.483110][T10740] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 979.081103][T10740] bond0 (unregistering): Released all slaves [ 981.254782][T10740] hsr_slave_0: left promiscuous mode [ 981.324700][T10740] hsr_slave_1: left promiscuous mode [ 981.325495][T10740] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 981.498805][T10740] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 986.061966][T10740] team0 (unregistering): Port device team_slave_1 removed [ 986.248478][T10740] team0 (unregistering): Port device team_slave_0 removed [ 987.176510][T11987] overlay: Unknown parameter ':' [ 988.060996][T11989] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 988.061207][T11989] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 990.003902][T12000] binder_alloc: 11998: binder_alloc_buf, no vma [ 994.457185][T12040] binder_alloc: 12038: binder_alloc_buf, no vma [ 994.508843][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 994.508925][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 997.586026][T11690] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 997.844926][T11690] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 997.943763][T11690] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 998.065464][T11690] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 999.603082][T11690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 999.766476][T11690] 8021q: adding VLAN 0 to HW filter on device team0 [ 999.838027][T11839] bridge0: port 1(bridge_slave_0) entered blocking state [ 999.838175][T11839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 999.889995][T11839] bridge0: port 2(bridge_slave_1) entered blocking state [ 999.890145][T11839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1004.507778][T12112] overlayfs: failed to clone upperpath [ 1005.658845][T11690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1008.799548][T12148] binder_alloc: 12147: binder_alloc_buf, no vma [ 1008.897314][T11690] veth0_vlan: entered promiscuous mode [ 1008.979077][T11690] veth1_vlan: entered promiscuous mode [ 1009.254937][T11690] veth0_macvtap: entered promiscuous mode [ 1009.376183][T12157] vxfs: unable to read disk superblock at 1 [ 1009.381116][T12157] vxfs: unable to read disk superblock at 8 [ 1009.381174][T12157] vxfs: can't find superblock. [ 1010.065368][T11690] veth1_macvtap: entered promiscuous mode [ 1010.407933][T11690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1010.542141][T11690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1013.749622][T10740] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.751349][T10740] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.758940][T10740] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.764232][T10740] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.806489][T12191] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1566'. [ 1015.958925][T12195] overlay: Unknown parameter ':' [ 1018.704261][ T5802] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1019.545976][ T5802] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1019.548005][ T5802] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1019.550155][ T5802] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1019.562569][ T5802] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1020.953914][T12210] binder_alloc: 12208: binder_alloc_buf, no vma [ 1021.907530][ T5799] Bluetooth: hci2: command tx timeout [ 1023.967801][ T5799] Bluetooth: hci2: command tx timeout [ 1024.831135][ T6793] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.368959][ T5799] Bluetooth: hci2: command tx timeout [ 1028.101880][T12246] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1578'. [ 1028.447648][T12253] 9p: Bad value for 'wfdno' [ 1029.466910][T12257] binder: BINDER_SET_CONTEXT_MGR already set [ 1029.466947][T12257] binder: 12254:12257 ioctl 4018620d 200000004a80 returned -16 [ 1029.498456][ T5799] Bluetooth: hci2: command tx timeout [ 1029.889712][ T6793] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.700889][ T6793] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.767265][T12272] batadv_slave_0: left promiscuous mode [ 1031.915387][T12200] chnl_net:caif_netlink_parms(): no params data found [ 1032.389410][T12288] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1032.454287][ T6793] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1032.798044][T12302] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1590'. [ 1032.884030][T12200] bridge0: port 1(bridge_slave_0) entered blocking state [ 1032.931855][T12200] bridge0: port 1(bridge_slave_0) entered disabled state [ 1032.932213][T12200] bridge_slave_0: entered allmulticast mode [ 1032.936562][T12200] bridge_slave_0: entered promiscuous mode [ 1032.979266][T12200] bridge0: port 2(bridge_slave_1) entered blocking state [ 1032.994176][T12200] bridge0: port 2(bridge_slave_1) entered disabled state [ 1032.994406][T12200] bridge_slave_1: entered allmulticast mode [ 1033.072362][T12200] bridge_slave_1: entered promiscuous mode [ 1035.015778][T12312] binder_alloc: 12311: binder_alloc_buf, no vma [ 1035.257414][T12200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1035.483451][T12200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1035.648350][T12327] 9p: Bad value for 'rfdno' [ 1035.979414][T12200] team0: Port device team_slave_0 added [ 1035.982995][T12200] team0: Port device team_slave_1 added [ 1036.125766][ T6793] bridge_slave_1: left allmulticast mode [ 1036.125803][ T6793] bridge_slave_1: left promiscuous mode [ 1036.126097][ T6793] bridge0: port 2(bridge_slave_1) entered disabled state [ 1037.288015][ T6793] bridge_slave_0: left allmulticast mode [ 1037.288050][ T6793] bridge_slave_0: left promiscuous mode [ 1037.288339][ T6793] bridge0: port 1(bridge_slave_0) entered disabled state [ 1039.888209][T12366] 9p: Bad value for 'rfdno' [ 1040.764659][T12375] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1608'. [ 1040.765053][T12375] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1608'. [ 1042.755516][T12386] overlayfs: failed to clone upperpath [ 1043.887762][ T6793] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1043.954288][ T6793] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1043.988253][ T6793] bond0 (unregistering): Released all slaves [ 1044.880233][T12200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1044.880255][T12200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1044.880290][T12200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1044.912605][T12200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1044.912707][T12200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1044.912770][T12200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1045.607560][T12200] hsr_slave_0: entered promiscuous mode [ 1045.609209][T12200] hsr_slave_1: entered promiscuous mode [ 1045.610387][T12200] debugfs: 'hsr0' already exists in 'hsr' [ 1045.610417][T12200] Cannot create hsr debugfs directory [ 1046.250187][T10723] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1046.675998][T10723] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1046.676037][T10723] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1046.676093][T10723] usb 9-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 1046.676123][T10723] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.684076][T10723] usb 9-1: config 0 descriptor?? [ 1046.816565][ T6793] hsr_slave_0: left promiscuous mode [ 1046.878401][ T6793] hsr_slave_1: left promiscuous mode [ 1046.883554][ T6793] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1046.883588][ T6793] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1046.937738][ T6793] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1046.937775][ T6793] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1047.047468][ T6793] veth1_macvtap: left promiscuous mode [ 1047.047607][ T6793] veth0_macvtap: left promiscuous mode [ 1047.047922][ T6793] veth1_vlan: left promiscuous mode [ 1047.048122][ T6793] veth0_vlan: left promiscuous mode [ 1047.189380][T10723] belkin 0003:050D:3201.000C: global environment stack underflow [ 1047.189409][T10723] belkin 0003:050D:3201.000C: item 0 4 1 11 parsing failed [ 1047.194076][T10723] belkin 0003:050D:3201.000C: parse failed [ 1047.194168][T10723] belkin 0003:050D:3201.000C: probe with driver belkin failed with error -22 [ 1047.448400][T10723] usb 9-1: USB disconnect, device number 6 [ 1048.105876][T12425] vxfs: unable to read disk superblock at 1 [ 1048.107816][T12425] vxfs: unable to read disk superblock at 8 [ 1048.107865][T12425] vxfs: can't find superblock. [ 1050.925532][ T6793] team0 (unregistering): Port device team_slave_1 removed [ 1051.024162][ T6793] team0 (unregistering): Port device team_slave_0 removed [ 1051.914779][T10165] usb 2-1: new low-speed USB device number 23 using dummy_hcd [ 1054.028268][T10165] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1054.029420][T10165] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1054.029464][T10165] usb 2-1: can't read configurations, error -71 [ 1054.726480][T12457] nbd6: detected capacity change from 0 to 63 [ 1054.865743][ T5799] block nbd6: Receive control failed (result -104) [ 1055.030828][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.030907][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 1058.773554][T12200] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1058.876920][T12200] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1058.962733][T12200] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1060.214825][T12505] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1644'. [ 1060.234864][T12200] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1061.812187][T12526] overlayfs: failed to resolve './bus': -2 [ 1064.257495][T12525] kthread_run failed with err -4 [ 1064.996748][T12200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1065.130101][T12200] 8021q: adding VLAN 0 to HW filter on device team0 [ 1065.222713][ T998] bridge0: port 1(bridge_slave_0) entered blocking state [ 1065.241075][ T998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1065.317006][ T987] bridge0: port 2(bridge_slave_1) entered blocking state [ 1065.317165][ T987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1067.680544][T12569] syz.8.1657 (12569) used greatest stack depth: 17808 bytes left [ 1068.042669][T12200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1068.494742][ T5871] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1068.918190][T12585] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1662'. [ 1069.630442][ T5871] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1069.630468][ T5871] usb 2-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 1069.630483][ T5871] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1069.630521][ T5871] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 1069.630542][ T5871] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 1069.658431][ T5871] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1069.658467][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1069.658492][ T5871] usb 2-1: Product: syz [ 1069.658510][ T5871] usb 2-1: Manufacturer: syz [ 1069.760120][T12588] 9p: Bad value for 'rfdno' [ 1069.782763][ T5871] cdc_wdm 2-1:1.0: skipping garbage [ 1069.782787][ T5871] cdc_wdm 2-1:1.0: skipping garbage [ 1069.782913][ T5871] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1070.092946][T12200] veth0_vlan: entered promiscuous mode [ 1070.113210][T12200] veth1_vlan: entered promiscuous mode [ 1070.177072][ T5858] usb 2-1: USB disconnect, device number 25 [ 1070.243073][T12200] veth0_macvtap: entered promiscuous mode [ 1070.271500][T12200] veth1_macvtap: entered promiscuous mode [ 1070.311699][T12200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1070.339014][T12200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1070.366645][ T1020] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.452916][ T13] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.466393][ T13] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.468173][ T13] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.879318][T12607] 9p: Bad value for 'rfdno' [ 1073.078059][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1073.078083][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1073.427755][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1073.427783][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1074.900820][T12622] batman_adv: batadv0: Adding interface: dummy0 [ 1074.900843][T12622] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1074.900881][T12622] batman_adv: batadv0: Interface activated: dummy0 [ 1075.076156][T12624] batadv0: mtu less than device minimum [ 1075.114840][ T5871] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1075.124089][T12624] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1075.196385][T12624] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1075.235928][T12624] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1075.275769][ T5871] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1075.275806][ T5871] usb 2-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 1075.275828][ T5871] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1075.275879][ T5871] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 1075.275910][ T5871] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 1075.344847][ T5871] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1075.346961][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1075.346987][ T5871] usb 2-1: Product: syz [ 1075.347004][ T5871] usb 2-1: Manufacturer: syz [ 1075.360600][T12624] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1075.418445][ T5871] cdc_wdm 2-1:1.0: skipping garbage [ 1075.418472][ T5871] cdc_wdm 2-1:1.0: skipping garbage [ 1075.418723][ T5871] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1075.453555][T12624] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1075.491100][T12624] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1075.541478][T12624] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1075.797930][T12624] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1075.857852][T12624] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1075.878330][ T5781] usb 2-1: USB disconnect, device number 26 [ 1076.909580][ T5802] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1076.934399][ T5802] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1076.941266][ T5802] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1076.970200][ T5802] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1076.993234][ T5802] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1078.285506][T12650] overlayfs: failed to clone upperpath [ 1079.121054][ T5799] Bluetooth: hci1: command tx timeout [ 1080.644619][ T5781] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1080.867364][ T5781] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1080.867398][ T5781] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1080.867419][ T5781] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1080.867472][ T5781] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1080.867501][ T5781] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1080.871171][ T5781] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1080.871207][ T5781] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1080.871232][ T5781] usb 9-1: Product: syz [ 1080.871249][ T5781] usb 9-1: Manufacturer: syz [ 1081.038336][ T5781] cdc_wdm 9-1:1.0: skipping garbage [ 1081.038363][ T5781] cdc_wdm 9-1:1.0: skipping garbage [ 1081.056524][ T5781] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 1081.056599][ T5781] cdc_wdm 9-1:1.0: Unknown control protocol [ 1081.174702][ T5799] Bluetooth: hci1: command tx timeout [ 1081.247649][ T5781] usb 9-1: USB disconnect, device number 7 [ 1082.184739][T10165] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1082.358235][T10165] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1082.358260][T10165] usb 2-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 1082.358275][T10165] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1082.358309][T10165] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 1082.358329][T10165] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 1082.360680][T10165] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1082.360706][T10165] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1082.360722][T10165] usb 2-1: Product: syz [ 1082.360743][T10165] usb 2-1: Manufacturer: syz [ 1082.497106][T10165] cdc_wdm 2-1:1.0: skipping garbage [ 1082.497128][T10165] cdc_wdm 2-1:1.0: skipping garbage [ 1082.497234][T10165] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1082.906527][T12643] chnl_net:caif_netlink_parms(): no params data found [ 1082.924173][T10165] usb 2-1: USB disconnect, device number 27 [ 1083.245411][ T5799] Bluetooth: hci1: command tx timeout [ 1083.499135][T12690] 9p: Bad value for 'rfdno' [ 1088.079109][T12713] binder_alloc: 12705: binder_alloc_buf, no vma [ 1088.261999][ T58] block nbd6: Possible stuck request ffff888026d45080: control (read@0,1024B). Runtime 30 seconds [ 1088.265511][ T58] block nbd6: Possible stuck request ffff888026d45240: control (read@1024,1024B). Runtime 30 seconds [ 1088.265560][ T58] block nbd6: Possible stuck request ffff888026d45400: control (read@2048,1024B). Runtime 30 seconds [ 1088.265595][ T58] block nbd6: Possible stuck request ffff888026d455c0: control (read@3072,1024B). Runtime 30 seconds [ 1088.283822][ T5799] Bluetooth: hci1: command tx timeout [ 1088.691902][ T12] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1088.862069][T12723] 9p: Bad value for 'rfdno' [ 1092.131589][T10723] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1092.218611][ T12] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.254941][T10723] usb 2-1: device descriptor read/64, error -71 [ 1092.494614][T10723] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1092.583658][T12643] bridge0: port 1(bridge_slave_0) entered blocking state [ 1092.639896][T12643] bridge0: port 1(bridge_slave_0) entered disabled state [ 1092.700793][T12643] bridge_slave_0: entered allmulticast mode [ 1092.842253][T12643] bridge_slave_0: entered promiscuous mode [ 1093.635921][T10723] usb 2-1: device descriptor read/64, error -71 [ 1093.895722][T10723] usb usb2-port1: attempt power cycle [ 1095.319627][T12748] binder_alloc: 12747: binder_alloc_buf, no vma [ 1096.643731][T12761] 9p: Bad value for 'rfdno' [ 1096.658215][ T12] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1096.828088][T12643] bridge0: port 2(bridge_slave_1) entered blocking state [ 1096.828185][T12643] bridge0: port 2(bridge_slave_1) entered disabled state [ 1096.828405][T12643] bridge_slave_1: entered allmulticast mode [ 1096.830871][T12643] bridge_slave_1: entered promiscuous mode [ 1097.055332][T12643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1097.357155][ T12] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.466573][T12643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1097.673564][T12643] team0: Port device team_slave_0 added [ 1097.701995][T12643] team0: Port device team_slave_1 added [ 1098.145733][T12643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1098.145754][T12643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1098.145788][T12643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1098.159403][T12643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1098.159422][T12643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1098.159457][T12643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1098.673639][T12643] hsr_slave_0: entered promiscuous mode [ 1098.681068][T12643] hsr_slave_1: entered promiscuous mode [ 1098.682157][T12643] debugfs: 'hsr0' already exists in 'hsr' [ 1098.682193][T12643] Cannot create hsr debugfs directory [ 1098.915085][T12777] block nbd8: NBD_DISCONNECT [ 1099.169023][ T12] bridge_slave_1: left allmulticast mode [ 1099.169054][ T12] bridge_slave_1: left promiscuous mode [ 1099.169396][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1099.481579][ T12] bridge_slave_0: left allmulticast mode [ 1099.481616][ T12] bridge_slave_0: left promiscuous mode [ 1099.481949][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1101.813331][T12800] 9p: Bad value for 'rfdno' [ 1103.182047][T12809] overlayfs: failed to clone upperpath [ 1106.325643][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1106.365512][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1106.418566][ T12] bond0 (unregistering): Released all slaves [ 1112.454724][ T12] hsr_slave_0: left promiscuous mode [ 1112.899912][ T12] hsr_slave_1: left promiscuous mode [ 1112.901109][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1112.901140][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1113.000583][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1113.000617][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1115.080557][ T12] veth1_macvtap: left promiscuous mode [ 1115.083077][ T12] veth0_macvtap: left promiscuous mode [ 1115.083372][ T12] veth1_vlan: left promiscuous mode [ 1115.083561][ T12] veth0_vlan: left promiscuous mode [ 1115.154644][ T5871] usb 2-1: new low-speed USB device number 31 using dummy_hcd [ 1115.307207][ T5871] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 1115.307252][ T5871] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1115.307308][ T5871] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 1115.307335][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1115.313797][ T5871] usb 2-1: config 0 descriptor?? [ 1115.333173][T12869] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1115.984856][ T5871] kone 0003:1E7D:2CED.000D: hidraw0: USB HID v1.41 Device [HID 1e7d:2ced] on usb-dummy_hcd.1-1/input0 [ 1117.170546][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 1117.170621][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.388221][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1117.452066][ T5871] usb 2-1: USB disconnect, device number 31 [ 1117.527557][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1118.009368][T12872] batadv_slave_0: left promiscuous mode [ 1118.184688][T12884] fido_id[12884]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1118.674591][ T8939] block nbd6: Possible stuck request ffff888026d45080: control (read@0,1024B). Runtime 60 seconds [ 1118.674645][ T8939] block nbd6: Possible stuck request ffff888026d45240: control (read@1024,1024B). Runtime 60 seconds [ 1118.674679][ T8939] block nbd6: Possible stuck request ffff888026d45400: control (read@2048,1024B). Runtime 60 seconds [ 1118.674712][ T8939] block nbd6: Possible stuck request ffff888026d455c0: control (read@3072,1024B). Runtime 60 seconds [ 1125.990587][T12643] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1126.099225][T12643] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1126.200564][T12643] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1126.316261][T12643] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1126.354664][T10723] usb 9-1: new low-speed USB device number 8 using dummy_hcd [ 1127.615044][T10723] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 1127.615082][T10723] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1127.615128][T10723] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 1127.615146][T10723] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.619168][T10723] usb 9-1: config 0 descriptor?? [ 1127.620575][T12950] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1128.100763][T10723] usbhid 9-1:0.0: can't add hid device: -71 [ 1128.100901][T10723] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1128.139921][T10723] usb 9-1: USB disconnect, device number 8 [ 1128.379108][T12643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1128.460204][T12643] 8021q: adding VLAN 0 to HW filter on device team0 [ 1128.498023][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 1128.498140][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1128.538883][ T7421] bridge0: port 2(bridge_slave_1) entered blocking state [ 1128.539096][ T7421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1130.832972][T12643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1134.016851][T12643] veth0_vlan: entered promiscuous mode [ 1134.098052][T12643] veth1_vlan: entered promiscuous mode [ 1135.524604][T10165] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1135.726972][T10165] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1135.727010][T10165] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1135.727058][T10165] usb 7-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 1135.727086][T10165] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.733968][T10165] usb 7-1: config 0 descriptor?? [ 1136.266380][T10165] belkin 0003:050D:3201.000E: global environment stack underflow [ 1136.266406][T10165] belkin 0003:050D:3201.000E: item 0 4 1 11 parsing failed [ 1136.267192][T10165] belkin 0003:050D:3201.000E: parse failed [ 1136.267270][T10165] belkin 0003:050D:3201.000E: probe with driver belkin failed with error -22 [ 1136.518999][ T8816] usb 7-1: USB disconnect, device number 9 [ 1136.626350][ T5802] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1136.632782][ T5802] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1136.636368][ T5802] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1136.640600][ T5802] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1136.643046][ T5802] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1136.649637][T10165] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1136.837614][T10165] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1136.837651][T10165] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1136.837699][T10165] usb 2-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 1136.837725][T10165] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.879540][T10165] usb 2-1: config 0 descriptor?? [ 1137.192945][T13035] block nbd6: NBD_DISCONNECT [ 1137.193219][T13035] block nbd6: Send disconnect failed -32 [ 1137.193244][T13035] block nbd6: shutting down sockets [ 1137.227345][ C0] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1137.227481][ C0] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1137.227628][ C0] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1137.227657][ C0] Buffer I/O error on dev nbd6, logical block 1, async page read [ 1137.227730][ C0] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1137.227756][ C0] Buffer I/O error on dev nbd6, logical block 2, async page read [ 1137.227817][ C0] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1137.227844][ C0] Buffer I/O error on dev nbd6, logical block 3, async page read [ 1137.233030][T10479] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1137.233066][T10479] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1137.285701][T10479] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1137.293352][T10479] Buffer I/O error on dev nbd6, logical block 1, async page read [ 1137.317979][T10479] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1137.318488][T10479] Buffer I/O error on dev nbd6, logical block 2, async page read [ 1137.328421][T10479] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1137.331473][T10479] Buffer I/O error on dev nbd6, logical block 3, async page read [ 1137.344201][T10479] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1137.346773][T10479] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1137.378050][T10479] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1137.378110][T10479] Buffer I/O error on dev nbd6, logical block 1, async page read [ 1137.446915][T10165] belkin 0003:050D:3201.000F: global environment stack underflow [ 1137.446942][T10165] belkin 0003:050D:3201.000F: item 0 4 1 11 parsing failed [ 1137.447735][T10165] belkin 0003:050D:3201.000F: parse failed [ 1137.447818][T10165] belkin 0003:050D:3201.000F: probe with driver belkin failed with error -22 [ 1137.450443][T10479] ldm_validate_partition_table(): Disk read failed. [ 1137.451211][T10479] Dev nbd6: unable to read RDB block 0 [ 1137.452119][T10479] nbd6: unable to read partition table [ 1137.546548][T10479] ldm_validate_partition_table(): Disk read failed. [ 1137.547228][T10479] Dev nbd6: unable to read RDB block 0 [ 1137.548071][T10479] nbd6: unable to read partition table [ 1137.783476][ T5878] usb 2-1: USB disconnect, device number 32 [ 1139.250138][ T5802] Bluetooth: hci1: command tx timeout [ 1141.805123][ T5802] Bluetooth: hci1: command tx timeout [ 1142.458136][T13064] batman_adv: batadv0: Adding interface: dummy0 [ 1142.458158][T13064] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1142.458196][T13064] batman_adv: batadv0: Interface activated: dummy0 [ 1142.538108][T13069] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1798'. [ 1143.965456][ T5802] Bluetooth: hci1: command tx timeout [ 1146.119271][ T5802] Bluetooth: hci1: command tx timeout [ 1150.456279][T13032] chnl_net:caif_netlink_parms(): no params data found [ 1152.898036][T13032] bridge0: port 1(bridge_slave_0) entered blocking state [ 1152.898282][T13032] bridge0: port 1(bridge_slave_0) entered disabled state [ 1152.898517][T13032] bridge_slave_0: entered allmulticast mode [ 1152.908345][T13032] bridge_slave_0: entered promiscuous mode [ 1152.911800][T13032] bridge0: port 2(bridge_slave_1) entered blocking state [ 1152.912005][T13032] bridge0: port 2(bridge_slave_1) entered disabled state [ 1152.912206][T13032] bridge_slave_1: entered allmulticast mode [ 1152.914952][T13032] bridge_slave_1: entered promiscuous mode [ 1154.395209][T13143] binder: 13137:13143 unknown command 0 [ 1154.395260][T13143] binder: 13137:13143 ioctl c0306201 200000000280 returned -22 [ 1154.861403][T13032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1154.887124][T13032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1155.649070][T13032] team0: Port device team_slave_0 added [ 1155.667300][T13032] team0: Port device team_slave_1 added [ 1156.047031][T13032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1156.047049][T13032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1156.047073][T13032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1156.048875][T13032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1156.048888][T13032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1156.048912][T13032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1156.242355][ T8037] bridge_slave_1: left allmulticast mode [ 1156.242387][ T8037] bridge_slave_1: left promiscuous mode [ 1156.242637][ T8037] bridge0: port 2(bridge_slave_1) entered disabled state [ 1156.328495][ T8037] bridge_slave_0: left allmulticast mode [ 1156.328528][ T8037] bridge_slave_0: left promiscuous mode [ 1156.328802][ T8037] bridge0: port 1(bridge_slave_0) entered disabled state [ 1157.304500][T13182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1161.227661][T13204] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1843'. [ 1161.346540][ T8037] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1161.425399][ T8037] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1161.472105][ T8037] bond0 (unregistering): Released all slaves [ 1161.780586][T13032] hsr_slave_0: entered promiscuous mode [ 1161.997323][T13209] hub 8-0:1.0: USB hub found [ 1162.008860][T13209] hub 8-0:1.0: 1 port detected [ 1162.905330][T13032] hsr_slave_1: entered promiscuous mode [ 1162.906643][T13032] debugfs: 'hsr0' already exists in 'hsr' [ 1162.906695][T13032] Cannot create hsr debugfs directory [ 1165.035080][ T8037] hsr_slave_0: left promiscuous mode [ 1165.088640][ T8037] hsr_slave_1: left promiscuous mode [ 1165.089807][ T8037] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1165.333924][ T8037] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1169.285472][ T8037] veth1_vlan: left promiscuous mode [ 1169.285664][ T8037] veth0_vlan: left promiscuous mode [ 1171.414614][ T5806] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1171.575455][ T8037] team0 (unregistering): Port device team_slave_1 removed [ 1171.635447][ T8037] team0 (unregistering): Port device team_slave_0 removed [ 1171.903057][ T5806] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1171.903119][ T5806] usb 9-1: New USB device found, idVendor=357d, idProduct=7788, bcdDevice=81.0d [ 1171.903149][ T5806] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.967240][ T5806] usb 9-1: config 0 descriptor?? [ 1172.287421][ T5806] usb 9-1: USB disconnect, device number 9 [ 1178.021511][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.021594][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 1182.696583][T13343] netlink: 'syz.1.1876': attribute type 1 has an invalid length. [ 1182.696605][T13343] netlink: 'syz.1.1876': attribute type 4 has an invalid length. [ 1182.696616][T13343] netlink: 15334 bytes leftover after parsing attributes in process `syz.1.1876'. [ 1182.961079][T13032] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1183.412279][T13032] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1183.778001][T13032] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1184.109274][T13032] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1186.281339][T13032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1186.383935][T13032] 8021q: adding VLAN 0 to HW filter on device team0 [ 1186.492009][ T1123] bridge0: port 1(bridge_slave_0) entered blocking state [ 1186.964630][ T1123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1187.063651][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 1187.073965][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1189.995433][ T5799] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1190.005944][ T5799] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1190.014943][ T5799] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1190.022953][ T5799] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1190.031923][ T5799] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1190.423381][T13032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1192.844835][ T5802] Bluetooth: hci2: command tx timeout [ 1192.909141][T13417] binder_alloc: 13395: binder_alloc_buf, no vma [ 1195.195613][ T5802] Bluetooth: hci2: command tx timeout [ 1197.005974][ T5799] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1197.021262][ T5799] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1197.035995][ T5799] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1197.039614][ T5799] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1197.040482][ T5799] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1197.244762][ T5799] Bluetooth: hci2: command tx timeout [ 1197.271927][ T7421] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1197.445657][T13397] chnl_net:caif_netlink_parms(): no params data found [ 1198.009918][ T5802] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1198.058658][ T5802] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1198.092875][ T5802] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1198.097079][ T5802] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1198.100780][ T5802] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1198.333413][ T7421] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1198.515510][T13473] bridge_slave_1: left allmulticast mode [ 1198.515542][T13473] bridge_slave_1: left promiscuous mode [ 1198.516166][T13473] bridge0: port 2(bridge_slave_1) entered disabled state [ 1199.084642][ T5799] Bluetooth: hci0: command tx timeout [ 1199.346284][ T5799] Bluetooth: hci2: command tx timeout [ 1200.294556][ T5799] Bluetooth: hci5: command tx timeout [ 1201.168585][ T5799] Bluetooth: hci0: command tx timeout [ 1201.313301][T13506] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1902'. [ 1201.313585][T13506] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1902'. [ 1202.364630][ T5799] Bluetooth: hci5: command tx timeout [ 1202.546811][ T7421] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1202.698545][T13511] overlayfs: failed to clone upperpath [ 1203.244654][ T5799] Bluetooth: hci0: command tx timeout [ 1203.421537][ T7421] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1204.158658][T13397] bridge0: port 1(bridge_slave_0) entered blocking state [ 1204.158802][T13397] bridge0: port 1(bridge_slave_0) entered disabled state [ 1204.159090][T13397] bridge_slave_0: entered allmulticast mode [ 1204.163584][T13397] bridge_slave_0: entered promiscuous mode [ 1204.213585][T13397] bridge0: port 2(bridge_slave_1) entered blocking state [ 1204.213678][T13397] bridge0: port 2(bridge_slave_1) entered disabled state [ 1204.213917][T13397] bridge_slave_1: entered allmulticast mode [ 1204.222563][T13397] bridge_slave_1: entered promiscuous mode [ 1204.444681][ T5799] Bluetooth: hci5: command tx timeout [ 1205.307273][T13397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1205.324614][ T5799] Bluetooth: hci0: command tx timeout [ 1205.388139][T13397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1205.972804][T13397] team0: Port device team_slave_0 added [ 1206.002734][T13397] team0: Port device team_slave_1 added [ 1206.662338][ T5799] Bluetooth: hci5: command tx timeout [ 1206.808016][T13397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1206.808037][T13397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1206.808070][T13397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1207.353049][T13397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1207.353072][T13397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1207.353106][T13397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1209.514879][ T7421] bridge_slave_1: left allmulticast mode [ 1209.514913][ T7421] bridge_slave_1: left promiscuous mode [ 1209.515194][ T7421] bridge0: port 2(bridge_slave_1) entered disabled state [ 1209.906468][ T7421] bridge_slave_0: left allmulticast mode [ 1209.906500][ T7421] bridge_slave_0: left promiscuous mode [ 1209.906766][ T7421] bridge0: port 1(bridge_slave_0) entered disabled state [ 1211.915476][ T7421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1211.995542][ T7421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1212.081028][ T7421] bond0 (unregistering): Released all slaves [ 1212.340274][T13397] hsr_slave_0: entered promiscuous mode [ 1212.341211][T13397] hsr_slave_1: entered promiscuous mode [ 1212.341836][T13397] debugfs: 'hsr0' already exists in 'hsr' [ 1212.341853][T13397] Cannot create hsr debugfs directory [ 1214.031268][T13461] chnl_net:caif_netlink_parms(): no params data found [ 1215.765110][T13471] chnl_net:caif_netlink_parms(): no params data found [ 1216.788400][T13461] bridge0: port 1(bridge_slave_0) entered blocking state [ 1216.788622][T13461] bridge0: port 1(bridge_slave_0) entered disabled state [ 1216.788899][T13461] bridge_slave_0: entered allmulticast mode [ 1216.826316][T13461] bridge_slave_0: entered promiscuous mode [ 1217.006705][ T7421] hsr_slave_0: left promiscuous mode [ 1217.046835][ T7421] hsr_slave_1: left promiscuous mode [ 1217.049414][ T7421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1217.049445][ T7421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1217.075699][ T7421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1217.075732][ T7421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1217.157559][ T7421] veth1_macvtap: left promiscuous mode [ 1217.157642][ T7421] veth0_macvtap: left promiscuous mode [ 1217.157833][ T7421] veth1_vlan: left promiscuous mode [ 1217.160374][ T7421] veth0_vlan: left promiscuous mode [ 1218.120912][T13630] fuse: Unknown parameter 'grou00000000000000000000' [ 1220.190115][ T7421] team0 (unregistering): Port device team_slave_1 removed [ 1220.408006][ T7421] team0 (unregistering): Port device team_slave_0 removed [ 1220.870369][T13461] bridge0: port 2(bridge_slave_1) entered blocking state [ 1220.870489][T13461] bridge0: port 2(bridge_slave_1) entered disabled state [ 1220.870710][T13461] bridge_slave_1: entered allmulticast mode [ 1221.124727][T13461] bridge_slave_1: entered promiscuous mode [ 1221.510509][T13471] bridge0: port 1(bridge_slave_0) entered blocking state [ 1221.510642][T13471] bridge0: port 1(bridge_slave_0) entered disabled state [ 1221.510856][T13471] bridge_slave_0: entered allmulticast mode [ 1221.526714][T13471] bridge_slave_0: entered promiscuous mode [ 1221.804353][T13471] bridge0: port 2(bridge_slave_1) entered blocking state [ 1221.806143][T13471] bridge0: port 2(bridge_slave_1) entered disabled state [ 1221.806373][T13471] bridge_slave_1: entered allmulticast mode [ 1221.808292][T13471] bridge_slave_1: entered promiscuous mode [ 1221.812665][T13461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1222.545661][T13461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1222.628816][T13471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1224.811214][T13471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1224.859135][T13461] team0: Port device team_slave_0 added [ 1225.471002][T13461] team0: Port device team_slave_1 added [ 1227.221203][T13471] team0: Port device team_slave_0 added [ 1227.399402][T13471] team0: Port device team_slave_1 added [ 1229.040429][T13461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1229.040449][T13461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1229.040480][T13461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1229.154110][T13461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1229.154128][T13461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1229.154155][T13461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1229.210354][T13471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1229.210374][T13471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1229.210406][T13471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1229.276558][T13471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1229.276576][T13471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1229.276609][T13471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1229.831050][T13461] hsr_slave_0: entered promiscuous mode [ 1229.837597][T13461] hsr_slave_1: entered promiscuous mode [ 1230.067186][T13717] batman_adv: batadv0: Interface deactivated: dummy0 [ 1230.067222][T13717] batman_adv: batadv0: Removing interface: dummy0 [ 1230.133285][T13471] hsr_slave_0: entered promiscuous mode [ 1230.149846][T13471] hsr_slave_1: entered promiscuous mode [ 1230.150914][T13471] debugfs: 'hsr0' already exists in 'hsr' [ 1230.150939][T13471] Cannot create hsr debugfs directory [ 1233.522413][T13397] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1234.187858][T13397] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1234.350977][T13397] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1234.590307][T13397] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1235.030718][T13781] syz.1.1986 uses obsolete (PF_INET,SOCK_PACKET) [ 1235.614638][ T5871] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1235.697510][ T7421] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1235.778497][ T5871] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1235.778531][ T5871] usb 2-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 1235.778554][ T5871] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1235.778607][ T5871] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1235.782277][ T5871] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1235.782312][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1235.782335][ T5871] usb 2-1: Product: syz [ 1235.782351][ T5871] usb 2-1: Manufacturer: syz [ 1235.888270][ T5871] cdc_wdm 2-1:1.0: skipping garbage [ 1235.888305][ T5871] cdc_wdm 2-1:1.0: skipping garbage [ 1235.888342][ T5871] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1236.113487][ T8816] usb 2-1: USB disconnect, device number 33 [ 1236.518804][ T7421] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1237.612326][T13397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1239.118592][ T7421] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1239.335272][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.335347][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.481253][ T7421] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1239.809102][T13397] 8021q: adding VLAN 0 to HW filter on device team0 [ 1239.984336][ T1020] bridge0: port 1(bridge_slave_0) entered blocking state [ 1239.988812][ T1020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1240.412485][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1240.412655][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1243.997691][ T7421] bridge_slave_1: left allmulticast mode [ 1243.997714][ T7421] bridge_slave_1: left promiscuous mode [ 1243.997904][ T7421] bridge0: port 2(bridge_slave_1) entered disabled state [ 1244.151370][ T7421] bridge_slave_0: left allmulticast mode [ 1244.151402][ T7421] bridge_slave_0: left promiscuous mode [ 1244.151683][ T7421] bridge0: port 1(bridge_slave_0) entered disabled state [ 1244.243220][ T7421] bridge_slave_1: left allmulticast mode [ 1244.243252][ T7421] bridge_slave_1: left promiscuous mode [ 1244.243510][ T7421] bridge0: port 2(bridge_slave_1) entered disabled state [ 1244.357843][ T7421] bridge_slave_0: left allmulticast mode [ 1244.357877][ T7421] bridge_slave_0: left promiscuous mode [ 1244.358136][ T7421] bridge0: port 1(bridge_slave_0) entered disabled state [ 1246.635347][ T7421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1246.677396][ T7421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1246.698006][ T7421] bond0 (unregistering): Released all slaves [ 1247.115343][ T7421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1247.374688][ T7421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1247.488659][ T7421] bond0 (unregistering): Released all slaves [ 1249.711917][ T5802] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1249.727837][ T5802] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1249.731815][ T5802] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1249.760737][ T5802] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1249.764763][ T5802] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1249.801190][T13893] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2010'. [ 1250.871409][T13908] nbd1: detected capacity change from 0 to 63 [ 1250.907198][ T5799] block nbd1: Receive control failed (result -104) [ 1251.967172][ T5799] Bluetooth: hci1: command tx timeout [ 1254.371269][ T5799] Bluetooth: hci1: command tx timeout [ 1255.786468][ T7421] hsr_slave_0: left promiscuous mode [ 1256.278156][ T7421] hsr_slave_1: left promiscuous mode [ 1256.279259][ T7421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1256.375483][ T7421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1256.444661][ T5799] Bluetooth: hci1: command tx timeout [ 1256.905566][ T5802] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1256.924715][ T5802] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1256.929401][ T5802] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1256.930882][ T5802] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1256.931704][ T5802] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1257.135545][ T7421] hsr_slave_0: left promiscuous mode [ 1257.314676][ T7421] hsr_slave_1: left promiscuous mode [ 1257.334728][ T7421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1257.385768][ T7421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1257.385807][ T7421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1257.565103][ T7421] veth1_macvtap: left promiscuous mode [ 1257.565230][ T7421] veth0_macvtap: left promiscuous mode [ 1257.565502][ T7421] veth1_vlan: left promiscuous mode [ 1257.565684][ T7421] veth0_vlan: left promiscuous mode [ 1258.440576][ T5802] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1258.470387][ T5802] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1258.471757][ T5802] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1258.472921][ T5802] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1258.473873][ T5802] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1258.526858][ T5802] Bluetooth: hci1: command tx timeout [ 1259.004522][ T5799] Bluetooth: hci2: command tx timeout [ 1259.217370][ T7421] team0 (unregistering): Port device team_slave_1 removed [ 1259.313503][ T7421] team0 (unregistering): Port device team_slave_0 removed [ 1260.615658][T14028] overlayfs: failed to clone upperpath [ 1261.258972][ T5799] Bluetooth: hci3: command tx timeout [ 1261.260020][ T5799] Bluetooth: hci2: command tx timeout [ 1262.199144][ T7421] team0 (unregistering): Port device team_slave_1 removed [ 1262.613750][ T7421] team0 (unregistering): Port device team_slave_0 removed [ 1263.324925][ T5797] Bluetooth: hci2: command tx timeout [ 1263.324965][ T5797] Bluetooth: hci3: command tx timeout [ 1265.405011][ T5799] Bluetooth: hci3: command tx timeout [ 1265.405045][ T5799] Bluetooth: hci2: command tx timeout [ 1265.604751][T13889] chnl_net:caif_netlink_parms(): no params data found [ 1267.504606][ T5797] Bluetooth: hci3: command tx timeout [ 1267.548201][T13889] bridge0: port 1(bridge_slave_0) entered blocking state [ 1267.548330][T13889] bridge0: port 1(bridge_slave_0) entered disabled state [ 1267.548621][T13889] bridge_slave_0: entered allmulticast mode [ 1267.551426][T13889] bridge_slave_0: entered promiscuous mode [ 1267.995891][T13889] bridge0: port 2(bridge_slave_1) entered blocking state [ 1267.996023][T13889] bridge0: port 2(bridge_slave_1) entered disabled state [ 1267.996300][T13889] bridge_slave_1: entered allmulticast mode [ 1267.999086][T13889] bridge_slave_1: entered promiscuous mode [ 1268.102724][T13889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1268.117254][T13889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1268.170388][T13889] team0: Port device team_slave_0 added [ 1268.937453][T13889] team0: Port device team_slave_1 added [ 1271.212522][ T5797] Bluetooth: hci4: unexpected event for opcode 0x0c7c [ 1271.258131][T13996] chnl_net:caif_netlink_parms(): no params data found [ 1271.365779][T13889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1271.365800][T13889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1271.365832][T13889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1271.504977][T13969] chnl_net:caif_netlink_parms(): no params data found [ 1271.825484][T13889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1271.825503][T13889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1271.825535][T13889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1274.365584][T13889] hsr_slave_0: entered promiscuous mode [ 1274.367006][T13889] hsr_slave_1: entered promiscuous mode [ 1274.367988][T13889] debugfs: 'hsr0' already exists in 'hsr' [ 1274.368014][T13889] Cannot create hsr debugfs directory [ 1275.139674][T13996] bridge0: port 1(bridge_slave_0) entered blocking state [ 1275.139919][T13996] bridge0: port 1(bridge_slave_0) entered disabled state [ 1275.140112][T13996] bridge_slave_0: entered allmulticast mode [ 1275.143268][T13996] bridge_slave_0: entered promiscuous mode [ 1275.482873][T13996] bridge0: port 2(bridge_slave_1) entered blocking state [ 1275.483003][T13996] bridge0: port 2(bridge_slave_1) entered disabled state [ 1275.483219][T13996] bridge_slave_1: entered allmulticast mode [ 1275.507868][T13996] bridge_slave_1: entered promiscuous mode [ 1275.644778][T13969] bridge0: port 1(bridge_slave_0) entered blocking state [ 1275.644911][T13969] bridge0: port 1(bridge_slave_0) entered disabled state [ 1275.645193][T13969] bridge_slave_0: entered allmulticast mode [ 1275.656827][T13969] bridge_slave_0: entered promiscuous mode [ 1275.949437][T13969] bridge0: port 2(bridge_slave_1) entered blocking state [ 1275.949567][T13969] bridge0: port 2(bridge_slave_1) entered disabled state [ 1275.949864][T13969] bridge_slave_1: entered allmulticast mode [ 1275.952825][T13969] bridge_slave_1: entered promiscuous mode [ 1276.084720][T14198] netlink: 292 bytes leftover after parsing attributes in process `syz.7.2064'. [ 1276.503856][T13996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1276.695686][T14209] overlayfs: failed to clone upperpath [ 1277.028845][T13996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1277.043785][T13969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1277.094515][ T5878] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1277.221595][T13969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1278.116410][ T5878] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1278.116445][ T5878] usb 2-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 1278.116468][ T5878] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1278.116519][ T5878] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1278.121715][ T5878] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1278.121745][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1278.121767][ T5878] usb 2-1: Product: syz [ 1278.121782][ T5878] usb 2-1: Manufacturer: syz [ 1278.288003][ T5878] cdc_wdm 2-1:1.0: skipping garbage [ 1278.288027][ T5878] cdc_wdm 2-1:1.0: skipping garbage [ 1278.288065][ T5878] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1278.487365][T13996] team0: Port device team_slave_0 added [ 1278.516664][T10165] usb 2-1: USB disconnect, device number 34 [ 1278.655983][T13996] team0: Port device team_slave_1 added [ 1278.670410][T13969] team0: Port device team_slave_0 added [ 1278.729446][T13969] team0: Port device team_slave_1 added [ 1278.922898][T13996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1278.922915][T13996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1278.922937][T13996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1279.005557][T13996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1279.005577][T13996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1279.005608][T13996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1279.058766][T13969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1279.058784][T13969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1279.058823][T13969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1279.140344][T13969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1279.140362][T13969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1279.140389][T13969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1279.709932][T14246] netlink: 292 bytes leftover after parsing attributes in process `syz.7.2075'. [ 1280.395254][T13996] hsr_slave_0: entered promiscuous mode [ 1280.396799][T13996] hsr_slave_1: entered promiscuous mode [ 1280.397929][T13996] debugfs: 'hsr0' already exists in 'hsr' [ 1280.397954][T13996] Cannot create hsr debugfs directory [ 1280.556544][T13969] hsr_slave_0: entered promiscuous mode [ 1280.559756][T13969] hsr_slave_1: entered promiscuous mode [ 1280.560901][T14268] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2078'. [ 1280.561775][T13969] debugfs: 'hsr0' already exists in 'hsr' [ 1280.561801][T13969] Cannot create hsr debugfs directory [ 1282.084683][ T8939] block nbd1: Possible stuck request ffff888026b27000: control (read@0,1024B). Runtime 30 seconds [ 1282.084736][ T8939] block nbd1: Possible stuck request ffff888026b271c0: control (read@1024,1024B). Runtime 30 seconds [ 1282.084770][ T8939] block nbd1: Possible stuck request ffff888026b27380: control (read@2048,1024B). Runtime 30 seconds [ 1282.084803][ T8939] block nbd1: Possible stuck request ffff888026b27540: control (read@3072,1024B). Runtime 30 seconds [ 1283.818092][ T7421] bridge_slave_1: left allmulticast mode [ 1283.818135][ T7421] bridge_slave_1: left promiscuous mode [ 1283.818406][ T7421] bridge0: port 2(bridge_slave_1) entered disabled state [ 1283.923206][ T7421] bridge_slave_0: left allmulticast mode [ 1283.923238][ T7421] bridge_slave_0: left promiscuous mode [ 1283.923513][ T7421] bridge0: port 1(bridge_slave_0) entered disabled state [ 1284.047163][ T7421] bridge_slave_1: left allmulticast mode [ 1284.047195][ T7421] bridge_slave_1: left promiscuous mode [ 1284.047456][ T7421] bridge0: port 2(bridge_slave_1) entered disabled state [ 1284.137397][ T7421] bridge_slave_0: left allmulticast mode [ 1284.137429][ T7421] bridge_slave_0: left promiscuous mode [ 1284.137676][ T7421] bridge0: port 1(bridge_slave_0) entered disabled state [ 1284.205569][T14312] netlink: 292 bytes leftover after parsing attributes in process `syz.1.2084'. [ 1284.228473][ T7421] bridge_slave_1: left allmulticast mode [ 1284.228497][ T7421] bridge_slave_1: left promiscuous mode [ 1284.228675][ T7421] bridge0: port 2(bridge_slave_1) entered disabled state [ 1284.305788][ T7421] bridge_slave_0: left allmulticast mode [ 1284.305813][ T7421] bridge_slave_0: left promiscuous mode [ 1284.306000][ T7421] bridge0: port 1(bridge_slave_0) entered disabled state [ 1284.717969][ T7421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1284.818337][ T7421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1284.881613][ T7421] bond0 (unregistering): Released all slaves [ 1286.515582][ T7421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1286.635463][ T7421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1286.717535][ T7421] bond0 (unregistering): Released all slaves [ 1288.615503][ T7421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1288.735407][ T7421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1288.784019][ T7421] bond0 (unregistering): Released all slaves [ 1290.253572][T13889] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1290.354249][T13889] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1290.489752][T13889] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1291.681942][T13889] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1292.197569][T14354] netlink: 292 bytes leftover after parsing attributes in process `syz.7.2098'. [ 1292.524656][ T7421] hsr_slave_0: left promiscuous mode [ 1292.644520][ T7421] hsr_slave_1: left promiscuous mode [ 1292.645710][ T7421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1292.875805][ T7421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1293.077609][ T7421] hsr_slave_0: left promiscuous mode [ 1293.098383][ T7421] hsr_slave_1: left promiscuous mode [ 1293.101357][ T7421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1293.149678][ T7421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1293.284882][ T7421] hsr_slave_0: left promiscuous mode [ 1293.300614][ T7421] hsr_slave_1: left promiscuous mode [ 1293.314686][ T7421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1293.375909][ T7421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1293.407628][T14366] binder: 14365:14366 ioctl c0306201 0 returned -14 [ 1294.468078][ T7421] team0 (unregistering): Port device team_slave_1 removed [ 1294.515655][ T7421] team0 (unregistering): Port device team_slave_0 removed [ 1294.975276][ T7421] team0 (unregistering): Port device team_slave_1 removed [ 1295.027327][ T7421] team0 (unregistering): Port device team_slave_0 removed [ 1295.486001][ T7421] team0 (unregistering): Port device team_slave_1 removed [ 1295.526340][ T7421] team0 (unregistering): Port device team_slave_0 removed [ 1295.964117][T13996] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1296.072002][T13996] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1296.829473][T13996] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1297.065993][T13996] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1297.500212][T14412] netlink: 292 bytes leftover after parsing attributes in process `syz.1.2113'. [ 1298.835109][T13889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1299.156694][T13889] 8021q: adding VLAN 0 to HW filter on device team0 [ 1299.162474][T14447] kAFS: No cell specified [ 1299.281995][ T8037] bridge0: port 1(bridge_slave_0) entered blocking state [ 1299.282154][ T8037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1299.409688][ T8037] bridge0: port 2(bridge_slave_1) entered blocking state [ 1299.409833][ T8037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1299.670906][T13996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1299.774562][T14458] netlink: 272 bytes leftover after parsing attributes in process `syz.1.2123'. [ 1299.842995][T13969] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1299.914437][T13969] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1299.984214][T13969] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1300.834261][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.835348][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.172782][T13969] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1301.354540][T13996] 8021q: adding VLAN 0 to HW filter on device team0 [ 1301.530225][ T8071] bridge0: port 1(bridge_slave_0) entered blocking state [ 1301.530317][ T8071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1301.579782][ T8071] bridge0: port 2(bridge_slave_1) entered blocking state [ 1301.579946][ T8071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1302.702648][T13969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1303.018400][T13969] 8021q: adding VLAN 0 to HW filter on device team0 [ 1303.073936][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 1303.074212][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1303.212336][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 1303.224606][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1303.374964][T13889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1303.924821][T13996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1303.993145][T14517] netlink: 272 bytes leftover after parsing attributes in process `syz.7.2132'. [ 1304.134841][T13889] veth0_vlan: entered promiscuous mode [ 1304.164510][ T8816] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1304.215814][T13889] veth1_vlan: entered promiscuous mode [ 1304.340049][ T8816] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1304.340084][ T8816] usb 2-1: config 1 descriptor has 1 excess byte, ignoring [ 1304.340107][ T8816] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1304.340161][ T8816] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1304.342452][ T8816] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1304.342486][ T8816] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1304.342509][ T8816] usb 2-1: Product: syz [ 1304.342525][ T8816] usb 2-1: Manufacturer: syz [ 1304.493916][ T8816] cdc_wdm 2-1:1.0: skipping garbage [ 1304.493964][ T8816] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1304.661619][ T8816] usb 2-1: USB disconnect, device number 35 [ 1304.679925][T13889] veth0_macvtap: entered promiscuous mode [ 1304.734047][T13889] veth1_macvtap: entered promiscuous mode [ 1304.891913][T13889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1304.943443][T13889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1305.038406][ T1123] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1305.040145][ T1123] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1305.046369][ T1123] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1305.051965][ T1123] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1306.503252][ T1123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1306.503276][ T1123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1306.544285][T13969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1306.733983][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1306.734007][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1306.881435][T13996] veth0_vlan: entered promiscuous mode [ 1306.971750][T13996] veth1_vlan: entered promiscuous mode [ 1307.145792][T13969] veth0_vlan: entered promiscuous mode [ 1307.371508][T14554] hub 8-0:1.0: USB hub found [ 1307.379386][T14554] hub 8-0:1.0: 1 port detected [ 1307.867631][T14551] netlink: 272 bytes leftover after parsing attributes in process `syz.7.2141'. [ 1308.397177][T13969] veth1_vlan: entered promiscuous mode [ 1308.613282][T13996] veth0_macvtap: entered promiscuous mode [ 1308.697318][T13996] veth1_macvtap: entered promiscuous mode [ 1308.878150][T13969] veth0_macvtap: entered promiscuous mode [ 1308.884083][T13996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1308.945306][T13969] veth1_macvtap: entered promiscuous mode [ 1308.966709][T13996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1309.562560][T10740] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1309.630929][T10740] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.809281][ T987] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1311.163187][ T987] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1311.249471][T13969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1311.343200][T13969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1311.424473][T10165] usb 2-1: new low-speed USB device number 36 using dummy_hcd [ 1311.531435][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1311.570289][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1311.602945][T10165] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 1311.602985][T10165] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1311.603043][T10165] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 1311.603062][T10165] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1311.624665][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1311.684594][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1311.724103][T10165] usb 2-1: config 0 descriptor?? [ 1311.753126][T14572] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1312.108641][ T8037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1312.108663][ T8037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1312.202404][T10165] kone 0003:1E7D:2CED.0010: unknown main item tag 0x1 [ 1312.202448][T10165] kone 0003:1E7D:2CED.0010: item fetching failed at offset 3/5 [ 1312.203280][T10165] kone 0003:1E7D:2CED.0010: parse failed [ 1312.203356][T10165] kone 0003:1E7D:2CED.0010: probe with driver kone failed with error -22 [ 1312.340958][ T8939] block nbd1: Possible stuck request ffff888026b27000: control (read@0,1024B). Runtime 60 seconds [ 1312.341009][ T8939] block nbd1: Possible stuck request ffff888026b271c0: control (read@1024,1024B). Runtime 60 seconds [ 1312.341044][ T8939] block nbd1: Possible stuck request ffff888026b27380: control (read@2048,1024B). Runtime 60 seconds [ 1312.341077][ T8939] block nbd1: Possible stuck request ffff888026b27540: control (read@3072,1024B). Runtime 60 seconds [ 1312.459761][ T5878] usb 2-1: USB disconnect, device number 36 [ 1312.554860][ T8037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1312.554883][ T8037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1312.716885][ T8037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1312.716909][ T8037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1313.532862][ T998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1313.532880][ T998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1315.042045][T14603] netlink: 272 bytes leftover after parsing attributes in process `syz.9.2151'. [ 1317.734597][T10165] usb 10-1: new low-speed USB device number 2 using dummy_hcd [ 1317.898084][T10165] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 1317.898123][T10165] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1317.898278][T10165] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 1317.898311][T10165] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1317.959445][T10165] usb 10-1: config 0 descriptor?? [ 1317.970850][T14623] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1318.597453][T10165] kone 0003:1E7D:2CED.0011: unknown main item tag 0x1 [ 1318.597490][T10165] kone 0003:1E7D:2CED.0011: item fetching failed at offset 3/5 [ 1318.598247][T10165] kone 0003:1E7D:2CED.0011: parse failed [ 1318.598321][T10165] kone 0003:1E7D:2CED.0011: probe with driver kone failed with error -22 [ 1318.671301][ T5799] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1318.791913][T14641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1319.507690][T10165] usb 10-1: USB disconnect, device number 2 [ 1319.529446][ T5799] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1319.536103][ T5799] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1319.560058][ T5799] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1319.572659][T14642] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2147'. [ 1319.574539][ T5799] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1320.778957][T14667] vxfs: unable to read disk superblock at 1 [ 1320.782188][T14667] vxfs: unable to read disk superblock at 8 [ 1320.782238][T14667] vxfs: can't find superblock. [ 1321.656519][ T5797] Bluetooth: hci0: command tx timeout [ 1323.726965][ T5799] Bluetooth: hci0: command tx timeout [ 1323.787333][T14689] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2170'. [ 1324.020847][T14637] chnl_net:caif_netlink_parms(): no params data found [ 1325.779431][T14637] bridge0: port 1(bridge_slave_0) entered blocking state [ 1325.779664][T14637] bridge0: port 1(bridge_slave_0) entered disabled state [ 1325.779889][T14637] bridge_slave_0: entered allmulticast mode [ 1325.783654][T14637] bridge_slave_0: entered promiscuous mode [ 1325.814536][ T5799] Bluetooth: hci0: command tx timeout [ 1325.819866][T14700] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2171'. [ 1325.820629][T14637] bridge0: port 2(bridge_slave_1) entered blocking state [ 1325.820857][T14637] bridge0: port 2(bridge_slave_1) entered disabled state [ 1325.821076][T14637] bridge_slave_1: entered allmulticast mode [ 1325.875157][T14637] bridge_slave_1: entered promiscuous mode [ 1325.967315][T14637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1325.973531][T14637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1326.139297][T14637] team0: Port device team_slave_0 added [ 1326.143720][T14637] team0: Port device team_slave_1 added [ 1326.230380][T14637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1326.230400][T14637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1326.230431][T14637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1326.232779][T14637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1326.232795][T14637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1326.232825][T14637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1326.486046][T14637] hsr_slave_0: entered promiscuous mode [ 1326.488409][T14637] hsr_slave_1: entered promiscuous mode [ 1327.797761][T14637] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1327.894454][ T5799] Bluetooth: hci0: command tx timeout [ 1329.650443][T14637] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1330.594512][ T5806] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1330.796850][ T5806] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1330.796884][ T5806] usb 3-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 1330.796907][ T5806] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1330.796960][ T5806] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1330.799826][ T5806] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1330.799861][ T5806] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1330.799884][ T5806] usb 3-1: Product: syz [ 1330.799901][ T5806] usb 3-1: Manufacturer: syz [ 1330.935595][ T5806] cdc_wdm 3-1:1.0: skipping garbage [ 1330.935640][ T5806] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1331.098682][T14758] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2183'. [ 1331.174155][ T5858] usb 3-1: USB disconnect, device number 2 [ 1331.553837][T14637] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1332.215007][T14770] netlink: 52 bytes leftover after parsing attributes in process `syz.9.2186'. [ 1332.313093][T14637] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1332.444557][T10165] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 1332.597379][T10165] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 1332.597420][T10165] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1332.597469][T10165] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 1332.597495][T10165] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1332.668846][T10165] usb 1-1: config 0 descriptor?? [ 1332.674871][T14775] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1333.075210][T14790] vxfs: unable to read disk superblock at 1 [ 1333.078873][T14790] vxfs: unable to read disk superblock at 8 [ 1333.078923][T14790] vxfs: can't find superblock. [ 1333.810490][T10165] kone 0003:1E7D:2CED.0012: unknown main item tag 0x0 [ 1333.810525][T10165] kone 0003:1E7D:2CED.0012: item fetching failed at offset 3/5 [ 1333.811262][T10165] kone 0003:1E7D:2CED.0012: parse failed [ 1333.811324][T10165] kone 0003:1E7D:2CED.0012: probe with driver kone failed with error -22 [ 1334.009182][ T5806] usb 1-1: USB disconnect, device number 2 [ 1336.268373][T14637] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1336.329900][T14637] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1336.589865][T14637] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1336.678567][T14637] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1337.081799][ T5806] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1339.124793][ T5806] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1339.124827][ T5806] usb 10-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 1339.124850][ T5806] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1339.124903][ T5806] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1339.146467][ T5806] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1339.146502][ T5806] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1339.146526][ T5806] usb 10-1: Product: syz [ 1339.146542][ T5806] usb 10-1: Manufacturer: syz [ 1339.267036][ T5806] cdc_wdm 10-1:1.0: skipping garbage [ 1339.267083][ T5806] cdc_wdm 10-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1339.434889][T14637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1339.548296][T10165] usb 10-1: USB disconnect, device number 3 [ 1339.572566][T14637] 8021q: adding VLAN 0 to HW filter on device team0 [ 1339.630751][ T7421] bridge0: port 1(bridge_slave_0) entered blocking state [ 1339.631460][ T7421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1339.723704][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 1339.723856][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1342.414582][ T8939] block nbd1: Possible stuck request ffff888026b27000: control (read@0,1024B). Runtime 90 seconds [ 1342.414636][ T8939] block nbd1: Possible stuck request ffff888026b271c0: control (read@1024,1024B). Runtime 90 seconds [ 1342.414670][ T8939] block nbd1: Possible stuck request ffff888026b27380: control (read@2048,1024B). Runtime 90 seconds [ 1342.414703][ T8939] block nbd1: Possible stuck request ffff888026b27540: control (read@3072,1024B). Runtime 90 seconds [ 1342.564526][ T5871] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1342.734569][ T5871] usb 10-1: Using ep0 maxpacket: 16 [ 1342.740547][ T5871] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1342.740576][ T5871] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1342.800355][ T5871] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1342.800379][ T5871] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1342.800395][ T5871] usb 10-1: Product: syz [ 1342.800406][ T5871] usb 10-1: Manufacturer: syz [ 1342.800417][ T5871] usb 10-1: SerialNumber: syz [ 1343.149653][ T5871] usb 10-1: 0:2 : does not exist [ 1343.151009][T14637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1344.304550][ T5871] usb 10-1: USB disconnect, device number 4 [ 1344.563024][T13672] udevd[13672]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1344.582906][T14637] veth0_vlan: entered promiscuous mode [ 1344.611129][T14637] veth1_vlan: entered promiscuous mode [ 1344.987759][T14637] veth0_macvtap: entered promiscuous mode [ 1345.031086][T14637] veth1_macvtap: entered promiscuous mode [ 1345.161809][T14637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1345.237025][T14637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1345.303715][ T8071] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.315983][ T8071] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.321464][ T8071] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.321901][ T8071] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1347.654476][T10165] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1347.716792][ T998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1347.716895][ T998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1347.820623][T10165] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1347.820656][T10165] usb 3-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 1347.820679][T10165] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1347.820731][T10165] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1347.871786][T10165] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1347.871820][T10165] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1347.871842][T10165] usb 3-1: Product: syz [ 1347.871865][T10165] usb 3-1: Manufacturer: syz [ 1347.946445][T10165] cdc_wdm 3-1:1.0: skipping garbage [ 1347.946490][T10165] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1348.009105][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1348.009129][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1348.183011][ T8165] usb 3-1: USB disconnect, device number 3 [ 1351.606083][ T5858] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1352.657774][ T5858] usb 10-1: Using ep0 maxpacket: 16 [ 1356.642062][ T5858] usb 10-1: device descriptor read/all, error -71 [ 1362.120796][T14969] netlink: 'syz.2.2238': attribute type 3 has an invalid length. [ 1362.139056][T14969] netlink: 'syz.2.2238': attribute type 10 has an invalid length. [ 1362.191842][T14969] 8021q: adding VLAN 0 to HW filter on device team0 [ 1362.265312][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.265401][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.272776][T14969] bond0: (slave team0): Enslaving as an active interface with an up link [ 1363.189085][T14986] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1367.666583][T15014] hub 8-0:1.0: USB hub found [ 1367.668945][T15014] hub 8-0:1.0: 1 port detected [ 1372.616906][ T8939] block nbd1: Possible stuck request ffff888026b27000: control (read@0,1024B). Runtime 120 seconds [ 1372.616958][ T8939] block nbd1: Possible stuck request ffff888026b271c0: control (read@1024,1024B). Runtime 120 seconds [ 1372.616992][ T8939] block nbd1: Possible stuck request ffff888026b27380: control (read@2048,1024B). Runtime 120 seconds [ 1372.617025][ T8939] block nbd1: Possible stuck request ffff888026b27540: control (read@3072,1024B). Runtime 120 seconds [ 1374.305353][T15046] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1374.614513][ T5797] Bluetooth: hci1: command 0x0406 tx timeout [ 1374.734533][ T5805] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1374.884538][ T5805] usb 2-1: Using ep0 maxpacket: 16 [ 1374.892061][ T5805] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1374.892093][ T5805] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1374.925028][ T5805] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1374.925065][ T5805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1374.925090][ T5805] usb 2-1: Product: syz [ 1374.925106][ T5805] usb 2-1: Manufacturer: syz [ 1374.925122][ T5805] usb 2-1: SerialNumber: syz [ 1375.200724][ T5805] usb 2-1: 0:2 : does not exist [ 1375.454789][T15074] hub 8-0:1.0: USB hub found [ 1375.456380][T15074] hub 8-0:1.0: 1 port detected [ 1375.640648][ T5805] usb 2-1: USB disconnect, device number 37 [ 1376.498896][T15086] input: syz1 as /devices/virtual/input/input27 [ 1380.376197][T15094] overlayfs: failed to clone upperpath [ 1382.975663][ T5797] Bluetooth: hci2: command 0x0406 tx timeout [ 1384.025318][T15113] overlayfs: failed to clone upperpath [ 1386.453940][T15110] Bluetooth: hci3: command 0x0406 tx timeout [ 1393.805390][T15171] overlayfs: failed to resolve './bus': -2 [ 1399.866017][T15192] overlayfs: failed to clone upperpath [ 1400.384435][ T5162] udevd[5162]: worker [13795] /devices/virtual/block/nbd1 is taking a long time [ 1403.206228][ T8939] block nbd1: Possible stuck request ffff888026b27000: control (read@0,1024B). Runtime 150 seconds [ 1403.206281][ T8939] block nbd1: Possible stuck request ffff888026b271c0: control (read@1024,1024B). Runtime 150 seconds [ 1403.206314][ T8939] block nbd1: Possible stuck request ffff888026b27380: control (read@2048,1024B). Runtime 150 seconds [ 1403.206347][ T8939] block nbd1: Possible stuck request ffff888026b27540: control (read@3072,1024B). Runtime 150 seconds [ 1407.840774][T15262] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2303'. [ 1409.011490][ T5797] Bluetooth: hci0: link tx timeout [ 1409.011675][ T5797] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1409.014725][ T5797] Bluetooth: hci0: link tx timeout [ 1409.014742][ T5797] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1409.271269][T15290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2311'. [ 1411.098358][ T5797] Bluetooth: hci0: command 0x0406 tx timeout [ 1415.795499][T15338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2324'. [ 1421.251967][ T5781] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1421.315591][T15380] hub 8-0:1.0: USB hub found [ 1421.316048][T15380] hub 8-0:1.0: 1 port detected [ 1421.438049][ T5781] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1421.438084][ T5781] usb 1-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 1421.438108][ T5781] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1421.438161][ T5781] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 1421.438191][ T5781] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 52, changing to 7 [ 1421.438224][ T5781] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 9272, setting to 1024 [ 1421.445917][ T5781] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1421.446037][ T5781] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1421.446093][ T5781] usb 1-1: Product: syz [ 1421.446155][ T5781] usb 1-1: Manufacturer: syz [ 1421.582888][ T5781] cdc_wdm 1-1:1.0: skipping garbage [ 1421.582920][ T5781] cdc_wdm 1-1:1.0: skipping garbage [ 1421.583036][ T5781] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1421.797396][ T5805] usb 1-1: USB disconnect, device number 3 [ 1425.065385][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 1425.065463][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 1425.434475][ T8165] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1425.604436][ T8165] usb 1-1: Using ep0 maxpacket: 8 [ 1425.646584][ T8165] usb 1-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 1425.646620][ T8165] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1425.646643][ T8165] usb 1-1: Product: syz [ 1425.646659][ T8165] usb 1-1: Manufacturer: syz [ 1425.646675][ T8165] usb 1-1: SerialNumber: syz [ 1425.723613][ T8165] usb 1-1: config 0 descriptor?? [ 1425.745255][ T8165] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 1426.979943][ T8165] gspca_vc032x: reg_r err -71 [ 1426.980151][ T8165] vc032x 1-1:0.0: probe with driver vc032x failed with error -71 [ 1427.011602][ T8165] usb 1-1: USB disconnect, device number 4 [ 1428.900798][T15433] bridge0: port 2(bridge_slave_1) entered disabled state [ 1431.222493][T10165] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1431.380635][T10165] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1431.380668][T10165] usb 10-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 1431.380690][T10165] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1431.380741][T10165] usb 10-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 1431.380770][T10165] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 52, changing to 7 [ 1431.380799][T10165] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 9272, setting to 1024 [ 1431.421360][T10165] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1431.421397][T10165] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1431.421420][T10165] usb 10-1: Product: syz [ 1431.421437][T10165] usb 10-1: Manufacturer: syz [ 1431.514131][T10165] cdc_wdm 10-1:1.0: skipping garbage [ 1431.514156][T10165] cdc_wdm 10-1:1.0: skipping garbage [ 1431.525268][T10165] cdc_wdm 10-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1431.754757][ T5878] usb 10-1: USB disconnect, device number 7 [ 1432.296360][T15460] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input28 [ 1434.053716][ T8939] block nbd1: Possible stuck request ffff888026b27000: control (read@0,1024B). Runtime 180 seconds [ 1434.053769][ T8939] block nbd1: Possible stuck request ffff888026b271c0: control (read@1024,1024B). Runtime 180 seconds [ 1434.053797][ T8939] block nbd1: Possible stuck request ffff888026b27380: control (read@2048,1024B). Runtime 180 seconds [ 1434.053822][ T8939] block nbd1: Possible stuck request ffff888026b27540: control (read@3072,1024B). Runtime 180 seconds [ 1435.065919][T15479] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input29 [ 1436.761938][T15494] bridge0: port 2(bridge_slave_1) entered disabled state [ 1436.763631][T15494] bridge_slave_1: left allmulticast mode [ 1436.763661][T15494] bridge_slave_1: left promiscuous mode [ 1436.763918][T15494] bridge0: port 2(bridge_slave_1) entered disabled state [ 1436.973047][T15501] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2363'. [ 1441.349005][ T5162] udevd[5162]: worker [13795] /devices/virtual/block/nbd1 timeout; kill it [ 1441.349112][ T5162] udevd[5162]: seq 22924 '/devices/virtual/block/nbd1' killed [ 1444.230447][T15552] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2375'. [ 1444.484642][T15555] bridge0: port 2(bridge_slave_1) entered disabled state [ 1444.486114][T15555] bridge_slave_1: left allmulticast mode [ 1444.486143][T15555] bridge_slave_1: left promiscuous mode [ 1444.486400][T15555] bridge0: port 2(bridge_slave_1) entered disabled state [ 1444.700436][T15559] hub 8-0:1.0: USB hub found [ 1444.701358][T15559] hub 8-0:1.0: 1 port detected [ 1448.521423][T15586] hub 8-0:1.0: USB hub found [ 1448.521794][T15586] hub 8-0:1.0: 1 port detected [ 1453.069058][T15613] overlayfs: failed to clone upperpath [ 1453.201741][T15620] bridge0: port 2(bridge_slave_1) entered disabled state [ 1453.202611][T15620] bridge_slave_1: left allmulticast mode [ 1453.202633][T15620] bridge_slave_1: left promiscuous mode [ 1453.202823][T15620] bridge0: port 2(bridge_slave_1) entered disabled state [ 1453.486979][T15626] netlink: 300 bytes leftover after parsing attributes in process `syz.7.2392'. [ 1453.590925][T15629] netlink: 'syz.0.2393': attribute type 3 has an invalid length. [ 1453.590958][T15629] netlink: 'syz.0.2393': attribute type 3 has an invalid length. [ 1453.613865][T15629] netlink: 'syz.0.2393': attribute type 10 has an invalid length. [ 1453.750030][T15629] 8021q: adding VLAN 0 to HW filter on device team0 [ 1453.782382][T15629] bond0: (slave team0): Enslaving as an active interface with an up link [ 1458.910235][ T5799] Bluetooth: hci1: unexpected event for opcode 0x1004 [ 1462.371963][T15690] overlayfs: failed to clone upperpath [ 1462.858640][ T5799] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1462.877029][ T5799] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1462.878473][ T5799] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1462.879718][ T5799] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1462.880517][ T5799] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1462.934113][ T5799] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1462.937247][ T5799] Bluetooth: hci1: Injecting HCI hardware error event [ 1462.940516][ T5802] Bluetooth: hci1: hardware error 0x00 [ 1464.678205][ T8939] block nbd1: Possible stuck request ffff888026b27000: control (read@0,1024B). Runtime 210 seconds [ 1464.678257][ T8939] block nbd1: Possible stuck request ffff888026b271c0: control (read@1024,1024B). Runtime 210 seconds [ 1464.678288][ T8939] block nbd1: Possible stuck request ffff888026b27380: control (read@2048,1024B). Runtime 210 seconds [ 1464.678318][ T8939] block nbd1: Possible stuck request ffff888026b27540: control (read@3072,1024B). Runtime 210 seconds [ 1466.764515][ T5797] Bluetooth: hci4: command tx timeout [ 1467.275602][ T5802] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1469.011892][ T5802] Bluetooth: hci4: command tx timeout [ 1471.484725][ T5802] Bluetooth: hci4: command tx timeout [ 1473.574658][ T5802] Bluetooth: hci4: command tx timeout [ 1474.826259][T15698] chnl_net:caif_netlink_parms(): no params data found [ 1477.159039][T15698] bridge0: port 1(bridge_slave_0) entered blocking state [ 1477.173751][T15698] bridge0: port 1(bridge_slave_0) entered disabled state [ 1477.174058][T15698] bridge_slave_0: entered allmulticast mode [ 1477.202924][T15698] bridge_slave_0: entered promiscuous mode [ 1477.213883][T15698] bridge0: port 2(bridge_slave_1) entered blocking state [ 1477.214114][T15698] bridge0: port 2(bridge_slave_1) entered disabled state [ 1477.231426][T15698] bridge_slave_1: entered allmulticast mode [ 1477.240406][T15698] bridge_slave_1: entered promiscuous mode [ 1477.408232][T15698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1477.412776][T15698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1477.611772][T15698] team0: Port device team_slave_0 added [ 1477.622090][T15698] team0: Port device team_slave_1 added [ 1479.227002][T15698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1479.227023][T15698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1479.227053][T15698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1479.229409][T15698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1479.229424][T15698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1479.229455][T15698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1480.046841][T15698] hsr_slave_0: entered promiscuous mode [ 1480.068287][T15698] hsr_slave_1: entered promiscuous mode [ 1480.070915][T15698] debugfs: 'hsr0' already exists in 'hsr' [ 1480.070944][T15698] Cannot create hsr debugfs directory [ 1483.617129][T15807] ODEBUG: Out of memory. ODEBUG disabled [ 1486.128521][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 1491.056383][ C1] ------------[ cut here ]------------ [ 1491.056399][ C1] 1 [ 1491.056414][ C1] WARNING: kernel/time/timer.c:716 at stub_timer+0xa/0x20, CPU#1: ktimers/1/29 [ 1491.056588][ C1] Modules linked in: [ 1491.056632][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1491.056665][ C1] Tainted: [L]=SOFTLOCKUP [ 1491.056673][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1491.056692][ C1] RIP: 0010:stub_timer+0xa/0x20 [ 1491.056717][ C1] Code: 0f 94 c0 5b 41 5e e9 55 ed 74 09 cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa e8 f7 bc 13 00 90 <0f> 0b 90 c3 cc cc cc cc cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 [ 1491.056737][ C1] RSP: 0018:ffffc90000a3fa38 EFLAGS: 00010246 [ 1491.056757][ C1] RAX: ffffffff81b095e9 RBX: 0000000080000000 RCX: ffff88801d2bbc80 [ 1491.056775][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 1491.056788][ C1] RBP: ffffc90000a3fb30 R08: 0000000000000000 R09: 0000000000000100 [ 1491.056803][ C1] R10: dffffc0000000000 R11: ffffffff81b095e0 R12: 0000000000000001 [ 1491.056818][ C1] R13: 000000010001d040 R14: 1ffff92000147f4c R15: ffff88804c65f148 [ 1491.056835][ C1] FS: 0000000000000000(0000) GS:ffff888126443000(0000) knlGS:0000000000000000 [ 1491.056854][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1491.056870][ C1] CR2: 00007fefcb135800 CR3: 000000003a736000 CR4: 00000000003526f0 [ 1491.056889][ C1] Call Trace: [ 1491.056903][ C1] [ 1491.056913][ C1] call_timer_fn+0x192/0x640 [ 1491.056939][ C1] ? __pfx_stub_timer+0x10/0x10 [ 1491.056959][ C1] ? call_timer_fn+0xd4/0x640 [ 1491.056981][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1491.057002][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1491.057068][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1491.057200][ C1] ? __pfx_stub_timer+0x10/0x10 [ 1491.057224][ C1] __run_timer_base+0x6a3/0x9f0 [ 1491.057278][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1491.057333][ C1] run_timer_softirq+0xb7/0x170 [ 1491.057368][ C1] handle_softirqs+0x1de/0x6f0 [ 1491.057429][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 1491.057472][ C1] run_ktimerd+0x69/0x100 [ 1491.057508][ C1] smpboot_thread_fn+0x541/0xa50 [ 1491.057546][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 1491.057593][ C1] kthread+0x388/0x470 [ 1491.057618][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1491.057652][ C1] ? __pfx_kthread+0x10/0x10 [ 1491.057679][ C1] ret_from_fork+0x51e/0xb90 [ 1491.057722][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1491.057754][ C1] ? __switch_to+0xc7d/0x1450 [ 1491.057812][ C1] ? __pfx_kthread+0x10/0x10 [ 1491.057838][ C1] ret_from_fork_asm+0x1a/0x30 [ 1491.057894][ C1] [ 1491.057914][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1491.057933][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1491.057965][ C1] Tainted: [L]=SOFTLOCKUP [ 1491.057973][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1491.057987][ C1] Call Trace: [ 1491.057996][ C1] [ 1491.058006][ C1] vpanic+0x56c/0xa60 [ 1491.058047][ C1] ? __pfx__printk+0x10/0x10 [ 1491.058073][ C1] ? __pfx_vpanic+0x10/0x10 [ 1491.058106][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 1491.058158][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 1491.058206][ C1] panic+0xc5/0xd0 [ 1491.058240][ C1] ? __pfx_panic+0x10/0x10 [ 1491.058285][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 1491.058314][ C1] __warn+0x315/0x4f0 [ 1491.058346][ C1] ? stub_timer+0xa/0x20 [ 1491.058367][ C1] ? stub_timer+0xa/0x20 [ 1491.058389][ C1] __report_bug+0x29a/0x540 [ 1491.058480][ C1] ? stub_timer+0xa/0x20 [ 1491.058501][ C1] ? __pfx___report_bug+0x10/0x10 [ 1491.058528][ C1] ? add_lock_to_list+0xc7/0x100 [ 1491.058557][ C1] ? lockdep_unlock+0x5d/0xd0 [ 1491.058590][ C1] ? __lock_acquire+0x146e/0x2cf0 [ 1491.058624][ C1] ? stub_timer+0xa/0x20 [ 1491.058645][ C1] report_bug+0x16a/0x220 [ 1491.058674][ C1] ? stub_timer+0xa/0x20 [ 1491.058693][ C1] ? stub_timer+0xc/0x20 [ 1491.058712][ C1] handle_bug+0x98/0x200 [ 1491.058774][ C1] exc_invalid_op+0x1a/0x50 [ 1491.058809][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1491.058847][ C1] RIP: 0010:stub_timer+0xa/0x20 [ 1491.058869][ C1] Code: 0f 94 c0 5b 41 5e e9 55 ed 74 09 cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa e8 f7 bc 13 00 90 <0f> 0b 90 c3 cc cc cc cc cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 [ 1491.058887][ C1] RSP: 0018:ffffc90000a3fa38 EFLAGS: 00010246 [ 1491.058906][ C1] RAX: ffffffff81b095e9 RBX: 0000000080000000 RCX: ffff88801d2bbc80 [ 1491.058923][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 1491.058938][ C1] RBP: ffffc90000a3fb30 R08: 0000000000000000 R09: 0000000000000100 [ 1491.058954][ C1] R10: dffffc0000000000 R11: ffffffff81b095e0 R12: 0000000000000001 [ 1491.058970][ C1] R13: 000000010001d040 R14: 1ffff92000147f4c R15: ffff88804c65f148 [ 1491.058992][ C1] ? __pfx_stub_timer+0x10/0x10 [ 1491.059015][ C1] ? stub_timer+0x9/0x20 [ 1491.059042][ C1] ? stub_timer+0x9/0x20 [ 1491.059060][ C1] call_timer_fn+0x192/0x640 [ 1491.059083][ C1] ? __pfx_stub_timer+0x10/0x10 [ 1491.059102][ C1] ? call_timer_fn+0xd4/0x640 [ 1491.059124][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1491.059145][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1491.059195][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1491.059225][ C1] ? __pfx_stub_timer+0x10/0x10 [ 1491.059249][ C1] __run_timer_base+0x6a3/0x9f0 [ 1491.059301][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1491.059356][ C1] run_timer_softirq+0xb7/0x170 [ 1491.059391][ C1] handle_softirqs+0x1de/0x6f0 [ 1491.059436][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 1491.059470][ C1] run_ktimerd+0x69/0x100 [ 1491.059506][ C1] smpboot_thread_fn+0x541/0xa50 [ 1491.059544][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 1491.059591][ C1] kthread+0x388/0x470 [ 1491.059616][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1491.059650][ C1] ? __pfx_kthread+0x10/0x10 [ 1491.059676][ C1] ret_from_fork+0x51e/0xb90 [ 1491.059713][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1491.059745][ C1] ? __switch_to+0xc7d/0x1450 [ 1491.059778][ C1] ? __pfx_kthread+0x10/0x10 [ 1491.059804][ C1] ret_from_fork_asm+0x1a/0x30 [ 1491.059846][ C1] [ 1491.060451][ C1] Kernel Offset: disabled