last executing test programs: 23m29.52068584s ago: executing program 2 (id=64): ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000180)={'pcl812\x00', [0x8001, 0x4, 0x1, 0x0, 0x0, 0xcc7, 0x8, 0x7, 0x1, 0xff, 0x2, 0x1, 0x8, 0x2, 0x6, 0x9, 0x1, 0x9, 0x43, 0x40000003, 0x89, 0x9, 0xf27, 0x6, 0x800b, 0x8, 0x5, 0x6, 0x8, 0x10000, 0xfffffff4]}) 23m27.898441634s ago: executing program 2 (id=69): io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffe, 0xc}) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(r2, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) 23m26.743892327s ago: executing program 2 (id=70): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000700)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000580)={0x40, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000002380)={0x34, &(0x7f0000002180)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000008c0)={0x40, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23m22.56158112s ago: executing program 2 (id=76): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000700)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000200)={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x40, 0xb, 0x2, '\'x'}, &(0x7f0000000440)={0x40, 0xf, 0x2, 0x5}, 0x0, &(0x7f00000004c0)={0x40, 0x17, 0x6}, &(0x7f0000000500)={0x40, 0x19, 0x2, "a323"}, &(0x7f0000000540)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000580)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000005c0)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000600)={0x40, 0x21, 0x1, 0x2}}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000000c0)={0x40, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000d00)={0x84, &(0x7f0000000740)={0x0, 0x17, 0x2, "2582"}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x40, 0x9, 0x1}, &(0x7f0000000940)={0x40, 0xb, 0x2, "3b8b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23m19.665044536s ago: executing program 2 (id=82): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$sock_bt_hci(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000600), 0xfec8) recvmmsg(r4, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}, {&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000400)=""/41, 0x29}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0xcb, 0x0) 23m18.099626835s ago: executing program 2 (id=83): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) syz_usb_disconnect(r3) readv(r4, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000140)=""/41, 0x29}], 0x2) setsockopt$inet6_buf(r2, 0x29, 0x20, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) sched_getattr(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0xfe33) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000480)=""/134, 0x86}, {&(0x7f0000000540)=""/155, 0x9b}, {0x0}, {&(0x7f0000000700)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001800)=""/4096, 0x1000}], 0x6}, 0x0) syz_open_dev$loop(0x0, 0x9d, 0x8902) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r5, 0x1000000, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') read$FUSE(r6, 0x0, 0x0) setns(r6, 0x80) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x4e22, @local}}}, 0x84) 23m5.991599899s ago: executing program 32 (id=78): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) syz_usb_disconnect(r3) readv(r4, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000140)=""/41, 0x29}], 0x2) setsockopt$inet6_buf(r2, 0x29, 0x20, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) sched_getattr(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0xfe33) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000480)=""/134, 0x86}, {&(0x7f0000000540)=""/155, 0x9b}, {0x0}, {&(0x7f0000000700)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001800)=""/4096, 0x1000}], 0x6}, 0x0) syz_open_dev$loop(0x0, 0x9d, 0x8902) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r5, 0x1000000, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') read$FUSE(r6, 0x0, 0x0) setns(r6, 0x80) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x4e22, @local}}}, 0x84) 23m2.650412654s ago: executing program 33 (id=83): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) syz_usb_disconnect(r3) readv(r4, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000140)=""/41, 0x29}], 0x2) setsockopt$inet6_buf(r2, 0x29, 0x20, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) sched_getattr(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0xfe33) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000480)=""/134, 0x86}, {&(0x7f0000000540)=""/155, 0x9b}, {0x0}, {&(0x7f0000000700)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001800)=""/4096, 0x1000}], 0x6}, 0x0) syz_open_dev$loop(0x0, 0x9d, 0x8902) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r5, 0x1000000, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') read$FUSE(r6, 0x0, 0x0) setns(r6, 0x80) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x4e22, @local}}}, 0x84) 18m59.961644569s ago: executing program 1 (id=1002): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2208010, 0x0) lseek(0xffffffffffffffff, 0x10000000005, 0x1) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x0) write$sequencer(0xffffffffffffffff, 0x0, 0x10) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)={0x24, 0x7, 0x6, 0x100, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x90ed}]}, 0x24}}, 0x40000) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x409}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWTABLE={0xec, 0x0, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xbe, 0x6, "390bc62900d076497d96dd762b4f980f66e3a1e0522fb35577593999aba98090d7bff0302901c07a183fa49950b8c8552923ee8a9900074dc0ed2dd0df43be59dc1b25a4fa446cdb85cddd3bd39cce7e8a625b4a4e340d1acf28ff249b86093312f4402c75e0752fd547e02cbdedf1a46e0329f398c298660defc22c9979f35a401a192da53232916bcf8f005603cd99975b2408daa7cf864e19bbc8becba09eec8f10f1685f998af6f0a71fc350971b51ffedd72bf8cfc7de61"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x140}, 0x1, 0x0, 0x0, 0x20002082}, 0x4008040) 18m58.668514693s ago: executing program 1 (id=1003): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x30, r2, 0x1, 0x0, 0x25dfdbfb, {0x3}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'sit0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}]}, 0x30}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002800200001800d0000000c000280080004000200"/36], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000280)={0x9, &(0x7f0000000200)=[{0x6, 0x1, 0x3, 0x6}, {0x5, 0xfc, 0xb, 0x1}, {0xfff8, 0x0, 0x43, 0x4}, {0x0, 0x2, 0x4, 0x1ff}, {0xe3, 0x8, 0x76, 0x55ef}, {0x8000, 0xf4, 0x7, 0x8}, {0x5, 0x1, 0x6, 0x1}, {0x6, 0x38, 0x8, 0xbf}, {0xad, 0x5, 0x4f, 0xb492}]}) syz_emit_ethernet(0x72, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x33, 0x0, @private1, @mcast1={0xff, 0x0, '\x00', 0x0}, [@hopopts={0x33}]}}}}}}}, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000140), 0x40000000, 0x50000) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000700)={0x1, 0x5, "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"}) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f00000005c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0xfffffffc, 0x0, 0x30, 0x700, @ib={0x1b, 0x8, 0x5, {}, 0xf, 0x2, 0x4}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x80000001}}}, 0x118) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0x4}, {0xe, 0xf}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xd}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) 18m56.23194427s ago: executing program 1 (id=1011): getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$sock_bt_hci(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000600), 0xfec8) recvmmsg(r4, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}, {&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000400)=""/41, 0x29}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840)}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 18m55.004013484s ago: executing program 1 (id=1012): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="200e06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000240)={&(0x7f0000000500)=[{0x6, 0x801, 0x0, 0x0}], 0x1}) 18m51.331259472s ago: executing program 1 (id=1016): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) unshare(0x80) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/time_for_children\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x1a000}}, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0x0, 0x9}, 0x0, [0x0, 0x0, 0x200, 0x0, 0x4, 0x7ff, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0xffffffff, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x8, 0xb16, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xd, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x5795, 0xffffffff, 0xfffffffe, 0x0, 0xff, 0xfffffffd, 0xfffffffd, 0x4ec5, 0xfffffffa, 0x0, 0x80000040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0xffffffff], [0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xddc, 0x0, 0x0, 0xfffffffc, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x7, 0x4], [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc045, 0x0, 0x16, 0x0, 0x4, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x0, 0x0, 0xffffffff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 18m48.858727687s ago: executing program 1 (id=1024): syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') epoll_create(0x7) lseek(0xffffffffffffffff, 0x0, 0x1) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) unshare(0x20000400) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023892) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) socket(0x10, 0x3, 0x0) 18m33.251464645s ago: executing program 34 (id=1024): syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') epoll_create(0x7) lseek(0xffffffffffffffff, 0x0, 0x1) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) unshare(0x20000400) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023892) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) socket(0x10, 0x3, 0x0) 17m37.906248078s ago: executing program 6 (id=1117): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) unshare(0x80) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/time_for_children\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x1a000}}, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0x0, 0x9}, 0x0, [0x0, 0x0, 0x200, 0x0, 0x4, 0x7ff, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0xffffffff, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x8, 0xb16, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xd, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x5795, 0xffffffff, 0xfffffffe, 0x0, 0xff, 0xfffffffd, 0xfffffffd, 0x4ec5, 0xfffffffa, 0x0, 0x80000040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0xffffffff], [0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xddc, 0x0, 0x0, 0xfffffffc, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x7, 0x4], [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc045, 0x0, 0x16, 0x0, 0x4, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x0, 0x0, 0xffffffff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, 0x0, 0x0) 17m36.046025941s ago: executing program 6 (id=1118): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc000) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f0000000680)={&(0x7f0000000340)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000080)="d4", 0x1}], 0x1}, 0x8001) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r2, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001ec0)=""/4096, 0x1000}], 0x1}, 0x10000) 17m35.678323412s ago: executing program 4 (id=1120): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000250091"], 0xfe33) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') pread64(r3, &(0x7f00000000c0)=""/144, 0x90, 0x2f) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r4, &(0x7f00000044c0), 0x4000000000001c0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0) recvfrom(r5, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) io_setup(0x6, &(0x7f0000000540)) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) 17m34.534189105s ago: executing program 6 (id=1126): syz_usb_connect(0x2, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d000905"], 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) close(0x3) getdents64(r0, &(0x7f0000000300)=""/205, 0xcd) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}}], {0x14}}, 0x5c}}, 0x0) write$P9_RVERSION(r0, 0x0, 0xfffffcd9) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) 17m29.53074811s ago: executing program 6 (id=1131): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000740)={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback}, 0xc) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x40040, 0x0) lseek(r1, 0xd587, 0x3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xffffffffffffffbd, 0x0, 0x2}, 0x8000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0xc, 0xfffffffffffffffd, 0xfffffffffffff21d}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003340)=[{{0x0, 0xfffffffffffffed1, &(0x7f0000000280)=[{&(0x7f0000000600)='4', 0x1}], 0x1, &(0x7f00000002c0)=[@rights={{0x10}}], 0x10, 0x40}}], 0x1, 0x0) close(0x3) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x10003, 0xcb, 0x12d5c, 0x12d5c}}, 0x44) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000040)={'ipvs\x00'}, 0x0) 17m29.398667664s ago: executing program 4 (id=1132): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000740)={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback}, 0xc) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x40040, 0x0) lseek(r1, 0xd587, 0x3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xffffffffffffffbd, 0x0, 0x2}, 0x8000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0xc, 0xfffffffffffffffd, 0xfffffffffffff21d}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003340)=[{{0x0, 0xfffffffffffffed1, &(0x7f0000000280)=[{&(0x7f0000000600)='4', 0x1}], 0x1, &(0x7f00000002c0)=[@rights={{0x10}}], 0x10, 0x40}}], 0x1, 0x0) close(0x3) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x10003, 0xcb, 0x12d5c, 0x12d5c}}, 0x44) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000040)={'ipvs\x00'}, 0x0) 17m26.150905617s ago: executing program 4 (id=1137): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002800200001800d0000000c000280080004000200"/36], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000280)={0x9, &(0x7f0000000200)=[{0x6, 0x1, 0x3, 0x6}, {0x5, 0xfc, 0xb, 0x1}, {0xfff8, 0x0, 0x43, 0x4}, {0x0, 0x2, 0x4, 0x1ff}, {0xe3, 0x8, 0x76, 0x55ef}, {0x8000, 0xf4, 0x7, 0x8}, {0x5, 0x1, 0x6, 0x1}, {0x6, 0x38, 0x8, 0xbf}, {0xad, 0x5, 0x4f, 0xb492}]}) syz_emit_ethernet(0x72, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x33, 0x0, @private1, @mcast1={0xff, 0x0, '\x00', 0x0}, [@hopopts={0x33}]}}}}}}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000140), 0x40000000, 0x50000) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000700)={0x1, 0x5, "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"}) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000005c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0xfffffffc, 0x0, 0x30, 0x700, @ib={0x1b, 0x8, 0x5, {}, 0xf, 0x2, 0x4}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x80000001}}}, 0x118) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0x4}, {0xe, 0xf}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xd}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) 17m25.138988677s ago: executing program 6 (id=1138): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 17m24.918295348s ago: executing program 6 (id=1140): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x5, 0x4}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r4, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r10, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 17m24.722535765s ago: executing program 4 (id=1141): syz_usb_connect(0x2, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090536"], 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) close(0x3) getdents64(r0, &(0x7f0000000300)=""/205, 0xcd) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}}], {0x14}}, 0x5c}}, 0x0) write$P9_RVERSION(r0, 0x0, 0xfffffcd9) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) 17m20.588020275s ago: executing program 4 (id=1145): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd0009058202"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x12, &(0x7f0000000040)=ANY=[@ANYBLOB="a2faff4df3b102000ee0b3d41b1b", @ANYRES32=r0]) 17m18.771467096s ago: executing program 4 (id=1147): memfd_create(&(0x7f0000000000)='-&:{-\xaa]{\x00', 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8054) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8916, &(0x7f0000000040)={'veth1_macvtap\x00', @random="0200ac7f7f00"}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040), 0xffffffffffffffb3) sendmsg$inet6(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x24}}, 0x20000000) 17m9.803564667s ago: executing program 35 (id=1140): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x5, 0x4}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r4, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r10, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 17m3.553750927s ago: executing program 36 (id=1147): memfd_create(&(0x7f0000000000)='-&:{-\xaa]{\x00', 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8054) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8916, &(0x7f0000000040)={'veth1_macvtap\x00', @random="0200ac7f7f00"}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040), 0xffffffffffffffb3) sendmsg$inet6(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x24}}, 0x20000000) 12m33.698173181s ago: executing program 9 (id=2549): setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000740)={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback}, 0xc) openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x40040, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0xc, 0xfffffffffffffffd, 0xfffffffffffff21d}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003340)=[{{0x0, 0xfffffffffffffed1, &(0x7f0000000280)=[{&(0x7f0000000600)='4', 0x1}], 0x1, &(0x7f00000002c0)=[@rights={{0x10}}], 0x10, 0x40}}], 0x1, 0x0) close(0x3) 12m33.615225295s ago: executing program 9 (id=2550): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7) r2 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setsig(r2, 0xa, 0x21) fcntl$setlease(r2, 0x400, 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 12m30.968584s ago: executing program 9 (id=2553): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 12m27.458343452s ago: executing program 9 (id=2560): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x94}, 0x20000081) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x2042, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x81c0, 0x8103) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x400) 12m25.744395687s ago: executing program 9 (id=2562): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x3fffff) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000004c0)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) 12m18.452777979s ago: executing program 9 (id=2569): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40) r0 = socket$inet6(0xa, 0x3, 0x1) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000080)='/proc/sysvipc/msg\x00', 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000ffffffff0600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff0f000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000"], 0x138}, 0x1, 0x0, 0x0, 0x20008011}, 0x0) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @empty}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000640)={'ip6tnl0\x00', r4, 0x29, 0x2, 0x81, 0xcf57, 0xff00, @ipv4={'\x00', '\xff\xff', @remote}, @loopback={0x300}, 0x8000, 0x8000, 0x4, 0x10000300}}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r1) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendto$inet(r5, 0x0, 0x0, 0x80b, 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x26044050}, 0x20048000) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16df}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x30}]]}, 0x5c}, 0x1, 0x0, 0x0, 0xe02449926192c2a0}, 0x58041) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x243, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x83, 0xc0, 0xda, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x2, 0x4, {0x9, 0x21, 0x5, 0x7, 0x1, {0x22, 0xc55}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x7c, 0x2, 0x21}}}}}]}}]}}, 0x0) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) 12m1.342947819s ago: executing program 37 (id=2569): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40) r0 = socket$inet6(0xa, 0x3, 0x1) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000080)='/proc/sysvipc/msg\x00', 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000ffffffff0600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff0f000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000"], 0x138}, 0x1, 0x0, 0x0, 0x20008011}, 0x0) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @empty}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000640)={'ip6tnl0\x00', r4, 0x29, 0x2, 0x81, 0xcf57, 0xff00, @ipv4={'\x00', '\xff\xff', @remote}, @loopback={0x300}, 0x8000, 0x8000, 0x4, 0x10000300}}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r1) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendto$inet(r5, 0x0, 0x0, 0x80b, 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x26044050}, 0x20048000) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16df}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x30}]]}, 0x5c}, 0x1, 0x0, 0x0, 0xe02449926192c2a0}, 0x58041) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x243, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x83, 0xc0, 0xda, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x2, 0x4, {0x9, 0x21, 0x5, 0x7, 0x1, {0x22, 0xc55}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x7c, 0x2, 0x21}}}}}]}}]}}, 0x0) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) 1m20.886022136s ago: executing program 0 (id=4613): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="30000000120001000000000000000000100000000c0035000000000000000000080003"], 0x30}], 0x1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x4}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7, 0x84}}}, 0x28}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r2, 0xaea2, 0x200) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x7, 0xdb, 0xd}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m20.413323764s ago: executing program 0 (id=4617): r0 = fanotify_init(0x8, 0x8000) fanotify_mark(r0, 0x1, 0x8001011, 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00') 1m20.182941971s ago: executing program 0 (id=4620): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000013000500020000000200000007000000", @ANYRES32=r1, @ANYBLOB="004002000000000014001a80100005800c000280080001"], 0x34}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) 1m20.078692325s ago: executing program 0 (id=4623): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\bO9\x1b\x11\rv0<\xe5\xe2\xad\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9ds\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8ex\x00\x00\x00\xc7%\xb0\x0f(Ff\xb0\x9f\xab\xb0\xae#\xbdd\xaa\f\xd2\xfb t?\xc3\x1f\xb1\xcf\x1e\xac\xa8\xebC\xab\xc3v\xd6\xc1\x0f9$\x95\xd3e(E1m\a\xfd\x9d\xb39\xfd\xfdp\xcf\xc5s\x9b2\x00\xcbnF\xceg\xbdd\x9br\x95e\x9d,\xc4fP-\xae\\{\xf9\x01\x10\t\x00\v\xcb\xfcv\xa6\xfd\x19\xabI', 0x7) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x9163, 0x8010002}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x64) 1m19.887126804s ago: executing program 0 (id=4627): modify_ldt$write(0x1, &(0x7f0000000280)={0x30f, 0x20000000, 0x400, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) modify_ldt$read(0x0, &(0x7f0000002380)=""/227, 0xe3) 1m19.79342809s ago: executing program 0 (id=4630): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) syz_usb_connect(0x6, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00\n'], 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, 0x0) 1m3.464521525s ago: executing program 38 (id=4630): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) syz_usb_connect(0x6, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00\n'], 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, 0x0) 43.502144898s ago: executing program 3 (id=4730): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f00000002c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) keyctl$chown(0x4, r0, 0xee01, 0xee00) keyctl$setperm(0x5, r0, 0x21081c22) keyctl$get_security(0x11, r0, 0x0, 0x0) 43.261563621s ago: executing program 3 (id=4732): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001900150000000000030000000a000000000200000000000020000980080000", @ANYRES16], 0x3c}], 0x1, 0x0, 0x0, 0x40080}, 0x0) 43.110692934s ago: executing program 3 (id=4733): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001200)=0x8a4, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x8005}]}, 0x10) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 43.11050033s ago: executing program 5 (id=4734): r0 = socket$tipc(0x1e, 0x2, 0x0) ppoll(&(0x7f0000000880)=[{r0, 0xbf833b97d9fde808}], 0x1, &(0x7f0000000940), 0x0, 0x0) 43.014610433s ago: executing program 5 (id=4736): unshare(0x22020600) syz_clone3(0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, r2, 0x25, 0x4, @val=@tcx={@void, @value=r0}}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000400)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x8, 0x28, 0x66, 0x0, 0x9, 0x6, 0x0, @remote, @private=0xa010101}, {{0x4e23, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x6, 0x0, 0xfffe}}}}}}, 0x0) 42.045993595s ago: executing program 3 (id=4738): socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20048000) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @random="f368656e065b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x0, @dev, @dev={0xac, 0x14, 0x14, 0xf}}}}}}}, 0x0) 41.898716743s ago: executing program 3 (id=4739): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) bind$bt_l2cap(r1, &(0x7f0000000080), 0xe) 41.82720121s ago: executing program 3 (id=4740): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0xfffffffc) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0xfffffffffffffc04, 0x0, 0x1, r2, 0x11}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x2, r2, 0x1}) 39.521550296s ago: executing program 5 (id=4746): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_emit_ethernet(0xd81, 0x0, 0x0) r1 = fsopen(0x0, 0x0) fsmount(r1, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x706, @none, 0x8, 0x1}, 0xe) 39.254625346s ago: executing program 5 (id=4748): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0xfffc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x400}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008894}, 0x20004890) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000906010200000000000000000500000205000100070000002c0007800c00148008000140e00000020c0001800800014064010100060004404e20000005000700880000000900020073797a31"], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 37.810562915s ago: executing program 5 (id=4749): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000006b40), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000006b80)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x76fd01de, 0x3a, '\x00', 0x3a, '\xaa\xaa\xaa\xaa\xaa', 0x3a, './file0'}, 0x2d) 37.739043803s ago: executing program 5 (id=4750): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 27.410185453s ago: executing program 8 (id=4765): fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd0, 0xdb, 0x9e, 0x20, 0xbfbc, 0x139d, 0xc648, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xeb, 0x2, 0x0, 0x2, 0x9, 0x1b}}]}}]}}, 0x0) 25.994684389s ago: executing program 8 (id=4766): r0 = epoll_create1(0x80000) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x8}) epoll_wait(r0, &(0x7f00000000c0)=[{}, {}, {}, {}], 0x4, 0x9) 25.979950006s ago: executing program 8 (id=4767): listen(0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x8) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000000080)=0x12, 0x4) 25.726149381s ago: executing program 8 (id=4768): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0xfffc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x400}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008894}, 0x20004890) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000906010200000000000000000500000205000100070000002c0007800c00148008000140e00000020c0001800800014064010100060004404e20000005000700880000000900020073797a31"], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 25.670411281s ago: executing program 39 (id=4740): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0xfffffffc) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0xfffffffffffffc04, 0x0, 0x1, r2, 0x11}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x2, r2, 0x1}) 25.615417645s ago: executing program 8 (id=4770): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x34, 0x1a, 0x1, 0x70bd24, 0x0, {0x2, 0x10, 0x14, 0x0, 0xff, 0x0, 0xfd, 0x7, 0x200}, [@RTA_IIF={0x8, 0x3, r2}, @RTA_DST={0x8, 0x1, @private=0xa010102}, @RTA_SRC={0x8, 0x2, @local}]}, 0x34}}, 0xea5bc50b6199d7fe) 25.562146105s ago: executing program 8 (id=4771): socket(0x1, 0x803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f0000000180)={0x0, &(0x7f0000000080)=[@cpuid={0x64, 0x18, {0xb, 0x1}}], 0x18}) ioctl$KVM_RUN(r6, 0xae80, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) waitid(0x0, r7, 0x0, 0x41000004, 0x0) 21.290419873s ago: executing program 40 (id=4750): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19.126885753s ago: executing program 7 (id=4776): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {0x2, 0x3ff, 0x10, 0x4}, 0x1f, [0x9, 0x5, 0x6, 0xa, 0x3, 0x1, 0x6, 0x81, 0x7, 0x72cb, 0xfffffff7, 0x2, 0x4, 0x5, 0xfffffffd, 0x81, 0x7, 0x1, 0x3, 0x7, 0x8001, 0x9, 0xfffff9fb, 0x194, 0x5, 0x80000000, 0x4, 0x6, 0x8, 0x10, 0x98c4, 0x7ff, 0x6, 0x4, 0x4, 0xfff, 0x8, 0xc16, 0x46, 0x82, 0x0, 0x8, 0x0, 0x8, 0x1bdf, 0x7, 0xd00, 0xfd, 0x4, 0x9, 0x1, 0xc, 0x0, 0x8, 0xc4192f8, 0xffff, 0x4bb9, 0x10001, 0x4, 0x4, 0xa, 0x6, 0x58e0469b, 0x7], [0x10000, 0x80, 0x7, 0x401, 0x4, 0x4, 0x5, 0x5, 0x1000, 0x12b09fba, 0xffffffff, 0x10000, 0x9, 0x3, 0x0, 0x1, 0x8, 0x7, 0x8, 0x6, 0x6, 0x2, 0x0, 0x8, 0xfffffc00, 0x1, 0x1, 0x5, 0x1, 0x445, 0x6, 0x3fffc00, 0x3, 0xffffffff, 0x1b, 0x3, 0x4, 0x9ca, 0xc, 0x1ff, 0x1, 0x8186, 0x4, 0x2, 0x5, 0xa3ed, 0xff, 0x3, 0x4, 0x3, 0xfffffffc, 0x0, 0x80000000, 0x8001, 0x8, 0x8, 0x9, 0x400, 0x7, 0xf, 0x2, 0x7, 0xc, 0x4], [0x2, 0x6, 0xf, 0xf, 0x2, 0x21, 0xb, 0x1, 0x2, 0xe, 0x2, 0x90000, 0x3c5, 0x2, 0xffff0001, 0x80, 0x1, 0x9, 0x8, 0x100, 0x200, 0x4, 0x59b, 0x5, 0x3, 0x7, 0x4, 0x7f, 0x8, 0x8000, 0x9, 0x9, 0x5, 0x2, 0x3, 0x3, 0x8, 0x1000, 0x8, 0x2, 0x5, 0x5, 0x44cf, 0x200, 0x9, 0x4, 0x7ff, 0x7, 0x8, 0xfffffff8, 0xf5, 0x6, 0x3ff, 0x8, 0xb, 0xff, 0x5, 0x1, 0x5, 0x8001, 0xff, 0x6, 0xdd2, 0x2], [0xff, 0x8, 0x3, 0x401, 0x80, 0xbf9, 0x7, 0x3a, 0xff, 0x0, 0x27, 0xfffffff9, 0x8001, 0x2, 0x7f, 0x7a7, 0x10, 0x5, 0xfffffe01, 0x2, 0x4, 0xff, 0x8, 0x6, 0xcb, 0x9b2, 0x101, 0xffff, 0x8, 0x1, 0x0, 0x8, 0x80000001, 0x9, 0x7, 0x9840, 0x0, 0x0, 0x5, 0x2, 0x8, 0x9, 0xefe, 0x31d1, 0x6, 0x104, 0x8426, 0x1, 0x79d, 0x7, 0x9, 0x3, 0x1, 0x7fff, 0x9, 0x7, 0x2, 0x2, 0x7ff, 0x3, 0x4, 0x12, 0x358, 0x7]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 18.734609788s ago: executing program 7 (id=4777): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x405, 0x0, 0xfffffffc, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x1}]}}}]}, 0x48}}, 0x0) 17.752369596s ago: executing program 7 (id=4778): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000906010200000000000000000500000205000100070000002c0007800c00148008000140e00000020c0001800800014064010100060004404e20000005000700880000000900020073797a31"], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 17.632879228s ago: executing program 7 (id=4779): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000000)='!,\x00') mremap(&(0x7f0000ff1000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffb000/0x4000)=nil) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f00000000c0)='-.\x00') 16.273745724s ago: executing program 7 (id=4780): mkdir(&(0x7f0000000640)='./file0\x00', 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 16.22439548s ago: executing program 7 (id=4781): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup2(r0, r0) faccessat2(r1, &(0x7f0000000880)='\x00', 0x1, 0x1100) pipe2$9p(&(0x7f00000001c0), 0x80800) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYRES8=r3], 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 8.492280742s ago: executing program 41 (id=4771): socket(0x1, 0x803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f0000000180)={0x0, &(0x7f0000000080)=[@cpuid={0x64, 0x18, {0xb, 0x1}}], 0x18}) ioctl$KVM_RUN(r6, 0xae80, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) waitid(0x0, r7, 0x0, 0x41000004, 0x0) 0s ago: executing program 42 (id=4781): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup2(r0, r0) faccessat2(r1, &(0x7f0000000880)='\x00', 0x1, 0x1100) pipe2$9p(&(0x7f00000001c0), 0x80800) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYRES8=r3], 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) kernel console output (not intermixed with test programs): 22 [ 1168.958110][ T36] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1169.118460][ T36] usb 4-1: Using ep0 maxpacket: 16 [ 1169.119347][ T36] usb 4-1: no configurations [ 1169.119366][ T36] usb 4-1: can't read configurations, error -22 [ 1169.119889][ T36] usb usb4-port1: attempt power cycle [ 1169.481938][ T36] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1169.504178][ T36] usb 4-1: Using ep0 maxpacket: 16 [ 1169.505075][ T36] usb 4-1: no configurations [ 1169.505092][ T36] usb 4-1: can't read configurations, error -22 [ 1169.636870][T18116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3939'. [ 1169.636904][T18116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3939'. [ 1169.642474][ T36] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1169.669286][ T36] usb 4-1: Using ep0 maxpacket: 16 [ 1169.669905][ T36] usb 4-1: no configurations [ 1169.669921][ T36] usb 4-1: can't read configurations, error -22 [ 1169.670429][ T36] usb usb4-port1: unable to enumerate USB device [ 1170.132811][ T44] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.279410][T18126] netlink: 64 bytes leftover after parsing attributes in process `syz.8.3942'. [ 1170.387396][T18134] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3943'. [ 1170.490524][ T44] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.540491][T18075] Bluetooth: hci3: command tx timeout [ 1171.003124][ T44] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1172.764230][T18075] Bluetooth: hci3: command tx timeout [ 1172.787786][ T44] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1173.033190][T18066] chnl_net:caif_netlink_parms(): no params data found [ 1173.062432][T18160] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3952'. [ 1173.062465][T18160] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3952'. [ 1173.582524][T18066] bridge0: port 1(bridge_slave_0) entered blocking state [ 1173.582777][T18066] bridge0: port 1(bridge_slave_0) entered disabled state [ 1173.582963][T18066] bridge_slave_0: entered allmulticast mode [ 1173.608698][T18066] bridge_slave_0: entered promiscuous mode [ 1173.650768][T18066] bridge0: port 2(bridge_slave_1) entered blocking state [ 1173.651042][T18066] bridge0: port 2(bridge_slave_1) entered disabled state [ 1173.665434][T18066] bridge_slave_1: entered allmulticast mode [ 1173.669124][T18066] bridge_slave_1: entered promiscuous mode [ 1173.878945][T18183] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3956'. [ 1174.730970][ T5934] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 1174.904912][ T5934] usb 9-1: Using ep0 maxpacket: 16 [ 1174.905733][ T5934] usb 9-1: no configurations [ 1174.905749][ T5934] usb 9-1: can't read configurations, error -22 [ 1174.938592][T18066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1174.957613][T18066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1174.989143][T18075] Bluetooth: hci3: command tx timeout [ 1175.060883][T18066] team0: Port device team_slave_0 added [ 1175.062775][ T5934] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 1175.077663][ T44] bridge_slave_1: left allmulticast mode [ 1175.077687][ T44] bridge_slave_1: left promiscuous mode [ 1175.077909][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 1175.147373][T18195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3963'. [ 1175.147405][T18195] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3963'. [ 1175.192076][ T44] bridge_slave_0: left allmulticast mode [ 1175.192103][ T44] bridge_slave_0: left promiscuous mode [ 1175.192315][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 1175.250003][ T5934] usb 9-1: Using ep0 maxpacket: 16 [ 1175.250827][ T5934] usb 9-1: no configurations [ 1175.250842][ T5934] usb 9-1: can't read configurations, error -22 [ 1175.251548][ T5934] usb usb9-port1: attempt power cycle [ 1175.586441][ T5963] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1175.629019][ T5934] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 1175.650960][ T5934] usb 9-1: Using ep0 maxpacket: 16 [ 1175.651518][ T5934] usb 9-1: no configurations [ 1175.651529][ T5934] usb 9-1: can't read configurations, error -22 [ 1175.735982][ T5963] usb 4-1: device descriptor read/64, error -71 [ 1175.789383][ T5934] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 1175.813345][ T5934] usb 9-1: Using ep0 maxpacket: 16 [ 1175.813970][ T5934] usb 9-1: no configurations [ 1175.813982][ T5934] usb 9-1: can't read configurations, error -22 [ 1175.814234][ T5934] usb usb9-port1: unable to enumerate USB device [ 1176.003236][ T5963] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1176.152892][ T5963] usb 4-1: device descriptor read/64, error -71 [ 1176.270774][ T5963] usb usb4-port1: attempt power cycle [ 1176.337480][T18213] syz.5.3968 uses obsolete (PF_INET,SOCK_PACKET) [ 1176.633929][ T5963] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1176.732640][ T5963] usb 4-1: device descriptor read/8, error -71 [ 1176.986740][ T5963] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1177.029185][ T5963] usb 4-1: device descriptor read/8, error -71 [ 1177.138347][ T5963] usb usb4-port1: unable to enumerate USB device [ 1177.200703][T18075] Bluetooth: hci3: command tx timeout [ 1177.493821][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1177.575351][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1177.605633][ T44] bond0 (unregistering): Released all slaves [ 1177.663988][T18066] team0: Port device team_slave_1 added [ 1178.497788][T18228] netlink: 64 bytes leftover after parsing attributes in process `syz.8.3970'. [ 1179.372536][T18222] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1179.372577][T18222] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1179.372608][T18222] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1180.480607][T18066] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1180.480642][T18066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1180.480670][T18066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1181.316536][T18066] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1181.316553][T18066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1181.316581][T18066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1181.698187][T18066] hsr_slave_0: entered promiscuous mode [ 1181.723635][T18066] hsr_slave_1: entered promiscuous mode [ 1181.724483][T18066] debugfs: 'hsr0' already exists in 'hsr' [ 1181.724508][T18066] Cannot create hsr debugfs directory [ 1183.340268][T18274] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3980'. [ 1184.382484][T18276] netlink: 'syz.3.3981': attribute type 10 has an invalid length. [ 1184.382506][T18276] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3981'. [ 1184.812245][ T5934] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1184.951306][ T5934] usb 6-1: device descriptor read/64, error -71 [ 1185.207792][ T5934] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1186.051545][T18296] loop9: detected capacity change from 0 to 7 [ 1186.053760][T18296] buffer_io_error: 4 callbacks suppressed [ 1186.053790][T18296] Buffer I/O error on dev loop9, logical block 0, async page read [ 1186.053897][T18296] Buffer I/O error on dev loop9, logical block 0, async page read [ 1186.053984][T18296] Buffer I/O error on dev loop9, logical block 0, async page read [ 1186.054070][T18296] Buffer I/O error on dev loop9, logical block 0, async page read [ 1186.054210][T18296] Buffer I/O error on dev loop9, logical block 0, async page read [ 1186.054324][T18296] Buffer I/O error on dev loop9, logical block 0, async page read [ 1186.054407][T18296] Buffer I/O error on dev loop9, logical block 0, async page read [ 1186.054465][T18296] ldm_validate_partition_table(): Disk read failed. [ 1186.054525][T18296] Buffer I/O error on dev loop9, logical block 0, async page read [ 1186.054607][T18296] Buffer I/O error on dev loop9, logical block 0, async page read [ 1186.054688][T18296] Buffer I/O error on dev loop9, logical block 0, async page read [ 1186.054790][T18296] Dev loop9: unable to read RDB block 0 [ 1186.055028][T18296] loop9: unable to read partition table [ 1186.055753][T18296] loop9: partition table beyond EOD, truncated [ 1186.055807][T18296] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 1186.055807][T18296] ) failed (rc=-5) [ 1186.470153][ T5934] usb 6-1: device descriptor read/64, error -71 [ 1186.588493][ T5934] usb usb6-port1: attempt power cycle [ 1186.689391][ T44] hsr_slave_0: left promiscuous mode [ 1187.688004][ T5934] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1187.698993][ T44] hsr_slave_1: left promiscuous mode [ 1187.699870][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1187.699894][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1187.892224][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1187.892262][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1188.437039][T18309] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3991'. [ 1189.482964][ T44] veth1_macvtap: left promiscuous mode [ 1189.483139][ T44] veth0_macvtap: left promiscuous mode [ 1189.483638][ T44] veth1_vlan: left promiscuous mode [ 1189.497955][ T44] veth0_vlan: left promiscuous mode [ 1191.563524][ T5934] usb 6-1: device descriptor read/8, error -71 [ 1193.611278][ T44] team0 (unregistering): Port device team_slave_1 removed [ 1193.782172][ T44] team0 (unregistering): Port device team_slave_0 removed [ 1195.365969][T18331] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1195.366009][T18331] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1195.366029][T18331] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1195.586235][T18351] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3999'. [ 1196.817153][T18351] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3999'. [ 1196.872533][T18356] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4001'. [ 1197.556594][ T5783] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 1197.754809][ T5783] usb 9-1: device descriptor read/64, error -71 [ 1198.197217][ T5783] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 1198.774258][ T5783] usb 9-1: device descriptor read/64, error -71 [ 1198.892058][ T5783] usb usb9-port1: attempt power cycle [ 1199.255274][ T5783] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 1199.364681][ T5783] usb 9-1: device descriptor read/8, error -71 [ 1199.661832][ T5783] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 1199.705516][ T5783] usb 9-1: device descriptor read/8, error -71 [ 1199.822166][ T5783] usb usb9-port1: unable to enumerate USB device [ 1200.640037][T18066] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1200.769716][T18066] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1201.736961][T18066] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1201.817534][T18066] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1202.031242][T18408] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4012'. [ 1202.045782][T18408] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4012'. [ 1203.227212][T18412] kvm: kvm [18410]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xfff600000000 [ 1203.337379][T18066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1203.367814][T18066] 8021q: adding VLAN 0 to HW filter on device team0 [ 1203.404909][ T9750] bridge0: port 1(bridge_slave_0) entered blocking state [ 1203.405053][ T9750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1203.473746][ T9751] bridge0: port 2(bridge_slave_1) entered blocking state [ 1203.473877][ T9751] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1205.330905][T18462] netlink: 64 bytes leftover after parsing attributes in process `syz.8.4022'. [ 1207.861229][ T36] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 1208.043089][ T36] usb 9-1: Using ep0 maxpacket: 8 [ 1208.096978][ T36] usb 9-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1208.097006][ T36] usb 9-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 1208.098631][ T36] usb 9-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1208.098656][ T36] usb 9-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 1208.100378][ T36] usb 9-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1208.100401][ T36] usb 9-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 1208.105626][ T36] usb 9-1: string descriptor 0 read error: -22 [ 1208.105752][ T36] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1208.105775][ T36] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1208.111064][ T36] usb 9-1: rejected 3 configurations due to insufficient available bus power [ 1208.111086][ T36] usb 9-1: no configuration chosen from 3 choices [ 1208.356937][T18066] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1208.752269][T18499] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4029'. [ 1212.721139][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1212.721354][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1212.781439][T18503] udevd[18503]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1212.814169][T18479] udevd[18479]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1213.452890][T18524] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4034'. [ 1213.576498][T18524] netlink: 'syz.0.4034': attribute type 10 has an invalid length. [ 1213.576514][T18524] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4034'. [ 1213.628097][T12154] usb 9-1: USB disconnect, device number 57 [ 1214.991914][ T5783] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1215.189161][ T5783] usb 4-1: Using ep0 maxpacket: 16 [ 1215.189820][ T5783] usb 4-1: no configurations [ 1215.189837][ T5783] usb 4-1: can't read configurations, error -22 [ 1215.193247][T18066] veth0_vlan: entered promiscuous mode [ 1215.240272][T18066] veth1_vlan: entered promiscuous mode [ 1215.275002][T18066] veth0_macvtap: entered promiscuous mode [ 1215.286888][T18066] veth1_macvtap: entered promiscuous mode [ 1215.310659][T18066] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1215.325337][ T5783] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1215.331960][T18066] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1215.366652][ T6142] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.369488][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.369664][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.369701][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.494788][ T5783] usb 4-1: Using ep0 maxpacket: 16 [ 1215.548292][ T5783] usb 4-1: no configurations [ 1215.548311][ T5783] usb 4-1: can't read configurations, error -22 [ 1215.558728][ T5783] usb usb4-port1: attempt power cycle [ 1216.627818][ T5783] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1216.708489][ T5783] usb 4-1: Using ep0 maxpacket: 16 [ 1216.709421][ T5783] usb 4-1: no configurations [ 1216.709436][ T5783] usb 4-1: can't read configurations, error -22 [ 1217.056851][ T5783] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1217.101511][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1217.101532][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1217.279722][ T5783] usb 4-1: device not accepting address 59, error -71 [ 1217.299738][ T5783] usb usb4-port1: unable to enumerate USB device [ 1218.424237][T18589] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4047'. [ 1219.452342][ T9751] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1219.452391][ T9751] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1222.527263][T18480] udevd[18480]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1222.555872][T18479] udevd[18479]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1222.931647][T18603] kvm: kvm [18602]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xffe400000500 [ 1223.701320][T18641] netlink: 'syz.7.4059': attribute type 10 has an invalid length. [ 1223.701342][T18641] netlink: 228 bytes leftover after parsing attributes in process `syz.7.4059'. [ 1225.792673][T18653] syz.5.4064 (18653): drop_caches: 2 [ 1227.097606][T18677] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4073'. [ 1227.330024][T18678] kvm: kvm [18674]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x8166 [ 1229.332355][T18682] syz.7.4074 (18682): drop_caches: 2 [ 1229.989616][T18690] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4073'. [ 1230.207724][T18689] netlink: 'syz.7.4076': attribute type 10 has an invalid length. [ 1230.209018][T18689] netlink: 228 bytes leftover after parsing attributes in process `syz.7.4076'. [ 1230.719131][T18701] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4078'. [ 1230.931249][T18705] netlink: 'syz.3.4078': attribute type 10 has an invalid length. [ 1230.931269][T18705] netlink: 228 bytes leftover after parsing attributes in process `syz.3.4078'. [ 1231.059116][T18711] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4080'. [ 1232.798408][T18479] udevd[18479]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1233.157627][T18737] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4087'. [ 1234.549338][T18733] syz.0.4086 (18733): drop_caches: 2 [ 1235.147474][T18750] kvm: kvm [18748]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x8166 [ 1236.013969][T18749] syz.8.4090 (18749): drop_caches: 2 [ 1237.089696][T18755] loop9: detected capacity change from 0 to 7 [ 1237.092083][T18755] buffer_io_error: 4 callbacks suppressed [ 1237.092099][T18755] Buffer I/O error on dev loop9, logical block 0, async page read [ 1237.092137][T18755] Buffer I/O error on dev loop9, logical block 0, async page read [ 1237.092172][T18755] Buffer I/O error on dev loop9, logical block 0, async page read [ 1237.092202][T18755] Buffer I/O error on dev loop9, logical block 0, async page read [ 1237.092259][T18755] Buffer I/O error on dev loop9, logical block 0, async page read [ 1237.092303][T18755] Buffer I/O error on dev loop9, logical block 0, async page read [ 1237.092333][T18755] Buffer I/O error on dev loop9, logical block 0, async page read [ 1237.092352][T18755] ldm_validate_partition_table(): Disk read failed. [ 1237.092378][T18755] Buffer I/O error on dev loop9, logical block 0, async page read [ 1237.092409][T18755] Buffer I/O error on dev loop9, logical block 0, async page read [ 1237.092447][T18755] Buffer I/O error on dev loop9, logical block 0, async page read [ 1237.092482][T18755] Dev loop9: unable to read RDB block 0 [ 1237.092551][T18755] loop9: unable to read partition table [ 1237.092744][T18755] loop9: partition table beyond EOD, truncated [ 1237.092761][T18755] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 1237.092761][T18755] ) failed (rc=-5) [ 1237.794027][T18758] syz.5.4093 (18758): drop_caches: 2 [ 1238.498765][T18775] netlink: 'syz.3.4097': attribute type 10 has an invalid length. [ 1238.498788][T18775] netlink: 228 bytes leftover after parsing attributes in process `syz.3.4097'. [ 1240.356219][T18782] syz.0.4099 (18782): drop_caches: 2 [ 1243.654215][T18804] fuse: Bad value for 'user_id' [ 1243.654234][T18804] fuse: Bad value for 'user_id' [ 1245.153966][T18810] kvm: kvm [18809]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x8166 [ 1245.261803][T18812] syz.8.4111 (18812): drop_caches: 2 [ 1245.453211][T18826] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4114'. [ 1245.525123][T18829] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4114'. [ 1246.115923][T18846] fuse: Bad value for 'user_id' [ 1246.115944][T18846] fuse: Bad value for 'user_id' [ 1247.201365][T18853] trusted_key: syz.3.4125 sent an empty control message without MSG_MORE. [ 1250.805824][T18871] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4131'. [ 1250.962416][T18872] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4131'. [ 1252.152542][T18888] fuse: Bad value for 'user_id' [ 1252.152563][T18888] fuse: Bad value for 'user_id' [ 1252.339698][T18901] fuse: Unknown parameter 'grou00000000000000000000' [ 1257.103364][T18935] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4148'. [ 1257.103603][T18935] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4148'. [ 1257.120864][T18936] fuse: Bad value for 'fd' [ 1260.666528][T18978] fuse: Bad value for 'fd' [ 1260.801971][T18982] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4162'. [ 1260.802281][T18982] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4162'. [ 1262.920301][T19016] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4172'. [ 1262.920335][T19016] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4172'. [ 1262.983857][T19016] geneve3: entered promiscuous mode [ 1262.983874][T19016] geneve3: entered allmulticast mode [ 1263.284003][T19023] fuse: Bad value for 'fd' [ 1263.795699][T19035] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4176'. [ 1263.795722][T19035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4176'. [ 1264.011736][T19035] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4176'. [ 1264.011760][T19035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4176'. [ 1265.837544][T19065] syz.8.4178 (19065): drop_caches: 2 [ 1266.632368][T19064] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4186'. [ 1266.632395][T19064] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4186'. [ 1266.669444][T19064] geneve2: entered promiscuous mode [ 1266.669461][T19064] geneve2: entered allmulticast mode [ 1267.206007][T19079] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4192'. [ 1267.206029][T19079] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4192'. [ 1268.104839][ T5963] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1268.228769][T19098] geneve3: entered promiscuous mode [ 1268.228788][T19098] geneve3: entered allmulticast mode [ 1268.268346][ T5963] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1268.268410][ T5963] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1268.302643][ T5963] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1268.302672][ T5963] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1268.302691][ T5963] usb 4-1: Product: syz [ 1268.302705][ T5963] usb 4-1: Manufacturer: syz [ 1268.302718][ T5963] usb 4-1: SerialNumber: syz [ 1268.340231][ T5963] usb 4-1: config 0 descriptor?? [ 1268.356509][ T5963] usb 4-1: ucan: probing device on interface #0 [ 1268.356533][ T5963] usb 4-1: ucan: invalid EP count (0) [ 1268.356549][ T5963] usb 4-1: ucan: probe failed; try to update the device firmware [ 1268.521500][T19100] __nla_validate_parse: 4 callbacks suppressed [ 1268.521520][T19100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4199'. [ 1268.521546][T19100] netlink: 'syz.0.4199': attribute type 5 has an invalid length. [ 1268.521559][T19100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4199'. [ 1268.571147][T19100] geneve3: entered promiscuous mode [ 1268.571167][T19100] geneve3: entered allmulticast mode [ 1268.587280][ T1496] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 33686 - 0 [ 1268.603408][ T6140] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 33686 - 0 [ 1268.603490][ T6230] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 33686 - 0 [ 1268.603526][ T6230] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 33686 - 0 [ 1268.703487][ T9] usb 4-1: USB disconnect, device number 60 [ 1270.233080][T19117] fuse: Bad value for 'fd' [ 1282.824511][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1282.824580][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1283.743537][ T5783] usb 9-1: new high-speed USB device number 58 using dummy_hcd [ 1284.980300][ T5783] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1284.980325][ T5783] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1284.980344][ T5783] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1285.058122][ T5783] usb 9-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1285.058156][ T5783] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.058178][ T5783] usb 9-1: Product: syz [ 1285.058193][ T5783] usb 9-1: Manufacturer: syz [ 1285.058209][ T5783] usb 9-1: SerialNumber: syz [ 1285.143224][ T5783] usb 9-1: config 0 descriptor?? [ 1285.146666][T19172] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1285.158534][ T5783] usb 9-1: ucan: probing device on interface #0 [ 1285.158550][ T5783] usb 9-1: ucan: invalid endpoint configuration [ 1285.158561][ T5783] usb 9-1: ucan: probe failed; try to update the device firmware [ 1285.419551][ T5963] usb 9-1: USB disconnect, device number 58 [ 1286.030055][T19190] syz.7.4221 (19190): drop_caches: 2 [ 1291.355108][T19225] syz.8.4235 (19225): drop_caches: 2 [ 1291.733256][T19219] kvm: kvm [19217]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xffcb0000d100 [ 1293.340285][ T5804] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1293.546431][ T5804] usb 8-1: Using ep0 maxpacket: 16 [ 1293.547349][ T5804] usb 8-1: no configurations [ 1293.547366][ T5804] usb 8-1: can't read configurations, error -22 [ 1293.696200][ T5804] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1293.908080][ T5804] usb 8-1: Using ep0 maxpacket: 16 [ 1293.913420][ T5804] usb 8-1: no configurations [ 1293.913433][ T5804] usb 8-1: can't read configurations, error -22 [ 1293.913750][ T5804] usb usb8-port1: attempt power cycle [ 1294.359624][ T5804] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1294.382616][ T5804] usb 8-1: Using ep0 maxpacket: 16 [ 1294.384347][ T5804] usb 8-1: no configurations [ 1294.384362][ T5804] usb 8-1: can't read configurations, error -22 [ 1294.530048][ T5804] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1294.562867][ T5804] usb 8-1: Using ep0 maxpacket: 16 [ 1294.563487][ T5804] usb 8-1: no configurations [ 1294.563501][ T5804] usb 8-1: can't read configurations, error -22 [ 1294.563990][ T5804] usb usb8-port1: unable to enumerate USB device [ 1296.975699][T19265] fuse: Unknown parameter '0x0000000000000004' [ 1298.566787][T19281] loop9: detected capacity change from 0 to 7 [ 1298.567450][T19281] buffer_io_error: 9 callbacks suppressed [ 1298.567460][T19281] Buffer I/O error on dev loop9, logical block 0, async page read [ 1298.601919][T19281] Buffer I/O error on dev loop9, logical block 0, async page read [ 1298.601948][T19281] Buffer I/O error on dev loop9, logical block 0, async page read [ 1298.601969][T19281] Buffer I/O error on dev loop9, logical block 0, async page read [ 1298.602005][T19281] Buffer I/O error on dev loop9, logical block 0, async page read [ 1298.602033][T19281] Buffer I/O error on dev loop9, logical block 0, async page read [ 1298.602054][T19281] Buffer I/O error on dev loop9, logical block 0, async page read [ 1298.602066][T19281] ldm_validate_partition_table(): Disk read failed. [ 1298.602083][T19281] Buffer I/O error on dev loop9, logical block 0, async page read [ 1298.602103][T19281] Buffer I/O error on dev loop9, logical block 0, async page read [ 1298.602123][T19281] Buffer I/O error on dev loop9, logical block 0, async page read [ 1298.602145][T19281] Dev loop9: unable to read RDB block 0 [ 1298.602189][T19281] loop9: unable to read partition table [ 1298.602322][T19281] loop9: partition table beyond EOD, truncated [ 1298.602333][T19281] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 1298.602333][T19281] ) failed (rc=-5) [ 1302.209912][T19325] syz.7.4259 (19325): drop_caches: 2 [ 1302.413640][ T5813] Bluetooth: hci3: command 0x0406 tx timeout [ 1304.138232][T19333] netlink: 'syz.0.4268': attribute type 3 has an invalid length. [ 1304.172247][T19333] overlayfs: overlapping lowerdir path [ 1306.459897][T19344] syz.0.4274 (19344): drop_caches: 2 [ 1309.071724][T19353] loop9: detected capacity change from 0 to 7 [ 1309.072226][T19353] buffer_io_error: 9 callbacks suppressed [ 1309.072237][T19353] Buffer I/O error on dev loop9, logical block 0, async page read [ 1309.072262][T19353] Buffer I/O error on dev loop9, logical block 0, async page read [ 1309.072285][T19353] Buffer I/O error on dev loop9, logical block 0, async page read [ 1309.072305][T19353] Buffer I/O error on dev loop9, logical block 0, async page read [ 1309.072337][T19353] Buffer I/O error on dev loop9, logical block 0, async page read [ 1309.072373][T19353] Buffer I/O error on dev loop9, logical block 0, async page read [ 1309.072395][T19353] Buffer I/O error on dev loop9, logical block 0, async page read [ 1309.072406][T19353] ldm_validate_partition_table(): Disk read failed. [ 1309.072424][T19353] Buffer I/O error on dev loop9, logical block 0, async page read [ 1309.072445][T19353] Buffer I/O error on dev loop9, logical block 0, async page read [ 1309.072464][T19353] Buffer I/O error on dev loop9, logical block 0, async page read [ 1309.072487][T19353] Dev loop9: unable to read RDB block 0 [ 1309.072532][T19353] loop9: unable to read partition table [ 1309.072663][T19353] loop9: partition table beyond EOD, truncated [ 1309.072675][T19353] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 1309.072675][T19353] ) failed (rc=-5) [ 1309.969843][T19361] syz.7.4277 (19361): drop_caches: 2 [ 1312.010521][ T808] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1312.030881][ T5804] usb 9-1: new high-speed USB device number 59 using dummy_hcd [ 1312.937234][T19382] syz.3.4279 (19382): drop_caches: 2 [ 1313.782790][ T808] usb 1-1: Using ep0 maxpacket: 16 [ 1313.783762][ T5804] usb 9-1: Using ep0 maxpacket: 8 [ 1313.880006][ T808] usb 1-1: no configurations [ 1313.880020][ T808] usb 1-1: can't read configurations, error -22 [ 1313.987434][ T5804] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1313.987485][ T5804] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1313.987512][ T5804] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1313.987536][ T5804] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1313.987559][ T5804] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1313.997529][ T5804] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1313.997661][ T5804] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1313.997751][ T5804] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1313.997819][ T5804] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1313.997874][ T5804] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1314.065971][ T5804] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1314.066127][ T5804] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1314.066213][ T5804] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1314.066290][ T5804] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1314.066344][ T5804] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1314.067425][ T808] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1314.077138][ T5804] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1314.077221][ T5804] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1314.077271][ T5804] usb 9-1: Product: syz [ 1314.077306][ T5804] usb 9-1: Manufacturer: syz [ 1314.077342][ T5804] usb 9-1: SerialNumber: syz [ 1314.307626][ T808] usb 1-1: Using ep0 maxpacket: 16 [ 1314.308471][ T808] usb 1-1: no configurations [ 1314.308486][ T808] usb 1-1: can't read configurations, error -22 [ 1314.308821][ T808] usb usb1-port1: attempt power cycle [ 1314.853865][ T808] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1315.853668][ T808] usb 1-1: Using ep0 maxpacket: 16 [ 1315.854663][ T808] usb 1-1: no configurations [ 1315.854687][ T808] usb 1-1: can't read configurations, error -22 [ 1315.996743][ T808] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1316.019137][ T808] usb 1-1: Using ep0 maxpacket: 16 [ 1316.019848][ T808] usb 1-1: no configurations [ 1316.019864][ T808] usb 1-1: can't read configurations, error -22 [ 1316.020347][ T808] usb usb1-port1: unable to enumerate USB device [ 1319.728050][ T5804] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1321.599784][T19439] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4299'. [ 1321.714548][ T869] usb 9-1: USB disconnect, device number 59 [ 1325.721933][T19449] udevd[19449]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1325.726933][T19187] udevd[19187]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1327.245706][T19471] loop9: detected capacity change from 0 to 7 [ 1327.246313][T19471] buffer_io_error: 4 callbacks suppressed [ 1327.246324][T19471] Buffer I/O error on dev loop9, logical block 0, async page read [ 1327.246349][T19471] Buffer I/O error on dev loop9, logical block 0, async page read [ 1327.246372][T19471] Buffer I/O error on dev loop9, logical block 0, async page read [ 1327.246392][T19471] Buffer I/O error on dev loop9, logical block 0, async page read [ 1327.246423][T19471] Buffer I/O error on dev loop9, logical block 0, async page read [ 1327.246450][T19471] Buffer I/O error on dev loop9, logical block 0, async page read [ 1327.246471][T19471] Buffer I/O error on dev loop9, logical block 0, async page read [ 1327.246482][T19471] ldm_validate_partition_table(): Disk read failed. [ 1327.246499][T19471] Buffer I/O error on dev loop9, logical block 0, async page read [ 1327.246519][T19471] Buffer I/O error on dev loop9, logical block 0, async page read [ 1327.246539][T19471] Buffer I/O error on dev loop9, logical block 0, async page read [ 1327.246561][T19471] Dev loop9: unable to read RDB block 0 [ 1327.246605][T19471] loop9: unable to read partition table [ 1327.246728][T19471] loop9: partition table beyond EOD, truncated [ 1327.246740][T19471] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 1327.246740][T19471] ) failed (rc=-5) [ 1331.983829][T19511] fuse: Bad value for 'user_id' [ 1331.983848][T19511] fuse: Bad value for 'user_id' [ 1339.693087][T19559] loop9: detected capacity change from 0 to 7 [ 1339.693515][T19559] buffer_io_error: 4 callbacks suppressed [ 1339.693525][T19559] Buffer I/O error on dev loop9, logical block 0, async page read [ 1339.693550][T19559] Buffer I/O error on dev loop9, logical block 0, async page read [ 1339.693573][T19559] Buffer I/O error on dev loop9, logical block 0, async page read [ 1339.693593][T19559] Buffer I/O error on dev loop9, logical block 0, async page read [ 1339.693634][T19559] Buffer I/O error on dev loop9, logical block 0, async page read [ 1339.693662][T19559] Buffer I/O error on dev loop9, logical block 0, async page read [ 1339.693682][T19559] Buffer I/O error on dev loop9, logical block 0, async page read [ 1339.693693][T19559] ldm_validate_partition_table(): Disk read failed. [ 1339.693711][T19559] Buffer I/O error on dev loop9, logical block 0, async page read [ 1339.693732][T19559] Buffer I/O error on dev loop9, logical block 0, async page read [ 1339.693752][T19559] Buffer I/O error on dev loop9, logical block 0, async page read [ 1339.693774][T19559] Dev loop9: unable to read RDB block 0 [ 1339.693818][T19559] loop9: unable to read partition table [ 1339.693940][T19559] loop9: partition table beyond EOD, truncated [ 1339.693951][T19559] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 1339.693951][T19559] ) failed (rc=-5) [ 1343.342731][T19594] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4340'. [ 1345.894487][T19631] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4348'. [ 1346.306298][T19636] netlink: 'syz.8.4349': attribute type 10 has an invalid length. [ 1346.306651][T19636] netlink: 228 bytes leftover after parsing attributes in process `syz.8.4349'. [ 1348.652584][T19651] overlayfs: overlapping lowerdir path [ 1349.297345][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1349.297452][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1349.418026][T19544] udevd[19544]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1349.448525][T19549] udevd[19549]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1349.565495][T19650] netlink: 'syz.0.4352': attribute type 3 has an invalid length. [ 1351.090661][T19672] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4358'. [ 1352.408220][T19677] syz.8.4360 (19677): drop_caches: 2 [ 1353.681258][T19687] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4364'. [ 1354.226340][T19690] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4363'. [ 1357.099545][T19544] udevd[19544]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1357.131153][T19549] udevd[19549]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1374.131387][T19818] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4395'. [ 1375.201902][T12154] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1375.635215][T12154] usb 6-1: Using ep0 maxpacket: 32 [ 1375.960432][T12154] usb 6-1: config 0 has no interfaces? [ 1375.960469][T12154] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1375.960492][T12154] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1375.983522][T12154] usb 6-1: config 0 descriptor?? [ 1376.439315][T12154] usb 6-1: USB disconnect, device number 63 [ 1379.532676][T19840] syz.0.4400 (19840): drop_caches: 2 [ 1380.550846][T19852] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4404'. [ 1386.173618][T19882] fuse: Unknown parameter 'fd0x0000000000000004' [ 1387.245616][T19893] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4412'. [ 1389.007530][T19901] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4413'. [ 1389.885838][T19910] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4417'. [ 1395.994597][ T5804] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1396.165590][ T5804] usb 8-1: Using ep0 maxpacket: 32 [ 1396.191825][ T5804] usb 8-1: config 0 has no interfaces? [ 1396.191864][ T5804] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1396.191881][ T5804] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1396.195338][ T5804] usb 8-1: config 0 descriptor?? [ 1396.379444][ T5783] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1396.572309][ T5783] usb 4-1: Using ep0 maxpacket: 32 [ 1396.579528][ T5783] usb 4-1: config 0 has no interfaces? [ 1396.579551][ T5783] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1396.579567][ T5783] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1396.822649][T12154] usb 8-1: USB disconnect, device number 30 [ 1396.835889][ T5783] usb 4-1: config 0 descriptor?? [ 1399.583913][ T5783] usb 4-1: USB disconnect, device number 61 [ 1413.345459][T12154] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1413.506597][T12154] usb 1-1: Using ep0 maxpacket: 32 [ 1413.827961][T12154] usb 1-1: config 0 has no interfaces? [ 1413.828222][T12154] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1413.828309][T12154] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1413.917542][T12154] usb 1-1: config 0 descriptor?? [ 1414.606903][ T5804] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1414.820774][ T5804] usb 6-1: Using ep0 maxpacket: 32 [ 1414.842399][ T5804] usb 6-1: config 0 has no interfaces? [ 1414.842431][ T5804] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1414.842453][ T5804] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1415.110646][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1415.110873][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1417.364381][ T5804] usb 6-1: config 0 descriptor?? [ 1418.641669][ T5804] usb 6-1: can't set config #0, error -71 [ 1418.825537][ T5934] usb 6-1: USB disconnect, device number 64 [ 1418.837839][ T5804] usb 1-1: USB disconnect, device number 29 [ 1419.364242][ T5783] usb 9-1: new high-speed USB device number 60 using dummy_hcd [ 1420.776491][ T5783] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1420.776543][ T5783] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1420.783216][ T5783] usb 9-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1420.783243][ T5783] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1420.783263][ T5783] usb 9-1: Product: syz [ 1420.783278][ T5783] usb 9-1: Manufacturer: syz [ 1420.783292][ T5783] usb 9-1: SerialNumber: syz [ 1420.822334][ T5783] usb 9-1: config 0 descriptor?? [ 1420.826663][ T5783] usb 9-1: ucan: probing device on interface #0 [ 1420.826683][ T5783] usb 9-1: ucan: invalid EP count (0) [ 1420.826698][ T5783] usb 9-1: ucan: probe failed; try to update the device firmware [ 1421.126759][ T869] usb 9-1: USB disconnect, device number 60 [ 1422.379328][T20080] loop9: detected capacity change from 0 to 7 [ 1422.379824][T20080] buffer_io_error: 4 callbacks suppressed [ 1422.379834][T20080] Buffer I/O error on dev loop9, logical block 0, async page read [ 1422.379860][T20080] Buffer I/O error on dev loop9, logical block 0, async page read [ 1422.379883][T20080] Buffer I/O error on dev loop9, logical block 0, async page read [ 1422.379903][T20080] Buffer I/O error on dev loop9, logical block 0, async page read [ 1422.379935][T20080] Buffer I/O error on dev loop9, logical block 0, async page read [ 1422.379964][T20080] Buffer I/O error on dev loop9, logical block 0, async page read [ 1422.379985][T20080] Buffer I/O error on dev loop9, logical block 0, async page read [ 1422.379997][T20080] ldm_validate_partition_table(): Disk read failed. [ 1422.380014][T20080] Buffer I/O error on dev loop9, logical block 0, async page read [ 1422.380035][T20080] Buffer I/O error on dev loop9, logical block 0, async page read [ 1422.380054][T20080] Buffer I/O error on dev loop9, logical block 0, async page read [ 1422.380077][T20080] Dev loop9: unable to read RDB block 0 [ 1422.380122][T20080] loop9: unable to read partition table [ 1422.380444][T20080] loop9: partition table beyond EOD, truncated [ 1422.380462][T20080] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 1422.380462][T20080] ) failed (rc=-5) [ 1429.370581][ T869] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1429.577681][ T869] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1429.577742][ T869] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1429.601716][ T869] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1429.601744][ T869] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1429.601763][ T869] usb 6-1: Product: syz [ 1429.601777][ T869] usb 6-1: Manufacturer: syz [ 1429.601791][ T869] usb 6-1: SerialNumber: syz [ 1429.643043][ T869] usb 6-1: config 0 descriptor?? [ 1429.663303][ T869] usb 6-1: ucan: probing device on interface #0 [ 1429.663324][ T869] usb 6-1: ucan: invalid EP count (0) [ 1429.663340][ T869] usb 6-1: ucan: probe failed; try to update the device firmware [ 1429.789540][T20135] fuse: Unknown parameter 'fd0x0000000000000004' [ 1430.290254][ T869] usb 6-1: USB disconnect, device number 65 [ 1430.336227][ T5783] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1432.057708][ T5783] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1432.057738][ T5783] usb 4-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 1432.057760][ T5783] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1432.057807][ T5783] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1432.061931][ T5783] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1432.061957][ T5783] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1432.061976][ T5783] usb 4-1: Product: syz [ 1432.061989][ T5783] usb 4-1: Manufacturer: syz [ 1432.613369][ T5783] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1436.192367][ T869] usb 4-1: USB disconnect, device number 62 [ 1436.324204][T20171] fuse: Unknown parameter 'fd0x0000000000000004' [ 1440.970213][T20199] netlink: 292 bytes leftover after parsing attributes in process `syz.7.4504'. [ 1442.747674][T20217] fuse: Unknown parameter 'fd0x0000000000000004' [ 1444.558008][ T869] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1444.733014][ T869] usb 1-1: Using ep0 maxpacket: 32 [ 1444.777979][ T869] usb 1-1: config 0 has no interfaces? [ 1444.778014][ T869] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1444.778037][ T869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1444.971635][ T869] usb 1-1: config 0 descriptor?? [ 1445.960044][T12154] usb 1-1: USB disconnect, device number 30 [ 1449.800390][ T869] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1449.965228][ T869] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1449.970321][ T869] usb 8-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1450.001246][ T869] usb 8-1: string descriptor 0 read error: -22 [ 1450.001339][ T869] usb 8-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 1450.001355][ T869] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1450.937303][ T869] usb 8-1: reset high-speed USB device number 31 using dummy_hcd [ 1452.711021][T20302] netlink: 276 bytes leftover after parsing attributes in process `syz.3.4528'. [ 1457.283848][T12154] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1457.356024][ T869] usb 8-1: USB disconnect, device number 31 [ 1458.063931][T12154] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1458.065929][T12154] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1458.065981][T12154] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1458.393619][T12154] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1458.393650][T12154] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1458.393670][T12154] usb 6-1: Product: syz [ 1458.393691][T12154] usb 6-1: Manufacturer: syz [ 1458.393705][T12154] usb 6-1: SerialNumber: syz [ 1458.462525][T12154] usb 6-1: config 0 descriptor?? [ 1458.463493][T20317] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1458.495285][T12154] usb 6-1: ucan: probing device on interface #0 [ 1458.495306][T12154] usb 6-1: ucan: invalid EP count (1) [ 1458.495321][T12154] usb 6-1: ucan: probe failed; try to update the device firmware [ 1458.694707][T19824] usb 6-1: USB disconnect, device number 66 [ 1459.466219][T19824] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 1459.828913][T19824] usb 8-1: Using ep0 maxpacket: 32 [ 1459.917867][T19824] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1459.921128][T19824] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1459.921748][T19824] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1459.922236][T19824] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1460.135265][T19824] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1460.135297][T19824] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1460.135317][T19824] usb 8-1: Product: syz [ 1460.135331][T19824] usb 8-1: Manufacturer: syz [ 1460.135346][T19824] usb 8-1: SerialNumber: syz [ 1460.262391][ C1] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1460.269549][T19824] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/input/input58 [ 1460.943059][T20368] 9pnet_virtio: no channels available for device syz [ 1461.620466][T20378] bridge_slave_0: left allmulticast mode [ 1461.620493][T20378] bridge_slave_0: left promiscuous mode [ 1461.620723][T20378] bridge0: port 1(bridge_slave_0) entered disabled state [ 1461.659582][T19824] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1461.659603][T19824] (id 0x00) [ 1462.015524][T20378] bridge_slave_1: left allmulticast mode [ 1462.015551][T20378] bridge_slave_1: left promiscuous mode [ 1462.015900][T20378] bridge0: port 2(bridge_slave_1) entered disabled state [ 1462.974273][T19824] rc_core: IR keymap rc-imon-pad not found [ 1462.974293][T19824] Registered IR keymap rc-empty [ 1462.974361][T19824] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1462.974379][T19824] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1462.975854][T19824] imon:send_packet: packet tx failed (-71) [ 1462.997822][T19824] imon 8-1:155.0: remote input dev register failed [ 1462.998219][T19824] imon 8-1:155.0: imon_init_intf0: rc device setup failed [ 1463.249438][ T808] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1463.336026][T20378] bond0: (slave bond_slave_0): Releasing backup interface [ 1463.390202][T20359] Set syz1 is full, maxelem 65536 reached [ 1463.404866][T20365] Set syz1 is full, maxelem 65536 reached [ 1463.452377][ T808] usb 1-1: Using ep0 maxpacket: 16 [ 1463.463010][ T808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1463.463040][ T808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1463.463062][ T808] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1463.463101][ T808] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1463.463123][ T808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1463.489437][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805f097400: rx timeout, send abort [ 1463.547702][ T808] usb 1-1: config 0 descriptor?? [ 1463.605812][T20378] bond0: (slave bond_slave_1): Releasing backup interface [ 1463.636987][T19824] imon 8-1:155.0: unable to initialize intf0, err 0 [ 1463.637225][T19824] imon:imon_probe: failed to initialize context! [ 1463.637240][T19824] imon 8-1:155.0: unable to register, err -19 [ 1463.669937][T19824] usb 8-1: USB disconnect, device number 32 [ 1463.719757][T20378] team_slave_0: left promiscuous mode [ 1463.739180][T20378] team0: Port device team_slave_0 removed [ 1463.755150][T20388] netlink: 'syz.5.4556': attribute type 10 has an invalid length. [ 1463.788955][T20378] team_slave_1: left promiscuous mode [ 1463.817234][T20378] team0: Port device team_slave_1 removed [ 1463.820683][T20378] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1463.820707][T20378] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1463.861317][T20378] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1463.861339][T20378] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1463.919417][T20378] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1463.948162][T20377] sit1: entered promiscuous mode [ 1463.948185][T20377] sit1: entered allmulticast mode [ 1464.002707][T20377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1464.003171][T20377] bond0: (slave sit1): The slave device specified does not support setting the MAC address [ 1464.004323][T20377] bond0: (slave sit1): Error -95 calling set_mac_address [ 1464.006874][ T808] input: HID 0955:7214 Haptics as /devices/virtual/input/input60 [ 1464.025080][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805f097400: abort rx timeout. Force session deactivation [ 1464.025523][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805f095800: rx timeout, send abort [ 1464.063931][T19824] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 1464.212369][ T808] shield 0003:0955:7214.001D: Registered Thunderstrike controller [ 1464.212701][ T808] shield 0003:0955:7214.001D: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 1464.242168][T19824] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1464.242194][T19824] usb 8-1: config 0 has no interfaces? [ 1464.242224][T19824] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1464.242247][T19824] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1464.299833][T19824] usb 8-1: config 0 descriptor?? [ 1464.359533][T18075] Bluetooth: hci6: unexpected event for opcode 0x0c03 [ 1464.480300][T20387] bond0: entered promiscuous mode [ 1464.480323][T20387] bond_slave_0: entered promiscuous mode [ 1464.480533][T20387] bond_slave_1: entered promiscuous mode [ 1464.487309][T20387] batadv0: entered promiscuous mode [ 1464.532450][T20388] syz_tun: entered promiscuous mode [ 1464.560105][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805f095800: abort rx timeout. Force session deactivation [ 1464.595671][T20388] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1464.777597][T20400] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1464.777629][T20400] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1464.808193][T20400] vhci_hcd vhci_hcd.0: Device attached [ 1464.815748][T20400] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 1464.815774][T20400] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1464.818026][T20400] vhci_hcd vhci_hcd.0: Device attached [ 1464.834837][T20400] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(10) [ 1464.834865][T20400] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1464.835033][T20400] vhci_hcd vhci_hcd.0: Device attached [ 1464.838185][T20400] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1464.845369][T20400] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(15) [ 1464.845396][T20400] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1464.845987][T20400] vhci_hcd vhci_hcd.0: Device attached [ 1464.858029][T20400] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1464.873255][T20400] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(19) [ 1464.879770][T20400] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1464.883460][T20400] vhci_hcd vhci_hcd.0: Device attached [ 1464.889721][T20400] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1465.002552][ T5804] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1465.067872][ T5804] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 1465.075872][T18075] Bluetooth: hci1: unexpected event for opcode 0x0c03 [ 1465.219729][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803a68bc00: rx timeout, send abort [ 1465.415385][ T808] shield 0003:0955:7214.001D: Failed to output Thunderstrike HOSTCMD request HID report due to -ESHUTDOWN [ 1465.416497][ T808] shield 0003:0955:7214.001D: Failed to output Thunderstrike HOSTCMD request HID report due to -ENOENT [ 1465.416594][ T808] shield 0003:0955:7214.001D: Failed to output Thunderstrike HOSTCMD request HID report due to -ENOENT [ 1465.416664][ T808] shield 0003:0955:7214.001D: Failed to output Thunderstrike HOSTCMD request HID report due to -ENOENT [ 1465.483808][T20391] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1465.483817][T20381] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1465.485657][T20391] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1465.566649][T20400] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 1465.568628][T20391] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1465.574777][T20391] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1465.575113][T20391] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1465.581407][T19824] usb 1-1: reset high-speed USB device number 31 using dummy_hcd [ 1465.649150][T20391] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1465.649246][T20391] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1465.666451][T20410] vhci_hcd: connection closed [ 1465.675279][ T9750] vhci_hcd vhci_hcd.3: stop threads [ 1465.675302][ T9750] vhci_hcd vhci_hcd.3: release socket [ 1465.679674][T20408] vhci_hcd: connection closed [ 1465.681307][T20406] vhci_hcd: connection closed [ 1465.682093][T20404] vhci_hcd: connection closed [ 1465.682311][T20401] vhci_hcd: connection reset by peer [ 1465.717463][ T9750] vhci_hcd vhci_hcd.3: disconnect device [ 1465.718474][ T9750] vhci_hcd vhci_hcd.3: stop threads [ 1465.718494][ T9750] vhci_hcd vhci_hcd.3: release socket [ 1465.736178][ T9750] vhci_hcd vhci_hcd.3: disconnect device [ 1465.736491][ T9750] vhci_hcd vhci_hcd.3: stop threads [ 1465.736511][ T9750] vhci_hcd vhci_hcd.3: release socket [ 1465.737683][ T9750] vhci_hcd vhci_hcd.3: disconnect device [ 1465.737819][ T9750] vhci_hcd vhci_hcd.3: stop threads [ 1465.737833][ T9750] vhci_hcd vhci_hcd.3: release socket [ 1465.739290][ T9750] vhci_hcd vhci_hcd.3: disconnect device [ 1465.739467][ T9750] vhci_hcd vhci_hcd.3: stop threads [ 1465.739482][ T9750] vhci_hcd vhci_hcd.3: release socket [ 1465.739690][ T9750] vhci_hcd vhci_hcd.3: disconnect device [ 1465.750955][T19824] usb 1-1: device descriptor read/64, error -32 [ 1465.753722][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803a689c00: rx timeout, send abort [ 1465.754383][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803a68bc00: abort rx timeout. Force session deactivation [ 1465.840166][T20391] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1465.840269][T20391] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1466.009375][T19824] usb 1-1: reset high-speed USB device number 31 using dummy_hcd [ 1466.189078][ T869] usb 9-1: new high-speed USB device number 61 using dummy_hcd [ 1466.271731][T20428] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1466.271756][T20428] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1466.282243][T20428] vhci_hcd vhci_hcd.0: Device attached [ 1466.285002][T20428] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 1466.285024][T20428] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1466.285838][T20428] vhci_hcd vhci_hcd.0: Device attached [ 1466.289866][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803a689c00: abort rx timeout. Force session deactivation [ 1466.291638][T20428] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(10) [ 1466.291660][T20428] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1466.291935][T20428] vhci_hcd vhci_hcd.0: Device attached [ 1466.293485][T20428] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1466.302875][T20428] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(15) [ 1466.302900][T20428] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1466.303832][T20428] vhci_hcd vhci_hcd.0: Device attached [ 1466.307456][T20428] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1466.314683][T20428] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(19) [ 1466.314707][T20428] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1466.314785][T20428] vhci_hcd vhci_hcd.0: Device attached [ 1466.316137][T20428] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1466.367732][T20416] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1466.502789][ T869] usb 9-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1466.502809][ T869] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1466.502823][ T869] usb 9-1: Product: syz [ 1466.502832][ T869] usb 9-1: Manufacturer: syz [ 1466.502841][ T869] usb 9-1: SerialNumber: syz [ 1466.561367][ T869] usb 9-1: config 0 descriptor?? [ 1466.568658][ T869] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1466.586752][T20416] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1466.586777][T20416] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1466.586796][T20416] usb 6-1: Product: syz [ 1466.586814][T20416] usb 6-1: Manufacturer: syz [ 1466.586824][T20416] usb 6-1: SerialNumber: syz [ 1466.629614][T20416] usb 6-1: config 0 descriptor?? [ 1466.630467][ T869] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1466.678067][ T869] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1466.678173][ T869] usb 9-1: media controller created [ 1466.678275][T18075] Bluetooth: hci1: unexpected event for opcode 0x0c03 [ 1466.728581][T20416] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1466.744309][ T1244] usb 8-1: USB disconnect, device number 33 [ 1466.770051][T20416] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1466.774993][ T869] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1466.801930][T20396] digitv: more than 2 i2c messages at a time is not handled yet. TODO. [ 1466.802155][T20396] dvb-usb: bulk message failed: -22 (7/0) [ 1466.857295][T20418] dvb-usb: bulk message failed: -22 (7/0) [ 1466.868864][ T808] usb 1-1: USB disconnect, device number 31 [ 1466.912530][T20416] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1466.912575][T20416] usb 6-1: media controller created [ 1467.025033][T20416] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1467.140071][ T869] DVB: Unable to find symbol mt352_attach() [ 1467.161906][T20438] vhci_hcd: connection closed [ 1467.163673][T20436] vhci_hcd: connection closed [ 1467.171060][T20429] vhci_hcd: connection closed [ 1467.172632][ T43] vhci_hcd vhci_hcd.3: stop threads [ 1467.172743][ T43] vhci_hcd vhci_hcd.3: release socket [ 1467.172885][ T43] vhci_hcd vhci_hcd.3: disconnect device [ 1467.178374][ T43] vhci_hcd vhci_hcd.3: stop threads [ 1467.178391][ T43] vhci_hcd vhci_hcd.3: release socket [ 1467.178459][ T43] vhci_hcd vhci_hcd.3: disconnect device [ 1467.179733][ T43] vhci_hcd vhci_hcd.3: stop threads [ 1467.179749][ T43] vhci_hcd vhci_hcd.3: release socket [ 1467.179813][ T43] vhci_hcd vhci_hcd.3: disconnect device [ 1467.231537][T20434] vhci_hcd: connection closed [ 1467.236997][T20431] vhci_hcd: connection closed [ 1467.245695][ T9750] vhci_hcd vhci_hcd.3: stop threads [ 1467.245718][ T9750] vhci_hcd vhci_hcd.3: release socket [ 1467.245785][ T9750] vhci_hcd vhci_hcd.3: disconnect device [ 1467.255117][ T9750] vhci_hcd vhci_hcd.3: stop threads [ 1467.255172][ T9750] vhci_hcd vhci_hcd.3: release socket [ 1467.255318][ T9750] vhci_hcd vhci_hcd.3: disconnect device [ 1467.283854][ T869] DVB: Unable to find symbol nxt6000_attach() [ 1467.283882][ T869] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1467.321197][ T869] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input61 [ 1467.346771][ T869] dvb-usb: schedule remote query interval to 1000 msecs. [ 1467.346789][ T869] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1467.347051][ T869] dvb-usb: bulk message failed: -22 (7/0) [ 1467.347075][ T869] dvb-usb: bulk message failed: -22 (7/0) [ 1467.373954][ T869] usb 9-1: USB disconnect, device number 61 [ 1467.408353][T20416] DVB: Unable to find symbol mt352_attach() [ 1467.463981][T20416] DVB: Unable to find symbol nxt6000_attach() [ 1467.463991][T20416] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1467.539664][T20416] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input62 [ 1467.589989][T20416] dvb-usb: schedule remote query interval to 1000 msecs. [ 1467.590009][T20416] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1467.590026][T20416] dvb-usb: bulk message failed: -22 (7/0) [ 1467.590049][T20416] dvb-usb: bulk message failed: -22 (7/0) [ 1467.625018][T20416] usb 6-1: USB disconnect, device number 67 [ 1467.713315][T20428] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1467.714352][T20440] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1467.714918][T20440] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1467.715102][T20440] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1467.746503][T20440] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1467.746709][T20440] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1467.955710][ T869] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1468.092033][T20469] vlan2: entered allmulticast mode [ 1468.092327][T20469] bridge0: port 3(vlan2) entered blocking state [ 1468.093903][T20469] bridge0: port 3(vlan2) entered disabled state [ 1468.131563][T20469] vlan2: entered promiscuous mode [ 1468.132579][T20469] bridge0: mtu less than device minimum [ 1468.138790][T20472] 8021q: VLANs not supported on gre0 [ 1468.214826][T20476] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1468.222467][T20416] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1468.841767][T18075] Bluetooth: hci2: command 0x0406 tx timeout [ 1469.100212][T20504] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4589'. [ 1469.100288][T20504] 6eth1_to_bond: renamed from gre0 (while UP) [ 1469.157776][T20504] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4589'. [ 1469.157800][T20504] A link change request failed with some changes committed already. Interface 6eth1_to_bond may have been left with an inconsistent configuration, please check. [ 1469.868557][ T5813] Bluetooth: hci1: command 0x0406 tx timeout [ 1469.868726][T18075] Bluetooth: hci6: command 0x0406 tx timeout [ 1469.952188][T18075] Bluetooth: hci3: command 0x0406 tx timeout [ 1470.550998][ T5804] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1470.649162][T20558] kvm: user requested TSC rate below hardware speed [ 1470.649496][T20558] kvm: vcpu 0: requested 40 ns lapic timer period limited to 200000 ns [ 1470.649696][T20558] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=167772160 (335544320 ns) > initial count (200000 ns). Using initial count to start timer. [ 1470.708207][T20564] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4615'. [ 1470.875608][T20565] 9p: Bad value for 'rfdno' [ 1471.063980][T18075] Bluetooth: hci2: command 0x0406 tx timeout [ 1471.966401][T12154] usb usb40-port1: attempt power cycle [ 1472.101074][ T5813] Bluetooth: hci1: command 0x0406 tx timeout [ 1472.101121][T18075] Bluetooth: hci6: command 0x0406 tx timeout [ 1472.175884][T18075] Bluetooth: hci3: command 0x0406 tx timeout [ 1472.350401][T20608] netlink: 'syz.8.4633': attribute type 3 has an invalid length. [ 1472.350423][T20608] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4633'. [ 1472.650118][T12154] usb usb40-port1: unable to enumerate USB device [ 1476.377693][T12154] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1476.572951][T12154] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1476.572984][T12154] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1476.573019][T12154] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1476.573042][T12154] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1476.623813][T12154] usb 6-1: config 0 descriptor?? [ 1477.242186][T12154] cp2112 0003:10C4:EA90.001E: unknown main item tag 0x0 [ 1477.242222][T12154] cp2112 0003:10C4:EA90.001E: unknown main item tag 0x0 [ 1477.242264][T12154] cp2112 0003:10C4:EA90.001E: unknown main item tag 0x0 [ 1477.242292][T12154] cp2112 0003:10C4:EA90.001E: unknown main item tag 0x0 [ 1477.242320][T12154] cp2112 0003:10C4:EA90.001E: unknown main item tag 0x0 [ 1477.242349][T12154] cp2112 0003:10C4:EA90.001E: unknown main item tag 0x0 [ 1477.242377][T12154] cp2112 0003:10C4:EA90.001E: unknown main item tag 0x0 [ 1477.300780][T12154] cp2112 0003:10C4:EA90.001E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 1477.428422][T20646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1477.430917][T20646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1477.435054][T12154] cp2112 0003:10C4:EA90.001E: error requesting version [ 1477.480273][T12154] cp2112 0003:10C4:EA90.001E: probe with driver cp2112 failed with error -71 [ 1477.512115][T12154] usb 6-1: USB disconnect, device number 68 [ 1477.580241][T20649] fido_id[20649]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1479.346453][ T37] audit: type=1326 audit(1770910767.435:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20683 comm="syz.3.4665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb24b03d399 code=0x7ffc0000 [ 1479.373115][ T37] audit: type=1326 audit(1770910767.435:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20683 comm="syz.3.4665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb24b03d399 code=0x7ffc0000 [ 1479.373163][ T37] audit: type=1326 audit(1770910767.435:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20683 comm="syz.3.4665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb24b03d399 code=0x7ffc0000 [ 1479.425322][ T37] audit: type=1326 audit(1770910767.463:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20683 comm="syz.3.4665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb24b03d399 code=0x7ffc0000 [ 1479.425681][ T37] audit: type=1326 audit(1770910767.519:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20683 comm="syz.3.4665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb24b03d399 code=0x7ffc0000 [ 1479.429032][ T37] audit: type=1326 audit(1770910767.519:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20683 comm="syz.3.4665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb24b03d399 code=0x7ffc0000 [ 1479.429079][ T37] audit: type=1326 audit(1770910767.519:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20683 comm="syz.3.4665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb24b03d399 code=0x7ffc0000 [ 1479.429121][ T37] audit: type=1326 audit(1770910767.519:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20683 comm="syz.3.4665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb24b03d399 code=0x7ffc0000 [ 1479.429461][ T37] audit: type=1326 audit(1770910767.519:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20683 comm="syz.3.4665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb24b03d399 code=0x7ffc0000 [ 1479.429776][ T37] audit: type=1326 audit(1770910767.519:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20683 comm="syz.3.4665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb24b03d399 code=0x7ffc0000 [ 1480.679922][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1480.679991][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1480.814056][T18075] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1482.689114][T20707] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4673'. [ 1485.828258][T12154] usb 6-1: new full-speed USB device number 69 using dummy_hcd [ 1485.981814][T12154] usb 6-1: device descriptor read/64, error -71 [ 1486.234023][T12154] usb 6-1: new full-speed USB device number 70 using dummy_hcd [ 1486.373071][T12154] usb 6-1: device descriptor read/64, error -71 [ 1486.500765][T12154] usb usb6-port1: attempt power cycle [ 1486.897343][T12154] usb 6-1: new full-speed USB device number 71 using dummy_hcd [ 1486.921545][T12154] usb 6-1: device descriptor read/8, error -71 [ 1487.271617][T12154] usb 6-1: new full-speed USB device number 72 using dummy_hcd [ 1487.303404][T12154] usb 6-1: device descriptor read/8, error -71 [ 1487.465059][T12154] usb usb6-port1: unable to enumerate USB device [ 1489.149752][ T5813] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1489.395525][ T5813] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1489.397029][ T5813] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1489.407328][ T5813] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1489.420321][ T5813] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1489.714282][T20751] chnl_net:caif_netlink_parms(): no params data found [ 1489.847608][T20751] bridge0: port 1(bridge_slave_0) entered blocking state [ 1489.847770][T20751] bridge0: port 1(bridge_slave_0) entered disabled state [ 1489.848546][T20751] bridge_slave_0: entered allmulticast mode [ 1489.850944][T20751] bridge_slave_0: entered promiscuous mode [ 1489.854257][T20751] bridge0: port 2(bridge_slave_1) entered blocking state [ 1489.854439][T20751] bridge0: port 2(bridge_slave_1) entered disabled state [ 1489.854602][T20751] bridge_slave_1: entered allmulticast mode [ 1489.857085][T20751] bridge_slave_1: entered promiscuous mode [ 1489.958825][T20751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1489.963192][T20751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1490.024508][T20751] team0: Port device team_slave_0 added [ 1490.027944][T20751] team0: Port device team_slave_1 added [ 1490.077377][T20751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1490.077392][T20751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1490.077419][T20751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1490.079599][T20751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1490.079612][T20751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1490.079639][T20751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1490.400044][T20751] hsr_slave_0: entered promiscuous mode [ 1490.429822][T20751] hsr_slave_1: entered promiscuous mode [ 1490.441295][T20751] debugfs: 'hsr0' already exists in 'hsr' [ 1490.441320][T20751] Cannot create hsr debugfs directory [ 1490.884710][T12154] usb 9-1: new high-speed USB device number 62 using dummy_hcd [ 1491.047035][T12154] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1491.047078][T12154] usb 9-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 1491.047101][T12154] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1491.098786][T12154] usb 9-1: config 0 descriptor?? [ 1491.173126][ T5782] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1491.180848][T20596] Set syz1 is full, maxelem 65536 reached [ 1491.333394][ T5782] usb 4-1: Using ep0 maxpacket: 8 [ 1491.337802][ T5782] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1491.337825][ T5782] usb 4-1: config 179 has no interface number 0 [ 1491.337868][ T5782] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1491.338111][ T5782] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1491.338140][ T5782] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1491.338164][ T5782] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1491.338190][ T5782] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1491.338460][ T5782] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1491.338485][ T5782] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1491.480983][T12154] usbhid 9-1:0.0: can't add hid device: -71 [ 1491.481162][T12154] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1491.495483][T20765] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1491.515726][T12154] usb 9-1: USB disconnect, device number 62 [ 1491.675694][ T5813] Bluetooth: hci4: command tx timeout [ 1492.075356][ T808] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input63 [ 1492.258384][T20765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1492.390798][T20765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1492.699004][ T5934] usb 4-1: USB disconnect, device number 63 [ 1492.699147][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1492.699506][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1493.899406][ T5813] Bluetooth: hci4: command tx timeout [ 1494.006246][ T5934] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 1494.682705][ T5934] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1494.682739][ T5934] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1494.682761][ T5934] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1494.682787][ T5934] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1494.682818][ T5934] usb 4-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 1494.682840][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1494.694199][ T5934] usb 4-1: config 0 descriptor?? [ 1494.756786][ T5782] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 1494.914854][ T5782] usb 8-1: Using ep0 maxpacket: 16 [ 1494.918240][ T5782] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1494.918263][ T5782] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1494.921139][ T5782] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1494.921165][ T5782] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1494.921184][ T5782] usb 8-1: Product: syz [ 1494.921198][ T5782] usb 8-1: Manufacturer: syz [ 1494.921212][ T5782] usb 8-1: SerialNumber: syz [ 1495.512656][ T5934] nintendo 0003:057E:2009.001F: item fetching failed at offset 3/5 [ 1495.540383][ T5782] usb 8-1: 0:2 : does not exist [ 1495.591923][ T5934] nintendo 0003:057E:2009.001F: HID parse failed [ 1495.605542][ T5934] nintendo 0003:057E:2009.001F: probe - fail = -22 [ 1495.605657][ T5934] nintendo 0003:057E:2009.001F: probe with driver nintendo failed with error -22 [ 1495.650412][ T5934] usb 4-1: USB disconnect, device number 64 [ 1495.759974][ T5782] usb 8-1: USB disconnect, device number 34 [ 1496.124229][ T5813] Bluetooth: hci4: command tx timeout [ 1497.625977][ T1496] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1497.626012][ T1496] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 33686 - 0 [ 1498.346663][ T5813] Bluetooth: hci4: command tx timeout [ 1502.352759][T20867] netlink: 'syz.8.4718': attribute type 5 has an invalid length. [ 1502.352780][T20867] netlink: 45 bytes leftover after parsing attributes in process `syz.8.4718'. [ 1503.349704][ T5782] usb 9-1: new full-speed USB device number 63 using dummy_hcd [ 1503.511940][ T5782] usb 9-1: too many endpoints for config 0 interface 0 altsetting 254: 254, using maximum allowed: 30 [ 1503.511984][ T5782] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1503.512008][ T5782] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 1503.512033][ T5782] usb 9-1: config 0 interface 0 altsetting 254 has 2 endpoint descriptors, different from the interface descriptor's value: 254 [ 1503.512059][ T5782] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1503.512091][ T5782] usb 9-1: New USB device found, idVendor=1e71, idProduct=200e, bcdDevice= 0.00 [ 1503.512112][ T5782] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1503.592412][ T5782] usb 9-1: config 0 descriptor?? [ 1503.593749][T20884] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1506.467074][ T5782] usb 9-1: string descriptor 0 read error: -71 [ 1506.515589][ T5782] usbhid 9-1:0.0: can't add hid device: -71 [ 1506.515696][ T5782] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1506.521048][ T5782] usb 9-1: USB disconnect, device number 63 [ 1506.845316][T20905] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4724'. [ 1509.447274][ T1496] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1509.447328][ T1496] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 33686 - 0 [ 1510.196588][T20944] fuse: root generation should be zero [ 1511.090191][T20958] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4743'. [ 1521.212733][T21049] tipc: Cannot configure node identity twice [ 1524.239140][T12154] usb 9-1: new high-speed USB device number 64 using dummy_hcd [ 1524.399745][T12154] usb 9-1: Using ep0 maxpacket: 32 [ 1524.426818][T12154] usb 9-1: config 0 has an invalid interface number: 235 but max is 0 [ 1524.426845][T12154] usb 9-1: config 0 has no interface number 0 [ 1524.426879][T12154] usb 9-1: config 0 interface 235 has no altsetting 0 [ 1524.430531][T12154] usb 9-1: New USB device found, idVendor=bfbc, idProduct=139d, bcdDevice=c6.48 [ 1524.430560][T12154] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1524.430581][T12154] usb 9-1: Product: syz [ 1524.430597][T12154] usb 9-1: Manufacturer: syz [ 1524.430613][T12154] usb 9-1: SerialNumber: syz [ 1524.499509][T12154] usb 9-1: config 0 descriptor?? [ 1524.504638][T12154] cdc_wdm 9-1:0.235: probe with driver cdc_wdm failed with error -22 [ 1524.743526][T20415] usb 9-1: USB disconnect, device number 64 [ 1527.418664][T21082] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1527.430269][T21082] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1527.431638][T21082] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1527.433013][T21082] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1527.433724][T21082] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1529.316157][T21081] chnl_net:caif_netlink_parms(): no params data found [ 1529.488157][T21081] bridge0: port 1(bridge_slave_0) entered blocking state [ 1529.488341][T21081] bridge0: port 1(bridge_slave_0) entered disabled state [ 1529.488514][T21081] bridge_slave_0: entered allmulticast mode [ 1529.490967][T21081] bridge_slave_0: entered promiscuous mode [ 1529.494855][T21081] bridge0: port 2(bridge_slave_1) entered blocking state [ 1529.495032][T21081] bridge0: port 2(bridge_slave_1) entered disabled state [ 1529.495489][T21081] bridge_slave_1: entered allmulticast mode [ 1529.497854][T21081] bridge_slave_1: entered promiscuous mode [ 1529.617597][T21081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1529.621432][T21081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1529.654207][T21082] Bluetooth: hci5: command tx timeout [ 1529.706305][T21081] team0: Port device team_slave_0 added [ 1529.711645][T21081] team0: Port device team_slave_1 added [ 1529.758760][T21081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1529.758775][T21081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1529.758804][T21081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1529.761109][T21081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1529.761123][T21081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1529.761155][T21081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1529.913643][T21081] hsr_slave_0: entered promiscuous mode [ 1529.914807][T21081] hsr_slave_1: entered promiscuous mode [ 1529.927883][T21081] debugfs: 'hsr0' already exists in 'hsr' [ 1529.927911][T21081] Cannot create hsr debugfs directory [ 1530.427290][ T5813] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1530.443407][ T5813] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1530.444784][ T5813] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1530.449078][ T5813] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1530.449954][ T5813] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1532.094554][ T5813] Bluetooth: hci5: command tx timeout [ 1532.309427][T21103] input: syz1 as /devices/virtual/input/input64 [ 1532.727577][ T5813] Bluetooth: hci6: command tx timeout [ 1534.006375][T21091] chnl_net:caif_netlink_parms(): no params data found [ 1534.133818][T21091] bridge0: port 1(bridge_slave_0) entered blocking state [ 1534.134010][T21091] bridge0: port 1(bridge_slave_0) entered disabled state [ 1534.134182][T21091] bridge_slave_0: entered allmulticast mode [ 1534.136749][T21091] bridge_slave_0: entered promiscuous mode [ 1534.169595][T21091] bridge0: port 2(bridge_slave_1) entered blocking state [ 1534.169778][T21091] bridge0: port 2(bridge_slave_1) entered disabled state [ 1534.169947][T21091] bridge_slave_1: entered allmulticast mode [ 1534.194910][T21091] bridge_slave_1: entered promiscuous mode [ 1534.247530][T21091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1534.251326][T21091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1534.267924][ T5813] Bluetooth: hci5: command tx timeout [ 1534.320612][T21091] team0: Port device team_slave_0 added [ 1534.324540][T21091] team0: Port device team_slave_1 added [ 1534.375609][T21091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1534.375624][T21091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1534.375651][T21091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1534.377636][T21091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1534.377650][T21091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1534.377676][T21091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1534.612123][T21091] hsr_slave_0: entered promiscuous mode [ 1534.614716][T21091] hsr_slave_1: entered promiscuous mode [ 1534.615520][T21091] debugfs: 'hsr0' already exists in 'hsr' [ 1534.615543][T21091] Cannot create hsr debugfs directory [ 1534.961744][ T5813] Bluetooth: hci6: command tx timeout [ 1536.490618][ T5813] Bluetooth: hci5: command tx timeout [ 1537.175064][ T5813] Bluetooth: hci6: command tx timeout [ 1539.406141][ T5813] Bluetooth: hci6: command tx timeout [ 1543.173656][T21082] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1543.177627][T21082] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1543.178873][T21082] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1543.180167][T21082] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1543.180848][T21082] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1543.700324][T21123] chnl_net:caif_netlink_parms(): no params data found [ 1544.030651][T21123] bridge0: port 1(bridge_slave_0) entered blocking state [ 1544.038193][T21123] bridge0: port 1(bridge_slave_0) entered disabled state [ 1544.038366][T21123] bridge_slave_0: entered allmulticast mode [ 1544.040936][T21123] bridge_slave_0: entered promiscuous mode [ 1545.385308][T21082] Bluetooth: hci7: command tx timeout [ 1545.918941][ T1496] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1545.918976][ T1496] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 33686 - 0 [ 1546.334787][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.334877][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.616538][T21082] Bluetooth: hci7: command tx timeout [ 1549.052131][T21123] bridge0: port 2(bridge_slave_1) entered blocking state [ 1549.052243][T21123] bridge0: port 2(bridge_slave_1) entered disabled state [ 1549.052481][T21123] bridge_slave_1: entered allmulticast mode [ 1549.055024][T21123] bridge_slave_1: entered promiscuous mode [ 1549.832471][T21082] Bluetooth: hci7: command tx timeout [ 1550.638628][T20978] bond0: (slave syz_tun): Releasing backup interface [ 1551.575896][ T5813] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1551.594804][ T5813] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1551.596159][ T5813] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1551.613487][ T5813] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1551.614223][ T5813] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1552.056080][ T5813] Bluetooth: hci7: command tx timeout [ 1552.207256][T20941] syz_tun (unregistering): left allmulticast mode [ 1552.614977][T21082] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1552.665842][T21082] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1552.731248][T21082] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1552.732373][T21082] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1552.733461][T21082] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1552.807986][T21123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1552.911318][T21123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1553.131130][T21123] team0: Port device team_slave_0 added [ 1553.134394][T21123] team0: Port device team_slave_1 added [ 1553.718695][T21123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1553.718712][T21123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1553.718739][T21123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1553.856353][T21082] Bluetooth: hci0: command tx timeout [ 1554.301802][T21123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1554.301820][T21123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1554.301847][T21123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1554.964506][T21082] Bluetooth: hci1: command tx timeout [ 1555.241462][T21123] hsr_slave_0: entered promiscuous mode [ 1555.249672][T21123] hsr_slave_1: entered promiscuous mode [ 1555.250546][T21123] debugfs: 'hsr0' already exists in 'hsr' [ 1555.250570][T21123] Cannot create hsr debugfs directory [ 1555.588713][T21150] chnl_net:caif_netlink_parms(): no params data found [ 1555.968066][T21155] chnl_net:caif_netlink_parms(): no params data found [ 1556.076648][T21082] Bluetooth: hci0: command tx timeout [ 1556.108500][T21150] bridge0: port 1(bridge_slave_0) entered blocking state [ 1556.108617][T21150] bridge0: port 1(bridge_slave_0) entered disabled state [ 1556.108827][T21150] bridge_slave_0: entered allmulticast mode [ 1556.111436][T21150] bridge_slave_0: entered promiscuous mode [ 1556.158194][T21150] bridge0: port 2(bridge_slave_1) entered blocking state [ 1556.158375][T21150] bridge0: port 2(bridge_slave_1) entered disabled state [ 1556.158565][T21150] bridge_slave_1: entered allmulticast mode [ 1556.189980][T21150] bridge_slave_1: entered promiscuous mode [ 1556.393533][T21150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1556.394687][T21155] bridge0: port 1(bridge_slave_0) entered blocking state [ 1556.394810][T21155] bridge0: port 1(bridge_slave_0) entered disabled state [ 1556.395013][T21155] bridge_slave_0: entered allmulticast mode [ 1556.440529][T21155] bridge_slave_0: entered promiscuous mode [ 1556.444681][T21155] bridge0: port 2(bridge_slave_1) entered blocking state [ 1556.444869][T21155] bridge0: port 2(bridge_slave_1) entered disabled state [ 1556.445095][T21155] bridge_slave_1: entered allmulticast mode [ 1556.447448][T21155] bridge_slave_1: entered promiscuous mode [ 1556.491865][T21150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1556.578804][T21155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1556.582605][T21155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1556.629321][T21150] team0: Port device team_slave_0 added [ 1556.638878][T21150] team0: Port device team_slave_1 added [ 1556.683067][T21155] team0: Port device team_slave_0 added [ 1556.692985][T21155] team0: Port device team_slave_1 added [ 1556.752736][T21150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1556.752751][T21150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1556.752778][T21150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1556.754814][T21150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1556.754828][T21150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1556.754854][T21150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1556.854247][T21155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1556.854263][T21155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1556.854290][T21155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1556.888702][T21155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1556.888717][T21155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1556.888743][T21155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1557.100348][T21150] hsr_slave_0: entered promiscuous mode [ 1557.101723][T21150] hsr_slave_1: entered promiscuous mode [ 1557.114609][T21150] debugfs: 'hsr0' already exists in 'hsr' [ 1557.114634][T21150] Cannot create hsr debugfs directory [ 1557.145830][T21155] hsr_slave_0: entered promiscuous mode [ 1557.147088][T21155] hsr_slave_1: entered promiscuous mode [ 1557.147963][T21155] debugfs: 'hsr0' already exists in 'hsr' [ 1557.147994][T21155] Cannot create hsr debugfs directory [ 1557.198707][T21082] Bluetooth: hci1: command tx timeout [ 1558.299616][T21082] Bluetooth: hci0: command tx timeout [ 1559.411648][T21082] Bluetooth: hci1: command tx timeout [ 1560.523259][T21082] Bluetooth: hci0: command tx timeout [ 1561.635256][T21082] Bluetooth: hci1: command tx timeout [ 1590.445711][ T5813] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1590.465178][ T5813] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1590.466520][ T5813] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1590.578688][ T5813] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1590.603339][ T5813] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1590.953277][T21213] chnl_net:caif_netlink_parms(): no params data found [ 1591.115748][T21213] bridge0: port 1(bridge_slave_0) entered blocking state [ 1591.115873][T21213] bridge0: port 1(bridge_slave_0) entered disabled state [ 1591.116208][T21213] bridge_slave_0: entered allmulticast mode [ 1591.117801][T21213] bridge_slave_0: entered promiscuous mode [ 1591.124884][T21213] bridge0: port 2(bridge_slave_1) entered blocking state [ 1591.153059][T21213] bridge0: port 2(bridge_slave_1) entered disabled state [ 1591.153454][T21213] bridge_slave_1: entered allmulticast mode [ 1591.156018][T21213] bridge_slave_1: entered promiscuous mode [ 1591.221543][T21213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1591.225457][T21213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1591.280806][T21213] team0: Port device team_slave_0 added [ 1591.284657][T21213] team0: Port device team_slave_1 added [ 1591.350026][T21213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1591.350041][T21213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1591.350065][T21213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1591.352634][T21213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1591.352648][T21213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1591.352673][T21213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1591.520491][T21213] hsr_slave_0: entered promiscuous mode [ 1591.521761][T21213] hsr_slave_1: entered promiscuous mode [ 1591.522651][T21213] debugfs: 'hsr0' already exists in 'hsr' [ 1591.522676][T21213] Cannot create hsr debugfs directory [ 1592.851766][ T5813] Bluetooth: hci2: command tx timeout [ 1594.617013][T21082] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1594.641250][T21082] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1594.642812][T21082] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1594.644221][T21082] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1594.645150][T21082] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1595.075175][ T5813] Bluetooth: hci2: command tx timeout [ 1596.642720][T21225] chnl_net:caif_netlink_parms(): no params data found [ 1596.811433][T21225] bridge0: port 1(bridge_slave_0) entered blocking state [ 1596.811615][T21225] bridge0: port 1(bridge_slave_0) entered disabled state [ 1596.811824][T21225] bridge_slave_0: entered allmulticast mode [ 1596.814641][T21225] bridge_slave_0: entered promiscuous mode [ 1596.846710][T21225] bridge0: port 2(bridge_slave_1) entered blocking state [ 1596.846891][T21225] bridge0: port 2(bridge_slave_1) entered disabled state [ 1596.847455][T21225] bridge_slave_1: entered allmulticast mode [ 1596.870581][T21225] bridge_slave_1: entered promiscuous mode [ 1596.943006][T21225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1596.962609][T21225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1597.016813][T21225] team0: Port device team_slave_0 added [ 1597.020490][T21225] team0: Port device team_slave_1 added [ 1597.043631][ T5813] Bluetooth: hci3: command tx timeout [ 1597.087059][T21225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1597.087093][T21225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1597.087123][T21225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1597.089366][T21225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1597.089380][T21225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1597.089406][T21225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1597.244632][T21225] hsr_slave_0: entered promiscuous mode [ 1597.251787][T21225] hsr_slave_1: entered promiscuous mode [ 1597.252715][T21225] debugfs: 'hsr0' already exists in 'hsr' [ 1597.252739][T21225] Cannot create hsr debugfs directory [ 1597.298930][ T5813] Bluetooth: hci2: command tx timeout [ 1599.265930][ T5813] Bluetooth: hci3: command tx timeout [ 1599.522597][ T5813] Bluetooth: hci2: command tx timeout [ 1601.489522][ T5813] Bluetooth: hci3: command tx timeout [ 1603.713275][ T5813] Bluetooth: hci3: command tx timeout [ 1607.952576][T21082] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1607.975719][T21082] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1607.977063][T21082] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1608.001240][T21082] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1608.002062][T21082] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1610.213084][T21082] Bluetooth: hci8: command tx timeout [ 1610.545678][T21235] chnl_net:caif_netlink_parms(): no params data found [ 1610.712481][T21235] bridge0: port 1(bridge_slave_0) entered blocking state [ 1610.712666][T21235] bridge0: port 1(bridge_slave_0) entered disabled state [ 1610.712868][T21235] bridge_slave_0: entered allmulticast mode [ 1610.743452][T21235] bridge_slave_0: entered promiscuous mode [ 1610.761326][T21235] bridge0: port 2(bridge_slave_1) entered blocking state [ 1610.764830][T21235] bridge0: port 2(bridge_slave_1) entered disabled state [ 1610.765448][T21235] bridge_slave_1: entered allmulticast mode [ 1610.768177][T21235] bridge_slave_1: entered promiscuous mode [ 1610.850823][T21235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1610.870222][T21235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1610.941175][T21235] team0: Port device team_slave_0 added [ 1610.945087][T21235] team0: Port device team_slave_1 added [ 1611.012266][T21235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1611.012282][T21235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1611.012308][T21235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1611.014534][T21235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1611.014548][T21235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1611.014577][T21235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1611.198820][T21235] hsr_slave_0: entered promiscuous mode [ 1611.200188][T21235] hsr_slave_1: entered promiscuous mode [ 1611.201365][T21235] debugfs: 'hsr0' already exists in 'hsr' [ 1611.201390][T21235] Cannot create hsr debugfs directory [ 1612.013213][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1612.013318][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1612.436723][T21082] Bluetooth: hci8: command tx timeout [ 1614.660372][T21082] Bluetooth: hci8: command tx timeout [ 1616.273188][ T5813] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1616.296180][ T5813] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1616.317525][ T5813] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1616.370929][ T5813] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1616.371772][ T5813] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1616.815172][T21246] chnl_net:caif_netlink_parms(): no params data found [ 1616.884061][ T5813] Bluetooth: hci8: command tx timeout [ 1617.336299][T21246] bridge0: port 1(bridge_slave_0) entered blocking state [ 1617.340724][T21246] bridge0: port 1(bridge_slave_0) entered disabled state [ 1617.340947][T21246] bridge_slave_0: entered allmulticast mode [ 1617.379063][T21246] bridge_slave_0: entered promiscuous mode [ 1617.401816][T21246] bridge0: port 2(bridge_slave_1) entered blocking state [ 1617.401993][T21246] bridge0: port 2(bridge_slave_1) entered disabled state [ 1617.402195][T21246] bridge_slave_1: entered allmulticast mode [ 1617.411312][T21082] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1617.440344][T21246] bridge_slave_1: entered promiscuous mode [ 1617.448369][T21082] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1617.540741][T21246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1617.545245][T21246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1617.627455][T21246] team0: Port device team_slave_0 added [ 1617.631197][T21246] team0: Port device team_slave_1 added [ 1617.685237][T21246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1617.685252][T21246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1617.685278][T21246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1617.707183][T21082] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1617.738894][T21082] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1617.750607][T21082] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1617.754048][T21246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1617.754062][T21246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1617.754088][T21246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1618.594931][ T5813] Bluetooth: hci9: command tx timeout [ 1619.463469][T21246] hsr_slave_0: entered promiscuous mode [ 1619.478864][T21246] hsr_slave_1: entered promiscuous mode [ 1619.480017][T21246] debugfs: 'hsr0' already exists in 'hsr' [ 1619.480044][T21246] Cannot create hsr debugfs directory [ 1619.980104][T21257] chnl_net:caif_netlink_parms(): no params data found [ 1620.048434][ T5813] Bluetooth: hci10: command tx timeout [ 1620.152281][T21257] bridge0: port 1(bridge_slave_0) entered blocking state [ 1620.152489][T21257] bridge0: port 1(bridge_slave_0) entered disabled state [ 1620.152703][T21257] bridge_slave_0: entered allmulticast mode [ 1620.175973][T21257] bridge_slave_0: entered promiscuous mode [ 1620.185774][T21257] bridge0: port 2(bridge_slave_1) entered blocking state [ 1620.185956][T21257] bridge0: port 2(bridge_slave_1) entered disabled state [ 1620.186154][T21257] bridge_slave_1: entered allmulticast mode [ 1620.209962][T21257] bridge_slave_1: entered promiscuous mode [ 1620.289502][T21257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1620.293804][T21257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1620.362946][T21257] team0: Port device team_slave_0 added [ 1620.366621][T21257] team0: Port device team_slave_1 added [ 1620.436118][T21257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1620.436133][T21257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1620.436160][T21257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1620.438498][T21257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1620.438513][T21257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1620.438543][T21257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1620.818611][ T5813] Bluetooth: hci9: command tx timeout [ 1622.272448][ T5813] Bluetooth: hci10: command tx timeout [ 1622.603018][T21257] hsr_slave_0: entered promiscuous mode [ 1622.616655][T21257] hsr_slave_1: entered promiscuous mode [ 1622.617608][T21257] debugfs: 'hsr0' already exists in 'hsr' [ 1622.617632][T21257] Cannot create hsr debugfs directory [ 1623.042584][ T5813] Bluetooth: hci9: command tx timeout [ 1624.495783][ T5813] Bluetooth: hci10: command tx timeout [ 1625.191511][ T5813] Bluetooth: hci4: command 0x0406 tx timeout [ 1625.265852][ T5813] Bluetooth: hci9: command tx timeout [ 1626.719543][T21082] Bluetooth: hci10: command tx timeout [ 1658.021491][T21082] Bluetooth: hci5: command 0x0406 tx timeout [ 1659.769700][ T1496] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1659.769741][ T1496] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 33686 - 0 [ 1660.085858][T21082] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1660.111392][T21082] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1660.114295][T21082] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1660.134578][T21082] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1660.136256][T21082] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1660.295005][ T5813] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1660.314485][ T5813] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1660.316169][ T5813] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1660.317342][ T5813] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1660.318337][ T5813] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1662.436654][T21082] Bluetooth: hci11: command tx timeout [ 1662.561951][T21292] Bluetooth: hci12: command tx timeout [ 1662.918890][T21276] chnl_net:caif_netlink_parms(): no params data found [ 1663.305186][T21276] bridge0: port 1(bridge_slave_0) entered blocking state [ 1663.305304][T21276] bridge0: port 1(bridge_slave_0) entered disabled state [ 1663.305521][T21276] bridge_slave_0: entered allmulticast mode [ 1663.308143][T21276] bridge_slave_0: entered promiscuous mode [ 1663.311404][T21273] chnl_net:caif_netlink_parms(): no params data found [ 1663.381118][T21276] bridge0: port 2(bridge_slave_1) entered blocking state [ 1663.381228][T21276] bridge0: port 2(bridge_slave_1) entered disabled state [ 1663.381454][T21276] bridge_slave_1: entered allmulticast mode [ 1663.410692][T21276] bridge_slave_1: entered promiscuous mode [ 1663.494937][T21292] Bluetooth: hci6: command 0x0406 tx timeout [ 1663.577626][T21276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1663.604962][T21276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1663.919918][T21276] team0: Port device team_slave_0 added [ 1663.987409][T21276] team0: Port device team_slave_1 added [ 1664.087210][T21273] bridge0: port 1(bridge_slave_0) entered blocking state [ 1664.087384][T21273] bridge0: port 1(bridge_slave_0) entered disabled state [ 1664.087916][T21273] bridge_slave_0: entered allmulticast mode [ 1664.090401][T21273] bridge_slave_0: entered promiscuous mode [ 1664.501930][T21273] bridge0: port 2(bridge_slave_1) entered blocking state [ 1664.502062][T21273] bridge0: port 2(bridge_slave_1) entered disabled state [ 1664.502286][T21273] bridge_slave_1: entered allmulticast mode [ 1664.504873][T21273] bridge_slave_1: entered promiscuous mode [ 1664.511463][T21276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1664.511478][T21276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1664.511504][T21276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1664.577400][T21276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1664.577438][T21276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1664.577508][T21276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1664.607712][ T5813] Bluetooth: hci11: command tx timeout [ 1664.783756][ T5813] Bluetooth: hci12: command tx timeout [ 1665.795484][T21273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1665.800219][T21273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1665.872335][T21276] hsr_slave_0: entered promiscuous mode [ 1665.873946][T21276] hsr_slave_1: entered promiscuous mode [ 1665.874951][T21276] debugfs: 'hsr0' already exists in 'hsr' [ 1665.874974][T21276] Cannot create hsr debugfs directory [ 1665.967745][T21273] team0: Port device team_slave_0 added [ 1665.971604][T21273] team0: Port device team_slave_1 added [ 1666.299250][T21273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1666.299281][T21273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1666.299311][T21273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1666.302314][T21273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1666.302328][T21273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1666.302355][T21273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1666.671964][T21273] hsr_slave_0: entered promiscuous mode [ 1666.673543][T21273] hsr_slave_1: entered promiscuous mode [ 1666.693911][T21273] debugfs: 'hsr0' already exists in 'hsr' [ 1666.693937][T21273] Cannot create hsr debugfs directory [ 1666.830740][ T5813] Bluetooth: hci11: command tx timeout [ 1667.001664][ T5813] Bluetooth: hci12: command tx timeout [ 1669.054254][ T5813] Bluetooth: hci11: command tx timeout [ 1669.225271][ T5813] Bluetooth: hci12: command tx timeout [ 1672.447848][T18075] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1672.466491][T18075] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1672.467902][T18075] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1672.469522][T18075] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1672.470424][T18075] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1672.858237][T21344] chnl_net:caif_netlink_parms(): no params data found [ 1673.227121][T21344] bridge0: port 1(bridge_slave_0) entered blocking state [ 1673.244917][T21344] bridge0: port 1(bridge_slave_0) entered disabled state [ 1673.245204][T21344] bridge_slave_0: entered allmulticast mode [ 1673.247861][T21344] bridge_slave_0: entered promiscuous mode [ 1673.259810][T21344] bridge0: port 2(bridge_slave_1) entered blocking state [ 1673.266282][T21344] bridge0: port 2(bridge_slave_1) entered disabled state [ 1673.266507][T21344] bridge_slave_1: entered allmulticast mode [ 1673.269107][T21344] bridge_slave_1: entered promiscuous mode [ 1673.395438][T21344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1673.402833][T21344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1674.451096][T18075] Bluetooth: hci7: command 0x0406 tx timeout [ 1674.709924][T18075] Bluetooth: hci13: command tx timeout [ 1675.026645][T21344] team0: Port device team_slave_0 added [ 1675.029382][T21344] team0: Port device team_slave_1 added [ 1675.483143][T21344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1675.483159][T21344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1675.483185][T21344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1675.485999][T21344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1675.486010][T21344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1675.486028][T21344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1675.693345][T21344] hsr_slave_0: entered promiscuous mode [ 1675.694541][T21344] hsr_slave_1: entered promiscuous mode [ 1675.716227][T21344] debugfs: 'hsr0' already exists in 'hsr' [ 1675.716253][T21344] Cannot create hsr debugfs directory [ 1676.922399][ T5813] Bluetooth: hci13: command tx timeout [ 1677.703370][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1677.703444][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1679.157146][ T5813] Bluetooth: hci13: command tx timeout [ 1681.382114][ T5813] Bluetooth: hci13: command tx timeout [ 1681.635049][T18075] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1681.657190][T18075] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1681.669227][T18075] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1681.723171][T18075] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1681.723981][T18075] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1682.136251][T21356] chnl_net:caif_netlink_parms(): no params data found [ 1682.299897][T21356] bridge0: port 1(bridge_slave_0) entered blocking state [ 1682.300100][T21356] bridge0: port 1(bridge_slave_0) entered disabled state [ 1682.300346][T21356] bridge_slave_0: entered allmulticast mode [ 1682.303165][T21356] bridge_slave_0: entered promiscuous mode [ 1682.306833][T21356] bridge0: port 2(bridge_slave_1) entered blocking state [ 1682.307032][T21356] bridge0: port 2(bridge_slave_1) entered disabled state [ 1682.307271][T21356] bridge_slave_1: entered allmulticast mode [ 1682.310015][T21356] bridge_slave_1: entered promiscuous mode [ 1682.390087][T21356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1682.395201][T21356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1682.436961][T21356] team0: Port device team_slave_0 added [ 1682.445651][T21356] team0: Port device team_slave_1 added [ 1682.516397][T21356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1682.516413][T21356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1682.516438][T21356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1682.525328][T21356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1682.525342][T21356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1682.525368][T21356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1682.697550][T21356] hsr_slave_0: entered promiscuous mode [ 1682.699037][T21356] hsr_slave_1: entered promiscuous mode [ 1682.700131][T21356] debugfs: 'hsr0' already exists in 'hsr' [ 1682.700155][T21356] Cannot create hsr debugfs directory [ 1683.066340][T18075] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1683.087716][T18075] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1683.089059][T18075] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1683.093912][T18075] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1683.096756][T18075] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1683.936273][T21082] Bluetooth: hci14: command tx timeout [ 1685.304246][T21082] Bluetooth: hci15: command tx timeout [ 1685.399848][T21082] Bluetooth: hci0: command 0x0406 tx timeout [ 1685.403406][T21082] Bluetooth: hci1: command 0x0406 tx timeout [ 1686.159807][T18075] Bluetooth: hci14: command tx timeout [ 1687.527539][ T5813] Bluetooth: hci15: command tx timeout [ 1687.974035][T21368] chnl_net:caif_netlink_parms(): no params data found [ 1688.173780][T21368] bridge0: port 1(bridge_slave_0) entered blocking state [ 1688.173990][T21368] bridge0: port 1(bridge_slave_0) entered disabled state [ 1688.174225][T21368] bridge_slave_0: entered allmulticast mode [ 1688.176942][T21368] bridge_slave_0: entered promiscuous mode [ 1688.188311][T21368] bridge0: port 2(bridge_slave_1) entered blocking state [ 1688.188739][T21368] bridge0: port 2(bridge_slave_1) entered disabled state [ 1688.189286][T21368] bridge_slave_1: entered allmulticast mode [ 1688.197656][T21368] bridge_slave_1: entered promiscuous mode [ 1688.258494][T21368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1688.263177][T21368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1688.333642][T21368] team0: Port device team_slave_0 added [ 1688.337407][T21368] team0: Port device team_slave_1 added [ 1688.383630][ T5813] Bluetooth: hci14: command tx timeout [ 1688.393109][T21368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1688.393123][T21368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1688.393149][T21368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1688.435561][T21368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1688.435599][T21368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1688.435662][T21368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1688.541249][T21368] hsr_slave_0: entered promiscuous mode [ 1688.542820][T21368] hsr_slave_1: entered promiscuous mode [ 1688.550725][T21368] debugfs: 'hsr0' already exists in 'hsr' [ 1688.550779][T21368] Cannot create hsr debugfs directory [ 1689.751508][ T5813] Bluetooth: hci15: command tx timeout [ 1690.607182][ T5813] Bluetooth: hci14: command tx timeout [ 1691.979802][ T5813] Bluetooth: hci15: command tx timeout [ 1698.218860][ T38] INFO: task syz-executor:21081 blocked for more than 143 seconds. [ 1698.218889][ T38] Not tainted syzkaller #0 [ 1698.218899][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1698.218912][ T38] task:syz-executor state:D stack:22880 pid:21081 tgid:21081 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1698.218976][ T38] Call Trace: [ 1698.218987][ T38] [ 1698.219001][ T38] __schedule+0x14de/0x5210 [ 1698.219162][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 1698.219246][ T38] ? __pfx___schedule+0x10/0x10 [ 1698.219268][ T38] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 1698.219302][ T38] rt_mutex_schedule+0x76/0xf0 [ 1698.219333][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 1698.219365][ T38] ? rt_mutex_slowlock_block+0x2e9/0x680 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1698.219394][ T38] rt_mutex_slowlock+0x2dc/0x710 [ 1698.219439][ T38] ? rt_mutex_slowlock+0x1fd/0x710 [ 1698.219461][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1698.219493][ T38] ? del_device_store+0xd7/0x370 [ 1698.219597][ T38] ? del_device_store+0xd7/0x370 [ 1698.219626][ T38] ? del_device_store+0xd7/0x370 [ 1698.219647][ T38] mutex_lock_nested+0x168/0x1d0 [ 1698.219673][ T38] del_device_store+0xd7/0x370 [ 1698.219694][ T38] ? sysfs_file_kobj+0x1a/0x230 [ 1698.219784][ T38] ? __pfx_del_device_store+0x10/0x10 [ 1698.219808][ T38] ? sysfs_file_kobj+0x1e4/0x230 [ 1698.219838][ T38] ? sysfs_kf_write+0x166/0x260 [ 1698.219876][ T38] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1698.219906][ T38] kernfs_fop_write_iter+0x3b0/0x540 [ 1698.219940][ T38] vfs_write+0x629/0xba0 [ 1698.220002][ T38] ? __pfx_vfs_write+0x10/0x10 [ 1698.220024][ T38] ? do_sys_openat2+0x14c/0x200 [ 1698.220069][ T38] ? kmem_cache_free+0x185/0x690 [ 1698.220186][ T38] ksys_write+0x156/0x270 [ 1698.220208][ T38] ? __pfx_ksys_write+0x10/0x10 [ 1698.220239][ T38] do_syscall_64+0x14d/0xf80 [ 1698.220313][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1698.220354][ T38] ? trace_irq_disable+0x37/0x100 [ 1698.220396][ T38] ? clear_bhb_loop+0x40/0x90 [ 1698.220420][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1698.220440][ T38] RIP: 0033:0x7f6c3bd5c84e [ 1698.220463][ T38] RSP: 002b:00007ffd1af703a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1698.220484][ T38] RAX: ffffffffffffffda RBX: 000055555a283500 RCX: 00007f6c3bd5c84e [ 1698.220500][ T38] RDX: 0000000000000001 RSI: 00007ffd1af70430 RDI: 0000000000000005 [ 1698.220513][ T38] RBP: 00007f6c3be330e6 R08: 0000000000000000 R09: 0000000000000000 [ 1698.220527][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1698.220540][ T38] R13: 00007ffd1af70430 R14: 00007f6c3cb44620 R15: 0000000000000003 [ 1698.220572][ T38] [ 1698.220584][ T38] INFO: task syz-executor:21091 blocked for more than 143 seconds. [ 1698.220599][ T38] Not tainted syzkaller #0 [ 1698.220609][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1698.220619][ T38] task:syz-executor state:D stack:22912 pid:21091 tgid:21091 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1698.220674][ T38] Call Trace: [ 1698.220681][ T38] [ 1698.220694][ T38] __schedule+0x14de/0x5210 [ 1698.220719][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 1698.220757][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 1698.220790][ T38] ? __pfx___schedule+0x10/0x10 [ 1698.220828][ T38] rt_mutex_schedule+0x76/0xf0 [ 1698.220848][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 1698.220885][ T38] rt_mutex_slowlock+0x2dc/0x710 [ 1698.220909][ T38] ? rt_mutex_slowlock+0x1fd/0x710 [ 1698.220931][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1698.220962][ T38] ? del_device_store+0xd7/0x370 [ 1698.220990][ T38] ? del_device_store+0xd7/0x370 [ 1698.221019][ T38] ? del_device_store+0xd7/0x370 [ 1698.221040][ T38] mutex_lock_nested+0x168/0x1d0 [ 1698.221065][ T38] del_device_store+0xd7/0x370 [ 1698.221088][ T38] ? sysfs_file_kobj+0x1a/0x230 [ 1698.221118][ T38] ? __pfx_del_device_store+0x10/0x10 [ 1698.221142][ T38] ? sysfs_file_kobj+0x1e4/0x230 [ 1698.221171][ T38] ? sysfs_kf_write+0x166/0x260 [ 1698.221204][ T38] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1698.221231][ T38] kernfs_fop_write_iter+0x3b0/0x540 [ 1698.221265][ T38] vfs_write+0x629/0xba0 [ 1698.221292][ T38] ? __pfx_vfs_write+0x10/0x10 [ 1698.221314][ T38] ? do_sys_openat2+0x14c/0x200 [ 1698.221338][ T38] ? kmem_cache_free+0x185/0x690 [ 1698.221375][ T38] ksys_wri[ 1698.221375][ T38] ksys_write+0x156/0x270 [ 1698.221404][ T38] ? __pfx_ksys_write+0x10/0x10 [ 1698.221434][ T38] do_syscall_64+0x14d/0xf80 [ 1698.221459][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1698.221479][ T38] ? trace_irq_disable+0x37/0x100 [ 1698.221495][ T38] ? clear_bhb_loop+0x40/0x90 [ 1698.221519][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1698.221539][ T38] RIP: 0033:0x7fd0e0efc84e [ 1698.221555][ T38] RSP: 002b:00007ffce8860ac8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1698.221575][ T38] RAX: ffffffffffffffda RBX: 0000555564f08500 RCX: 00007fd0e0efc84e [ 1698.221590][ T38] RDX: 0000000000000001 RSI: 00007ffce8860b50 RDI: 0000000000000005 [ 1698.221603][ T38] RBP: 00007fd0e0fd30e6 R08: 0000000000000000 R09: 0000000000000000 [ 1698.221617][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1698.221629][ T38] R13: 00007ffce8860b50 R14: 00007fd0e1ce4620 R15: 0000000000000003 [ 1698.221660][ T38] [ 1698.221715][ T38] [ 1698.221715][ T38] Showing all locks held in the system: [ 1698.221726][ T38] 4 locks held by rcuc/0/20: [ 1698.221740][ T38] 1 lock held by khungtaskd/38: [ 1698.221751][ T38] #0: ffffffff8dbcd480 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1698.221827][ T38] 6 locks held by kworker/u8:7/1496: [ 1698.221839][ T38] #0: ffff88801b289138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 1698.221889][ T38] #1: ffffc900055c7c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 1698.221937][ T38] #2: ffffffff8ef3f800 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xfe/0x7b0 [ 1698.222044][ T38] #3: ffff88805cecd0d8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x117/0x3f0 [ 1698.222142][ T38] #4: ffff888037f6a300 (&devlink->lock_key#19){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x3f0 [ 1698.222201][ T38] #5: ffffffff8dbd36f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1698.222267][ T38] 2 locks held by getty/5555: [ 1698.222279][ T38] #0: ffff8880368970a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1698.222376][ T38] #1: ffffc90003e762e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13c0 [ 1698.222469][ T38] 7 locks held by syz-executor/20751: [ 1698.222481][ T38] #0: ffff888032ae6480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1698.222529][ T38] #1: ffff88805c5b1478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1698.222582][ T38] #2: ffff8880282de1e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1698.222639][ T38] #3: ffffffff8e7bc838 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1698.222689][ T38] #4: ffff88805d40a0d8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870 [ 1698.222774][ T38] #5: ffff888023e50300 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 1698.222853][ T38] #6: ffffffff8dbd36f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1698.222900][ T38] 4 locks held by syz-executor/21081: [ 1698.222912][ T38] #0: ffff888032ae6480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1698.222966][ T38] #1: ffff88803bb7e878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1698.223019][ T38] #2: ffff8880282de1e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1698.223077][ T38] #3: ffffffff8e7bc838 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1698.223127][ T38] 4 locks held by syz-executor/21091: [ 1698.223139][ T38] #0: ffff888032ae6480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1698.223187][ T38] #1: ffff88803a63fc78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1698.223240][ T38] #2: ffff8880282de1e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1698.223296][ T38] #3: ffffffff8e7bc838 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1698.223348][ T38] 1 lock held by syz.7.4781/21119: [ 1698.223360][ T38] #0: ffffffff8dbd36f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1698.223412][ T38] 4 locks held by syz-executor/21123: [ 1698.223424][ T38] #0: ffff888032ae6480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1698.223472][ T38] #1: ffff88805c596478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1698.223525][ T38] #2: ffff8880282de1e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1698.223581][ T38] #3: ffffffff8e7bc838 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1698.223632][ T38] 4 locks held by syz-executor/21150: [ 1698.223644][ T38] #0: ffff888032ae6480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1698.223692][ T38] #1: ffff88806d052078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1698.223745][ T38] #2: ffff8880282de1e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1698.223802][ T38] #3: ffffffff8e7bc838 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1698.223854][ T38] 4 locks held by syz-executor/21155: [ 1698.223866][ T38] #0: ffff888032ae6480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1698.223913][ T38] #1: ffff88802521b478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1698.223965][ T38] #2: ffff8880282de1e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1698.224022][ T38] #3: ffffffff8e7bc838 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1698.224073][ T38] 4 locks held by syz-executor/21213: [ 1698.224085][ T38] #0: ffff888032ae6480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1698.224131][ T38] #1: ffff8880389a5078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1698.224184][ T38] #2: ffff8880282de1e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1698.224238][ T38] #3: ffffffff8e7bc838 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1698.224287][ T38] 4 locks held by syz-executor/21225: [ 1698.224299][ T38] #0: ffff888032ae6480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1698.224346][ T38] #1: ffff88803855c878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1698.224402][ T38] #2: ffff8880282de1e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1698.224459][ T38] #3: ffffffff8e7bc838 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1698.224510][ T38] 4 locks held by syz-executor/21235: [ 1698.224521][ T38] #0: ffff888032ae6480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1698.224569][ T38] #1: ffff88805e0c8478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1698.224621][ T38] #2: ffff8880282de1e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1698.224677][ T38] #3: ffffffff8e7bc838 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1698.224728][ T38] 4 locks held by syz-executor/21246: [ 1698.224740][ T38] #0: ffff888032ae6480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1698.224787][ T38] #1: ffff88803fafe478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1698.224839][ T38] #2: ffff8880282de1e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1698.224896][ T38] #3: ffffffff8e7bc838 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1698.224947][ T38] 4 locks held by syz-executor/21257: [ 1698.224959][ T38] #0: ffff888032ae6480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1698.225007][ T38] #1: ffff88805e35b078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1698.225059][ T38] #2: ffff8880282de1e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1698.225116][ T38] #3: ffffffff8e7bc838 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1698.225167][ T38] 4 locks held by syz-executor/21273: [ 1698.225179][ T38] #0: ffff888032ae6480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1698.225225][ T38] #1: ffff88805aca3878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1698.225276][ T38] #2: ffff8880282de1e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1698.225333][ T38] #3: ffffffff8e7bc838 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1698.225382][ T38] 4 locks held by syz-executor/21276: [ 1698.225399][ T38] #0: ffff888032ae6480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1698.225446][ T38] #1: ffff88803fafd878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1698.225497][ T38] #2: ffff8880282de1e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1698.225552][ T38] #3: ffffffff8e7bc838 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1698.225603][ T38] 4 locks held by syz-executor/21344: [ 1698.225615][ T38] #0: ffff888032ae6480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1698.225661][ T38] #1: ffff88806e6ea878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1698.225712][ T38] #2: ffff8880282de1e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1698.225767][ T38] #3: ffffffff8e7bc838 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1698.225817][ T38] 4 locks held by syz-executor/21356: [ 1698.225829][ T38] #0: ffff888032ae6480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1698.225875][ T38] #1: ffff888093a08078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1698.225925][ T38] #2: ffff8880282de1e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1698.225980][ T38] #3: ffffffff8e7bc838 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1698.226030][ T38] 4 locks held by syz-executor/21368: [ 1698.226041][ T38] #0: ffff888032ae6480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1698.226088][ T38] #1: ffff88804b074878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1698.226138][ T38] #2: ffff8880282de1e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1698.226195][ T38] #3: ffffffff8e7bc838 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1698.226244][ T38] [ 1698.226250][ T38] ============================================= [ 1698.226250][ T38] [ 1698.226266][ T38] NMI backtrace for cpu 1 [ 1698.226286][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1698.226307][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1698.226319][ T38] Call Trace: [ 1698.226325][ T38] [ 1698.226339][ T38] dump_stack_lvl+0xe8/0x150 [ 1698.226374][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 1698.226422][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1698.226457][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1698.226481][ T38] sys_info+0x135/0x170 [ 1698.226508][ T38] watchdog+0xf90/0xfe0 [ 1698.226531][ T38] ? watchdog+0x209/0xfe0 [ 1698.226555][ T38] kthread+0x388/0x470 [ 1698.226583][ T38] ? __pfx_watchdog+0x10/0x10 [ 1698.226599][ T38] ? __pfx_kthread+0x10/0x10 [ 1698.226628][ T38] ret_from_fork+0x51e/0xb90 [ 1698.226662][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1698.226685][ T38] ? __switch_to+0xc7d/0x1400 [ 1698.226719][ T38] ? __pfx_kthread+0x10/0x10 [ 1698.226748][ T38] ret_from_fork_asm+0x1a/0x30 [ 1698.226790][ T38] [ 1698.226798][ T38] Sending NMI from CPU 1 to CPUs 0: [ 1698.226829][ C0] NMI backtrace for cpu 0 [ 1698.226842][ C0] CPU: 0 UID: 0 PID: 20 Comm: rcuc/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1698.226861][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1698.226871][ C0] RIP: 0010:NF_HOOK+0x1c4/0x3c0 [ 1698.226940][ C0] Code: 00 00 e8 1f b3 4c f8 eb 05 e8 18 b3 4c f8 4d 85 f6 0f 84 83 00 00 00 4c 8d 6c 24 60 e8 05 b3 4c f8 43 c7 44 3c 04 00 00 00 00 <66> 43 c7 44 3c 08 00 00 48 c7 44 24 60 00 02 00 00 88 5c 24 60 48 [ 1698.226955][ C0] RSP: 0018:ffffc900001975c0 EFLAGS: 00000246 [ 1698.226969][ C0] RAX: ffffffff8976627b RBX: 0000000000000001 RCX: ffff88801ce90000 [ 1698.226982][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 1698.226992][ C0] RBP: ffffc900001976d0 R08: 0000000000000000 R09: 0000000000000100 [ 1698.227003][ C0] R10: 0000000000000100 R11: 0000000000000005 R12: 1ffff92000032ec0 [ 1698.227014][ C0] R13: ffffc90000197620 R14: ffff88805aaa6000 R15: dffffc0000000000 [ 1698.227027][ C0] FS: 0000000000000000(0000) GS:ffff888126595000(0000) knlGS:0000000000000000 [ 1698.227041][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1698.227052][ C0] CR2: 00007ffdf86a3d20 CR3: 000000003d538000 CR4: 00000000003526f0 [ 1698.227066][ C0] Call Trace: [ 1698.227072][ C0] [ 1698.227081][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1698.227098][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1698.227112][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1698.227126][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 1698.227151][ C0] ? skb_dst+0x4f/0xd0 [ 1698.227166][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 1698.227183][ C0] NF_HOOK+0x336/0x3c0 [ 1698.227197][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1698.227219][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1698.227234][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1698.227248][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1698.227264][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1698.227282][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 1698.227296][ C0] ? process_backlog+0x271/0xc60 [ 1698.227353][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 1698.227368][ C0] process_backlog+0x569/0xc60 [ 1698.227391][ C0] ? stack_trace_save+0xa9/0x100 [ 1698.227422][ C0] __napi_poll+0xae/0x530 [ 1698.227443][ C0] net_rx_action+0x696/0xe00 [ 1698.227472][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1698.227493][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 1698.227517][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1698.227540][ C0] handle_softirqs+0x1de/0x640 [ 1698.227570][ C0] __local_bh_enable_ip+0x170/0x2b0 [ 1698.227590][ C0] ? rcu_cpu_kthread+0x205/0x1470 [ 1698.227612][ C0] rcu_cpu_kthread+0x9e8/0x1470 [ 1698.227638][ C0] ? rcu_cpu_kthread+0x205/0x1470 [ 1698.227664][ C0] ? __pfx_rcu_cpu_kthread+0x10/0x10 [ 1698.227686][ C0] ? schedule+0x90/0x360 [ 1698.227708][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 1698.227728][ C0] smpboot_thread_fn+0x541/0xa50 [ 1698.227750][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 1698.227774][ C0] kthread+0x388/0x470 [ 1698.227796][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1698.227816][ C0] ? __pfx_kthread+0x10/0x10 [ 1698.227844][ C0] ret_from_fork+0x51e/0xb90 [ 1698.227881][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1698.227901][ C0] ? __switch_to+0xc7d/0x1400 [ 1698.227920][ C0] ? __pfx_kthread+0x10/0x10 [ 1698.227945][ C0] ret_from_fork_asm+0x1a/0x30 [ 1698.227984][ C0] [ 1698.709825][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1698.709850][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1698.709873][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1698.709886][ T38] Call Trace: [ 1698.709894][ T38] [ 1698.709903][ T38] vpanic+0x1e0/0x670 [ 1698.709937][ T38] panic+0xc5/0xd0 [ 1698.709965][ T38] ? __pfx_panic+0x10/0x10 [ 1698.709996][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 1698.710024][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1698.710050][ T38] watchdog+0xfda/0xfe0 [ 1698.710073][ T38] ? watchdog+0x209/0xfe0 [ 1698.710105][ T38] kthread+0x388/0x470 [ 1698.710132][ T38] ? __pfx_watchdog+0x10/0x10 [ 1698.710149][ T38] ? __pfx_kthread+0x10/0x10 [ 1698.710179][ T38] ret_from_fork+0x51e/0xb90 [ 1698.710207][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1698.710230][ T38] ? __switch_to+0xc7d/0x1400 [ 1698.710254][ T38] ? __pfx_kthread+0x10/0x10 [ 1698.710284][ T38] ret_from_fork_asm+0x1a/0x30 [ 1698.710326][ T38] [ 1698.710926][ T38] Kernel Offset: disabled