last executing test programs: 7m49.006790818s ago: executing program 2 (id=3): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0xb00, &(0x7f0000000440)={&(0x7f0000003580)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0xb00, r3, {0xffe0, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x34, 0x2, [@TCA_CGROUP_EMATCHES={0x30, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb}}, @TCA_EMATCH_TREE_LIST={0x12, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x20, 0x1, 0x0, 0x0, {{0xe37, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x97fa49b1e96162f3}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}, 0x1, 0xb00000000000000, 0x0, 0x90}, 0x40010) 7m48.268336963s ago: executing program 2 (id=13): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file0\x00', 0x111) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, 0x0) 7m47.950012813s ago: executing program 2 (id=15): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000880)={{0x2, 0x0, 0x80, {0xd000, 0xd000}}, "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", "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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7m47.432621778s ago: executing program 2 (id=17): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) 7m46.722855568s ago: executing program 32 (id=17): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) 7m24.64492993s ago: executing program 5 (id=20): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000100)='pstore\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000680)='./file1\x00', &(0x7f0000000700)='binder\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 7m24.30246745s ago: executing program 5 (id=100): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r3, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r4, 0x4) 7m9.187915435s ago: executing program 33 (id=100): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r3, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r4, 0x4) 6m32.545338783s ago: executing program 1 (id=287): r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99bfa0018", 0x5) r2 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r2) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x20844) 6m28.950010533s ago: executing program 1 (id=291): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$dsp(r1, &(0x7f00000004c0)='\x00', 0x1) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x4000000, 0x1, 0x0, 'queue0\x00'}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x882) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000180)={0x0, 0x0, {0x3, 0x1}}) write$sndseq(r4, &(0x7f0000000140)=[{0x1f, 0x0, 0x1, 0xfd, @tick, {0x0, 0xc}, {}, @raw32}], 0x1c) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x1, 0x1ff, 0x3, 0x8000000000a, 0xfc4c, 0x10000, 0xffffffffeb1cce61, 0x0, 0x0, 0x1000000000004, 0xfffffffd, 0x1}) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) 6m27.890021055s ago: executing program 1 (id=294): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r4, 0x4e, 0x0) write$binfmt_script(r2, &(0x7f0000000800)={'#! ', './file0'}, 0xb) 6m26.949630507s ago: executing program 1 (id=298): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r3 = syz_open_dev$media(&(0x7f0000000080), 0x1, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, &(0x7f0000000140)) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, 0x0) 6m25.845900977s ago: executing program 1 (id=299): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000140)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') unlink(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000600)='./file0/../file0/../file0/../file0\x00') 6m25.72221191s ago: executing program 1 (id=300): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000006c0)={0x73622a85, 0x100b}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000a40)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1101, 0x3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f00000007c0)="39addaf7419cdc6c614bb55b52477998e59cfe41f22c6dc89ad5d0faa74d46e499bea41b856fc07a4ffc61750c0b1c6525f2a5b96090afcb8433b34250c702e435677ba9c9af27dcee989d059295bfad"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000580)=[@increfs_done={0x40106308, 0x2}], 0x0, 0x0, 0x0}) 6m10.612670826s ago: executing program 34 (id=300): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000006c0)={0x73622a85, 0x100b}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000a40)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1101, 0x3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f00000007c0)="39addaf7419cdc6c614bb55b52477998e59cfe41f22c6dc89ad5d0faa74d46e499bea41b856fc07a4ffc61750c0b1c6525f2a5b96090afcb8433b34250c702e435677ba9c9af27dcee989d059295bfad"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000580)=[@increfs_done={0x40106308, 0x2}], 0x0, 0x0, 0x0}) 4m52.093583205s ago: executing program 4 (id=483): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r3, &(0x7f00000021c0), 0x5b, 0x40, 0x0) 4m49.614801551s ago: executing program 4 (id=487): prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe(&(0x7f0000000580)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) openat$kvm(0xffffffffffffff9c, 0x0, 0x20042, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) 4m47.672891966s ago: executing program 4 (id=490): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000500)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000340)=[{&(0x7f0000000000)=""/142, 0x8e}], 0x1, 0x2000000, 0xc19) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 4m45.969571495s ago: executing program 4 (id=492): rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) futex_waitv(&(0x7f0000001080), 0xaaaaaaaaaaaaaee, 0x0, &(0x7f0000001100), 0x1) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000000)={0x80, 0xa, 0xf, 0xd, 0x0, 0xb021, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000040)={0x2, 0x7, 0x2, 0x80}) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14}}, 0x98}}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff000000000000000000000000000000000000000000000000000000f0ffffff00000000000000000000000000ffffffff0000000000000000000000002000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x108) 4m43.86503397s ago: executing program 4 (id=495): socket(0x1d, 0x6, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) shmat(0x0, &(0x7f00001b0000/0x1000)=nil, 0x2000) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r3, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x5, 0x1}}, 0x20) close_range(r4, r4, 0x0) 4m42.117783207s ago: executing program 4 (id=497): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xc, 0x1a}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000001140), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpriority(0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, 0x0, 0x0) 4m22.257669891s ago: executing program 35 (id=497): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xc, 0x1a}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000001140), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpriority(0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, 0x0, 0x0) 2m37.911146415s ago: executing program 8 (id=695): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000180)=0x101, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000280)=0x8d) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0x503}, 0x20}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000340)={0x0, @local, @loopback}, &(0x7f0000000380)=0xc) getpeername$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000540)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000600)={'ip6_vti0\x00', 0x0, 0x4, 0x80, 0x3, 0x4, 0x98, @ipv4={'\x00', '\xff\xff', @remote}, @dev={0xfe, 0x80, '\x00', 0x43}, 0x1, 0x8000, 0x72, 0xa}}) sendmsg$nl_route(r2, &(0x7f0000000780)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)=@RTM_DELMDB={0x38, 0x55, 0x2, 0x70bd2b, 0x25dfdbfb, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x2, 0x4, {@in6_addr=@mcast2, 0x8edd}}}]}, 0x38}}, 0x20000010) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000440)='./file0\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x49c802, 0x81) 2m36.477322199s ago: executing program 8 (id=698): socket(0x10, 0x3, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000158c0), 0x10b8c}}, 0x0) recvmmsg$unix(r4, &(0x7f0000003800)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001600)=""/4086, 0x10b8c}], 0x1}}], 0x1, 0x0, 0x0) 2m34.340493359s ago: executing program 8 (id=703): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r1 = socket$netlink(0x10, 0x3, 0x0) socket(0x2b, 0x800, 0xfffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r5}, 0x10) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r6, 0x80044d08, &(0x7f0000000040)) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) recvmmsg(r1, &(0x7f0000003700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x140, 0x0) 2m32.625785845s ago: executing program 8 (id=707): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_CQ_RING(&(0x7f00008ba000/0x4000)=nil, 0x4000, 0x2, 0x2010, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x79, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0, 0x81, 0x1080a422012f758f}) r1 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r1, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 2m29.285656923s ago: executing program 8 (id=711): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002ac0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080", @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000021000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRES32=r3], 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), 0x0}, 0x20) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2m25.317793687s ago: executing program 8 (id=717): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$netlink(0x10, 0x3, 0x4) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40403, 0x8) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1) fanotify_mark(r5, 0x80, 0x40000000, r5, 0x0) 2m24.663246351s ago: executing program 36 (id=717): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$netlink(0x10, 0x3, 0x4) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40403, 0x8) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1) fanotify_mark(r5, 0x80, 0x40000000, r5, 0x0) 23.212304978s ago: executing program 6 (id=911): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@perf_event={0x4}}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, &(0x7f0000000480)=""/70}) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r1, &(0x7f00000002c0)='./file1\x00', 0x10, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r1, &(0x7f0000000100)='./file1\x00', r1, 0x0, 0x0) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000440)) 21.062063749s ago: executing program 6 (id=914): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r1 = dup(0xffffffffffffffff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000400)=ANY=[@ANYRES8, @ANYRESDEC, @ANYRES8, @ANYRESDEC=0x0, @ANYRESOCT, @ANYRES16, @ANYRES16=r0, @ANYRES32=r1], 0xfffffeb7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() kcmp(r3, r3, 0xe03786f831ac4a87, 0xffffffffffffffff, r2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='quota']) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000701, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0xaad82, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 19.009429363s ago: executing program 6 (id=917): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003c0007010000000000000000010000000400fc800c00018008000600ffff0000"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) epoll_create(0x5) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) write$evdev(r5, &(0x7f0000000440), 0x0) lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[@ANYBLOB="03020c"], 0xa, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) 18.187492678s ago: executing program 7 (id=918): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r3 = syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7736, 0x80, 0x3, 0x34e}, &(0x7f0000000600)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x1cd83f7c25e05491, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x1, {0x3}}) io_uring_enter(r3, 0x45bc, 0x0, 0x22, 0x0, 0x0) 16.664057949s ago: executing program 6 (id=920): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_CQ_RING(&(0x7f00008ba000/0x4000)=nil, 0x4000, 0x2, 0x2010, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x79, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0, 0x81, 0x1080a422012f758f}) r1 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r1, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 14.706659164s ago: executing program 6 (id=923): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getpid() r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x20) preadv(r3, 0x0, 0x0, 0x2, 0x0) read$FUSE(r3, 0x0, 0x0) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0xff08, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) close_range(r6, r6, 0x0) 12.40553166s ago: executing program 7 (id=926): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="150000000800000008"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r5 = syz_io_uring_setup(0x1e1e, &(0x7f0000000140)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r5, 0x48e9, 0x0, 0x2, 0x0, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r8, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @local}}}}}}, 0x0) r9 = socket$igmp(0x2, 0x3, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r9, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) 12.052435296s ago: executing program 6 (id=929): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast1, 0x4e23, 0x2, 'dh\x00', 0x1, 0x5, 0x16}, 0x2c) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82187201, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffec0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[], 0x36) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) 11.273518397s ago: executing program 37 (id=929): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast1, 0x4e23, 0x2, 'dh\x00', 0x1, 0x5, 0x16}, 0x2c) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82187201, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffec0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[], 0x36) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) 11.25109193s ago: executing program 0 (id=931): r0 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x10082) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) mknod(&(0x7f0000000080)='./bus\x00', 0x8000, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000280)={@my=0x1}) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./bus\x00', &(0x7f0000000180)='jfs\x00', 0x400080, 0x0) 11.200889679s ago: executing program 7 (id=932): openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x48a00) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) lchown(0x0, 0xee01, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x100000e, 0x4018831, 0xffffffffffffffff, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x1, 0x9, 0xb, 0xff, &(0x7f0000000540)}) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r2 = syz_io_uring_setup(0x72ae, &(0x7f0000000280)={0x0, 0x0, 0x10100, 0x0, 0x36}, &(0x7f0000000500), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x2287, &(0x7f0000000200)={0x0, 0x6e79, 0x400, 0x1, 0x1}, &(0x7f0000000080)=0x0, &(0x7f0000001540)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) r5 = epoll_create(0x5) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x7, 0x0, @private0, 0x6}, 0x1c) epoll_wait(r5, &(0x7f0000000500)=[{}], 0x1, 0x20400000) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r6, 0x0, &(0x7f0000000140)) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) epoll_create(0x6) 11.199675533s ago: executing program 3 (id=933): prctl$PR_SET_DUMPABLE(0x4, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x2d, &(0x7f0000000080)=0x3, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c03406910927c6b0b55b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfe79578e51bc53099e90f4580d760551b5b342f7cbdb9cd38bdb2209c676b2ac2deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f132020000002cbe7bc04b82d2789cb1b2b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c41146dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a42b359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780c70014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e506d1387b63112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece08ac772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2ef0ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a3f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099bdae7ed04935c2c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adeb988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ffa3c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe4a3ced846891180604b6dd2499d16d7d9158ffffff069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb0814040000007874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dbae3428d2129ecfce1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296c6a298c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f050000000000000026049fe86e09623524f390bf79b441b75fc790c58e273cd905deb28c13c1ed1c0d9cae846b03008cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc48f97496079654f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b4749c28eb5167e9936ed327fb237a56224e49d9ea956d1798571b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecf743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be182724d95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd0403a099f32468f1561f058960d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b656dc0e32384f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bbe3e8ef76f57a2d0e69115d33394e86e4b83c0f3c2a34635f3eee4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cd082027c641ec4355eb4acff90756d1a1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8cc3fe28bc3586844f5fecb92aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a5906002fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128ab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0afd9ae134400f70b5e6aefb7eee403502732df858a2ea033b6c91c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80ffb8f386bb79f5589829b6b0679b5d65a00000000000000e6ff00000000000000000000faff0000bab50bc8508a9644d3e7c328b0ff22035c8073f8c1f0e3da7339fc81d4ab3ef2857ef70a81d8a1628da28c942571880e22df7cabae56d5ff5e483c9c1f5a258b8f1f34cc300312f76a374a6e9b3f9dbd7f538a80b00f97e47895b3201c5126feca0888956a7d768198d9c2109ac508a47ebb99c539ef45af7d87b308117a9e321a3861bc42cf41942c31268a4020221d7b1622585094eddd83c7f4acdd7f5c23d8b730bf03118261edada8b8487a3b1b7548a4687a91f12bf70bb1df3bfe7d4b92ad6fcbf401efd6eb004cf20016ad8d1dad136dd856ffca238b39482811f9c8524bf182f1956a3d044423927df28880bbd11c06407220df8e1d1d483d947d990dc175803d765ca14a915a0040b641959ad3e776b4bb4852fea12983dc18b7404914a6137dc4a78f1e0d331c60a9019c21698cd18753491df962f496f2395563e9c3d7b1228d0e488cf7e50a29541aa757f2e2ee9ff4433d65db0de5a123d569e39dce481156cbec584c9a32a8e3b032fa003192c891d83119bc950abac9147b9fcb0acd9a207b5ceb7e8ed1d91c000000000000000000000000000000141258373281153fa27e586ea82650f070d8851ac9e7ac07b37a6479d4017b5b5af3ff4c91235df4f657d77e386a329aec4d766369c86b62b01ceb028c6fcf206883633cb143016b9f5351a45a8cb4ea110ba700000000000000883416b6eff6a793c71deb7d780c4f51d86ece127c0714144916f397d398ad2fe72b710b932c15c2369cb5d2d2f6ae420672c4a626195a891ac51825077fbc286aa3866bbf18a4a8b836ea8c90af0d5f0aff55b50bc18c27875ed2628b91224b7fa9fd10ccd7c1b1a92bac529df981a6d30100e68555553625c0e91a51000000000000000000fe030f85b294f3ea1fce314a9dcefbe3b64e83c35c5e95734786ca78315793cc0e6e776d2ec07c55cd89541ec25e074e840287011cab538d79e1569df321282071d49a4dc5fb2d7da1d05249d0e153fd04aca2", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xb, 0x0, &(0x7f0000000100)="06ff03076844268cb89e14", 0x0, 0xfe, 0x60000000, 0x1, 0x0, &(0x7f0000000040)="e1", 0x0}, 0x50) pselect6(0x40, &(0x7f0000000100)={0x8b0c, 0x9, 0x4, 0x1800000000000000, 0x7896, 0xb, 0xfffffffffffffffd, 0x5}, &(0x7f0000000200)={0x4, 0x3, 0x13, 0x30, 0x7e, 0x2, 0x1, 0x81}, &(0x7f0000000300)={0x4, 0x200000004, 0x6, 0x10000, 0x1, 0x7, 0x1000000000000080, 0x5}, 0x0, &(0x7f0000000400)={0x0}) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x25) setresuid(0xee01, 0xee01, 0x0) setreuid(0x0, 0x0) 9.868964657s ago: executing program 0 (id=934): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x25) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_GET_MAP_INFO(0x3, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) socket$key(0xf, 0x3, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f1"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b4, 0x94, 0x94, 0x128, 0x250, 0x1bc, 0x320, 0x320, 0x320, 0x320, 0x320, 0x6, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'geneve1\x00', 'veth0_to_team\x00', {}, {}, 0x11, 0x0, 0x41}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x20}}, {{@uncond, 0x0, 0x70, 0x94, 0x3000300}, @ECN={0x24}}, {{@ip={@empty, @empty, 0x0, 0xffffffff, 'pimreg1\x00', 'rose0\x00', {0xff}}, 0x0, 0x70, 0x94}, @ECN={0x24}}, {{@uncond, 0x0, 0x70, 0x94}, @TTL={0x24}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x410) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) 9.482362679s ago: executing program 3 (id=935): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x30d3, &(0x7f0000000000)={0x0, 0x371b, 0x0, 0x3, 0x391}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000d00)=@mangle={'mangle\x00', 0x64, 0x6, 0x600, 0x310, 0x1d0, 0x440, 0x310, 0x0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [0xffffff00], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@ipv6header={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty}}}, {{@ipv6={@private0, @mcast2, [], [], 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe760]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2f}, @mcast2, [0xff, 0x0, 0x7f, 0xff], [0xffffffff, 0xff, 0xffffffff, 0xff], 'veth1_to_batadv\x00', 'rose0\x00', {}, {0xff}, 0x29, 0x4c, 0x2, 0x65}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x58, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}, @IPSET_ATTR_ADT={0x20, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8001}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f0000000100)=0x40000002, 0xd) 9.399776715s ago: executing program 7 (id=936): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r2, 0x0, 0xff2e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x1000008, 0x88}, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r3, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) pipe2(0x0, 0x80080) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) 6.807775511s ago: executing program 3 (id=937): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300012c9dff7f8cd913e90007"], 0x14}], 0x1}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000200)}], 0x1) creat(0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109"], 0x0) 5.738532836s ago: executing program 0 (id=938): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_procfs(r1, 0x0) write$P9_RLERRORu(r4, &(0x7f00000001c0)={0x13, 0x7, 0x2, {{0x6, ':@\x82][\\'}, 0x100}}, 0x13) timer_create(0x0, &(0x7f0000000340)={0x0, 0x2e, 0x0, @thr={&(0x7f0000000240), &(0x7f0000000400)}}, &(0x7f0000000500)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000002340)='mountstats\x00') r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0) pread64(r5, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 5.455262387s ago: executing program 7 (id=939): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000010000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) semget$private(0x0, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x9590f6cc3ea35512) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x8}) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000802, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x810, r3, 0x0) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x7) 4.419785377s ago: executing program 0 (id=940): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) umount2(0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_mtu(r4, 0x0, 0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, 0x0, 0x0) keyctl$clear(0x11, 0xfffffffffffffffd) listen(r5, 0xa) setresgid(0xee00, 0xee01, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000840)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x1c}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 2.513575106s ago: executing program 3 (id=941): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x40, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='rcu_utilization\x00', r4}, 0x18) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0x30, 0x0, 0x1, 0xffffffff, 0x0, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x9}}}}, 0x30}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x27}, 0x74) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000280)={@my=0x1}) socket$vsock_stream(0x28, 0x1, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r6, 0x6, 0x1a, 0x0, &(0x7f0000000080)) close_range(r0, 0xffffffffffffffff, 0x0) 2.422391742s ago: executing program 0 (id=942): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) close_range(r0, r0, 0x2) rseq(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffff, 0x0, "4ae23ae17df2e98c0000000000000009bad88f", 0x6}) 769.753254ms ago: executing program 3 (id=943): iopl(0x3) r0 = fcntl$dupfd(0xffffffffffffffff, 0x408, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x97}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x4c, &(0x7f0000000200)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e21, @remote}]}, &(0x7f0000000180)=0x10) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='btrfs\x00', 0x4418, &(0x7f0000000100)='barrier') r4 = gettid() syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x44}, @hci_rp_read_local_oob_ext_data={{0x6}, {0x80, "8fde79bee21c786f1f0f3e53851594ab", "99b8cd5a7c8bfb1d4047397d952a28ce", "4457c08f3a41d072b15f8896f0af7485", "13d61bed20b662cdbae80346a4553cf5"}}}}, 0x47) rt_tgsigqueueinfo(0x0, r4, 0x20, &(0x7f0000000000)={0x0, 0x2, 0x6}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r0, r0, 0x7, 0x0, @void}, 0x10) tkill(r4, 0x27) 147.037886ms ago: executing program 7 (id=944): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x28060400) r4 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x11000, 0x10}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x5, &(0x7f0000000200)={0x77359400}, 0x1, 0x4}) io_uring_enter(r5, 0x2def, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r5, 0x18, &(0x7f0000000140)={0x5, r5, 0x1c, {0x9, 0x1}, 0x6}, 0x1) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r8, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) 141.130312ms ago: executing program 0 (id=945): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) pwrite64(r0, 0x0, 0x5f, 0x800000000000) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x3, 0x26) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x15}, @in6=@loopback, 0x4e20, 0x0, 0x4e22, 0x0, 0xa}, {0x9, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x7f, 0x24}, {0x0, 0x4, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x5, 0x2}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x33}, 0xa, @in=@empty, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x4, 0x401}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x20, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000001c0)) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) r3 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000380)={0x0, 0x2, 0xfffffffffffffff9, 0xac}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r5, 0x9, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(r5, 0x11, &(0x7f0000000540)="1a5b75fe7a4b9c0629950a5988a865328f3289013efb717961cb4b6f6ad1b89be11143c54909e0f614f7de39e832e8c3a3195b44d1744e24133a5e4845050fe393a74c7c2ac0ef0b1a2749b49386be436288f9a4cfbac190518ee999fbfcb4769e91", 0x62) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'geneve0\x00'}) sendmsg$kcm(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 0s ago: executing program 3 (id=946): socket$kcm(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) setresgid(0xee00, 0xee01, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a000000", 0x4) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) prlimit64(0x0, 0x3, &(0x7f0000000140)={0x928, 0x200000008b}, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r4, 0x0, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x0, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x2, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8}) kernel console output (not intermixed with test programs): e_0 added [ 94.815525][ T5834] team0: Port device team_slave_1 added [ 94.860406][ T5824] team0: Port device team_slave_0 added [ 94.868483][ T5833] Bluetooth: hci3: command tx timeout [ 94.870792][ T5827] team0: Port device team_slave_1 added [ 94.874280][ T5833] Bluetooth: hci4: command tx timeout [ 94.885232][ T5835] Bluetooth: hci0: command tx timeout [ 94.901223][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.908299][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.934410][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.983643][ T5824] team0: Port device team_slave_1 added [ 95.023017][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.030304][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.056559][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.116443][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.123870][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.151991][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.173724][ T5836] team0: Port device team_slave_0 added [ 95.181655][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.188832][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.214854][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.226805][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.234240][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.260240][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.272830][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.280072][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.306370][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.321673][ T5836] team0: Port device team_slave_1 added [ 95.329567][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.336595][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.363072][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.387299][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.394406][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.420596][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.509629][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.516636][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.543152][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.569375][ T5831] hsr_slave_0: entered promiscuous mode [ 95.576315][ T5831] hsr_slave_1: entered promiscuous mode [ 95.600316][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.607427][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.633835][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.748526][ T5834] hsr_slave_0: entered promiscuous mode [ 95.755297][ T5834] hsr_slave_1: entered promiscuous mode [ 95.762329][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.770257][ T5834] Cannot create hsr debugfs directory [ 95.795255][ T5827] hsr_slave_0: entered promiscuous mode [ 95.802603][ T5827] hsr_slave_1: entered promiscuous mode [ 95.809207][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.816815][ T5827] Cannot create hsr debugfs directory [ 95.836494][ T5836] hsr_slave_0: entered promiscuous mode [ 95.843579][ T5836] hsr_slave_1: entered promiscuous mode [ 95.850029][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.857614][ T5836] Cannot create hsr debugfs directory [ 95.885120][ T5824] hsr_slave_0: entered promiscuous mode [ 95.891847][ T5824] hsr_slave_1: entered promiscuous mode [ 95.899562][ T5824] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.907167][ T5824] Cannot create hsr debugfs directory [ 96.564132][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.577042][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.590991][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.612322][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.672048][ T5836] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 96.688157][ T5836] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 96.700396][ T5836] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 96.715945][ T5836] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 96.825268][ T5827] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.849204][ T5827] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.862795][ T5827] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.869813][ T5833] Bluetooth: hci2: command tx timeout [ 96.869854][ T5833] Bluetooth: hci1: command tx timeout [ 96.905559][ T5827] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.949062][ T5835] Bluetooth: hci3: command tx timeout [ 96.954550][ T5835] Bluetooth: hci4: command tx timeout [ 96.961270][ T5833] Bluetooth: hci0: command tx timeout [ 96.987475][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.015580][ T5824] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.053591][ T5824] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.066089][ T5824] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.076598][ T5824] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.106732][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.176399][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.183793][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.196047][ T977] cfg80211: failed to load regulatory.db [ 97.220973][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.237057][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.244373][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.275859][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.290010][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.302792][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.390459][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.475163][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.526689][ T3563] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.533949][ T3563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.546879][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.581488][ T3563] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.588793][ T3563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.619913][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.675360][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.682623][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.706305][ T1339] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.713751][ T1339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.734207][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.797054][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.922969][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.957108][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.003362][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.010622][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.025844][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.033111][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.065295][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.081828][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.089176][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.134651][ T1339] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.141922][ T1339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.296685][ T5831] veth0_vlan: entered promiscuous mode [ 98.343654][ T5831] veth1_vlan: entered promiscuous mode [ 98.377115][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.558868][ T5831] veth0_macvtap: entered promiscuous mode [ 98.597125][ T5831] veth1_macvtap: entered promiscuous mode [ 98.684000][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.720976][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.765844][ T5831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.790894][ T5831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.818893][ T5831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.828524][ T5831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.925669][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.949043][ T5833] Bluetooth: hci1: command tx timeout [ 98.954712][ T5833] Bluetooth: hci2: command tx timeout [ 98.955977][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.014074][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.028693][ T5838] Bluetooth: hci0: command tx timeout [ 99.039829][ T5838] Bluetooth: hci4: command tx timeout [ 99.039839][ T5833] Bluetooth: hci3: command tx timeout [ 99.154241][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.179969][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.274601][ T5824] veth0_vlan: entered promiscuous mode [ 99.310657][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.320210][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.333220][ T5834] veth0_vlan: entered promiscuous mode [ 99.343906][ T5827] veth0_vlan: entered promiscuous mode [ 99.364260][ T5824] veth1_vlan: entered promiscuous mode [ 99.397643][ T5834] veth1_vlan: entered promiscuous mode [ 99.407468][ T5827] veth1_vlan: entered promiscuous mode [ 99.447307][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 99.494607][ T5824] veth0_macvtap: entered promiscuous mode [ 99.540746][ T5824] veth1_macvtap: entered promiscuous mode [ 99.581678][ T5836] veth0_vlan: entered promiscuous mode [ 99.621081][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.635295][ T5834] veth0_macvtap: entered promiscuous mode [ 99.705712][ T5834] veth1_macvtap: entered promiscuous mode [ 100.492309][ T5827] veth0_macvtap: entered promiscuous mode [ 100.504316][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.516895][ T5824] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.526355][ T5824] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.535913][ T5824] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.549662][ T5824] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.580311][ T5827] veth1_macvtap: entered promiscuous mode [ 100.601577][ T5836] veth1_vlan: entered promiscuous mode [ 100.700472][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.710800][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.751389][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.765226][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.796283][ T5834] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.806137][ T5834] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.815023][ T5834] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.824110][ T5834] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.846188][ T5827] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.855142][ T5827] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.865044][ T5827] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.873948][ T5827] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.887432][ T5836] veth0_macvtap: entered promiscuous mode [ 100.907674][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.922920][ T5836] veth1_macvtap: entered promiscuous mode [ 100.931155][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.004789][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.013333][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.028833][ T5833] Bluetooth: hci2: command tx timeout [ 101.030431][ T5838] Bluetooth: hci1: command tx timeout [ 101.051638][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.089750][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.106765][ T5836] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.116758][ T5838] Bluetooth: hci3: command tx timeout [ 101.122385][ T5838] Bluetooth: hci4: command tx timeout [ 101.124526][ T5833] Bluetooth: hci0: command tx timeout [ 101.133918][ T5836] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.143628][ T5836] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.152616][ T5836] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.232625][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.250418][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.323654][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.355123][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.387634][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.397165][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.500204][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.516841][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.556372][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.617123][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.685185][ T5958] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 101.780383][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.813368][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.108263][ T5964] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3'. [ 103.445122][ T5989] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 103.451896][ T5989] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 103.576529][ T5989] vhci_hcd vhci_hcd.0: Device attached [ 103.695507][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.716257][ T5991] vhci_hcd: connection closed [ 103.733874][ T59] vhci_hcd: stop threads [ 103.779932][ T59] vhci_hcd: release socket [ 103.805280][ T59] vhci_hcd: disconnect device [ 103.848359][ T5955] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 103.856110][ T5955] usb 35-1: enqueue for inactive port 0 [ 103.941789][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.958110][ T5955] vhci_hcd: vhci_device speed not set [ 104.170645][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.461823][ T1194] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 104.512612][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.690558][ T1194] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.732687][ T6017] netlink: 4 bytes leftover after parsing attributes in process `syz.1.26'. [ 104.738258][ T1194] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.798283][ T1194] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 104.816393][ T1194] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.862737][ T1194] usb 4-1: config 0 descriptor?? [ 104.910656][ T6015] trusted_key: encrypted_key: insufficient parameters specified [ 104.992279][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 105.158260][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 105.188594][ T0] NOHZ tick-stop error: local softirq work is pending, handler #308!!! [ 105.298643][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 105.680217][ T12] bridge_slave_1: left allmulticast mode [ 106.161735][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 106.268392][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 106.276944][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 106.361606][ T12] bridge_slave_1: left promiscuous mode [ 106.398579][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 106.416481][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 106.442570][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 106.452804][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 106.462205][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 106.469733][ T5896] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 106.479821][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.481351][ T1194] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 106.521030][ T12] bridge_slave_0: left allmulticast mode [ 106.534541][ T1194] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 106.557954][ T12] bridge_slave_0: left promiscuous mode [ 106.563818][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.610651][ T1194] cp2112 0003:10C4:EA90.0001: Part Number: 0x82 Device Version: 0xFE [ 107.230998][ T6008] cp2112 0003:10C4:EA90.0001: Error starting transaction: -38 [ 107.248286][ T1194] cp2112 0003:10C4:EA90.0001: error reading lock byte: -71 [ 107.320457][ T1194] usb 4-1: USB disconnect, device number 2 [ 107.333942][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.357553][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.372770][ T12] bond0 (unregistering): Released all slaves [ 108.490049][ T6071] binder: BINDER_SET_CONTEXT_MGR already set [ 108.517692][ T6071] binder: 6070:6071 ioctl 4018620d 200000000040 returned -16 [ 108.540229][ T6068] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 108.540230][ T6074] netlink: 4 bytes leftover after parsing attributes in process `syz.1.39'. [ 108.549381][ T5833] Bluetooth: hci3: command tx timeout [ 110.292682][ T12] hsr_slave_0: left promiscuous mode [ 110.332898][ T12] hsr_slave_1: left promiscuous mode [ 110.359199][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.366719][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.414289][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 110.434026][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.461021][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.511888][ T12] veth1_macvtap: left promiscuous mode [ 110.540523][ T12] veth0_macvtap: left promiscuous mode [ 110.546300][ T12] veth1_vlan: left promiscuous mode [ 110.561787][ T12] veth0_vlan: left promiscuous mode [ 110.602781][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 110.629991][ T5833] Bluetooth: hci3: command tx timeout [ 110.637356][ T24] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 110.669293][ T24] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 110.701346][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 110.712705][ T5903] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 110.746323][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 110.855146][ T24] usb 5-1: Product: syz [ 110.884131][ T24] usb 5-1: Manufacturer: syz [ 110.940606][ T5903] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 111.049742][ T24] usb 5-1: SerialNumber: syz [ 111.056152][ T5889] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 111.134756][ T5903] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 111.386468][ T5903] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 111.406295][ T5903] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 111.421066][ T5903] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 111.453218][ T5903] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 111.471097][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 111.484526][ T5903] usb 1-1: Product: syz [ 111.492406][ T5903] usb 1-1: Manufacturer: syz [ 111.516495][ T5903] cdc_wdm 1-1:1.0: skipping garbage [ 111.534357][ T5903] cdc_wdm 1-1:1.0: skipping garbage [ 111.567359][ T24] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 111.587189][ T5903] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 111.594032][ T5903] cdc_wdm 1-1:1.0: Unknown control protocol [ 111.778211][ T5903] usb 5-1: USB disconnect, device number 2 [ 111.808162][ T5903] usblp0: removed [ 111.942688][ T24] usb 1-1: USB disconnect, device number 2 [ 112.155329][ T12] team0 (unregistering): Port device team_slave_1 removed [ 112.201505][ T12] team0 (unregistering): Port device team_slave_0 removed [ 112.713076][ T5833] Bluetooth: hci3: command tx timeout [ 113.023277][ T6118] binder: 6117:6118 ioctl c0306201 200000000540 returned -22 [ 113.045463][ T6030] chnl_net:caif_netlink_parms(): no params data found [ 113.580221][ T6030] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.589623][ T6030] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.638311][ T6030] bridge_slave_0: entered allmulticast mode [ 113.724862][ T6030] bridge_slave_0: entered promiscuous mode [ 113.769000][ T6030] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.789769][ T6030] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.808920][ T6030] bridge_slave_1: entered allmulticast mode [ 113.816805][ T6030] bridge_slave_1: entered promiscuous mode [ 113.978270][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.988156][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 113.996425][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 114.055062][ T6148] netlink: 'syz.1.58': attribute type 13 has an invalid length. [ 114.063042][ T6148] macvtap0: entered promiscuous mode [ 114.823625][ T6148] macvtap0: refused to change device tx_queue_len [ 115.304695][ T5833] Bluetooth: hci3: command tx timeout [ 115.960349][ T6030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.012568][ T6030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.080014][ T6166] syz.3.63 uses obsolete (PF_INET,SOCK_PACKET) [ 116.260983][ T6030] team0: Port device team_slave_0 added [ 116.287845][ T6030] team0: Port device team_slave_1 added [ 116.434519][ T6030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.447834][ T6030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.477367][ T6030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.516849][ T6176] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 116.535698][ T6030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.543365][ T6030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.575433][ T6030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.843103][ T6182] netlink: 'syz.3.66': attribute type 13 has an invalid length. [ 117.047371][ T6030] hsr_slave_0: entered promiscuous mode [ 117.203379][ T6030] hsr_slave_1: entered promiscuous mode [ 117.353430][ T6030] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 117.441571][ T6030] Cannot create hsr debugfs directory [ 117.532689][ T6182] macvtap0: entered promiscuous mode [ 117.647131][ T6182] macvtap0: refused to change device tx_queue_len [ 117.977030][ T6191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.70'. [ 118.093914][ T6193] process 'syz.1.68' launched '/dev/fd/8' with NULL argv: empty string added [ 119.098202][ T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 119.279160][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 119.297368][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 119.320499][ T24] usb 4-1: config 20 has an invalid interface number: 100 but max is 0 [ 119.345060][ T24] usb 4-1: config 20 has no interface number 0 [ 119.401412][ T24] usb 4-1: config 20 interface 100 has no altsetting 0 [ 119.412733][ T24] usb 4-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice=53.13 [ 119.425994][ T6030] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 119.439844][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.449981][ T5903] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 119.488240][ T24] usb 4-1: Product: syz [ 119.497392][ T6030] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 119.505984][ T24] usb 4-1: Manufacturer: syz [ 119.511910][ T24] usb 4-1: SerialNumber: syz [ 119.536505][ T6030] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 119.646578][ T6030] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 119.658029][ T5903] usb 5-1: Using ep0 maxpacket: 8 [ 119.670140][ T5903] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 119.679734][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.708045][ T5903] usb 5-1: Product: syz [ 119.753055][ T5903] usb 5-1: Manufacturer: syz [ 119.768361][ T5903] usb 5-1: SerialNumber: syz [ 119.820290][ T24] ftdi_sio 4-1:20.100: FTDI USB Serial Device converter detected [ 119.841267][ T5903] usb 5-1: config 0 descriptor?? [ 119.906889][ T24] ftdi_sio ttyUSB0: unknown device type: 0x5313 [ 119.916069][ T5903] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 119.928696][ T24] usb 4-1: USB disconnect, device number 3 [ 119.934765][ T5903] usb 5-1: setting power ON [ 119.939922][ T5903] dvb-usb: bulk message failed: -22 (2/0) [ 119.956787][ T24] ftdi_sio 4-1:20.100: device disconnected [ 120.168295][ T5903] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 120.179884][ T5903] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 120.192613][ T5903] usb 5-1: media controller created [ 120.222691][ T5903] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 120.243419][ T5903] usb 5-1: selecting invalid altsetting 6 [ 120.250984][ T5903] usb 5-1: digital interface selection failed (-22) [ 120.257612][ T5903] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 120.272708][ T5903] usb 5-1: setting power OFF [ 120.277642][ T5903] dvb-usb: bulk message failed: -22 (2/0) [ 120.296020][ T5903] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 120.310771][ T5903] (NULL device *): no alternate interface [ 120.337827][ T6030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.442863][ T6030] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.490283][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.497473][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.579880][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.587092][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.599064][ T5903] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 120.621104][ T5903] usb 5-1: USB disconnect, device number 3 [ 121.118174][ T6241] netlink: 'syz.1.78': attribute type 13 has an invalid length. [ 121.161227][ T6241] macvtap0: refused to change device tx_queue_len [ 121.288858][ T5903] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 121.685844][ T5903] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 121.792863][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.856698][ T5903] usb 4-1: Product: syz [ 121.873366][ T5903] usb 4-1: Manufacturer: syz [ 121.882459][ T5903] usb 4-1: SerialNumber: syz [ 121.933150][ T5903] usb 4-1: config 0 descriptor?? [ 122.116943][ T6249] Bluetooth: MGMT ver 1.23 [ 122.133560][ T6249] Bluetooth: hci0: invalid len left 7, exp >= 13 [ 122.146509][ T5903] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 122.216167][ T6030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.504411][ T6258] netlink: 'syz.1.82': attribute type 13 has an invalid length. [ 122.520706][ T6258] macvtap0: refused to change device tx_queue_len [ 122.974690][ C1] vcan0: j1939_tp_rxtimer: 0xffff888030a72400: rx timeout, send abort [ 122.984254][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888030a72400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 123.778151][ T5903] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 123.808559][ T5903] usb 4-1: USB disconnect, device number 4 [ 124.067052][ T6030] veth0_vlan: entered promiscuous mode [ 124.121382][ T6030] veth1_vlan: entered promiscuous mode [ 124.264288][ T6030] veth0_macvtap: entered promiscuous mode [ 124.316429][ T6030] veth1_macvtap: entered promiscuous mode [ 124.373825][ T6030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.403029][ T6030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.471630][ T6030] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.486294][ T6030] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.504310][ T6030] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.515259][ T6030] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.567959][ T5903] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 124.809658][ T6302] netlink: 'syz.1.93': attribute type 13 has an invalid length. [ 124.856644][ T6302] macvtap0: refused to change device tx_queue_len [ 125.269101][ T5903] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 125.498607][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.559514][ T5903] usb 5-1: config 0 descriptor?? [ 125.669763][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.712203][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.855994][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.878025][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.642486][ T5903] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 126.706607][ T5903] asix 5-1:0.0: probe with driver asix failed with error -71 [ 126.940646][ T5903] usb 5-1: USB disconnect, device number 4 [ 127.696654][ T6345] evm: overlay not supported [ 129.376908][ T6377] netlink: 20 bytes leftover after parsing attributes in process `syz.4.110'. [ 129.481804][ T6377] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.490216][ T6377] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.715456][ T6385] binder: 6384:6385 ioctl c0306201 2000000003c0 returned -14 [ 131.361414][ T6417] random: crng reseeded on system resumption [ 131.879382][ T6421] netlink: 'syz.1.123': attribute type 1 has an invalid length. [ 132.134422][ T6421] 8021q: adding VLAN 0 to HW filter on device bond1 [ 132.351478][ T6425] bond1 (unregistering): Released all slaves [ 132.398417][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 132.557993][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 132.579733][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.624402][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=0254, bcdDevice= 0.00 [ 132.641870][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.718071][ T10] usb 1-1: config 0 descriptor?? [ 133.602762][ T6459] netlink: 'syz.3.130': attribute type 39 has an invalid length. [ 133.955731][ T6465] trusted_key: encrypted_key: insufficient parameters specified [ 135.492859][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 135.622697][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 135.678833][ T10] usb 1-1: USB disconnect, device number 3 [ 135.868836][ T6493] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 135.886049][ T6491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.138'. [ 135.948263][ T6491] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 136.544370][ T6511] kvm: pic: non byte write [ 136.798556][ T5911] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 136.964430][ T5911] usb 1-1: Using ep0 maxpacket: 32 [ 137.008239][ T5911] usb 1-1: config 0 has an invalid interface number: 231 but max is 0 [ 137.036837][ T5911] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.078281][ T5911] usb 1-1: config 0 has no interface number 0 [ 137.084557][ T5911] usb 1-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 137.135534][ T5911] usb 1-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 137.199030][ T5911] usb 1-1: New USB device found, idVendor=d024, idProduct=5e5a, bcdDevice=16.a9 [ 137.218102][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.226207][ T5911] usb 1-1: Product: syz [ 137.251062][ T5911] usb 1-1: Manufacturer: syz [ 137.255748][ T5911] usb 1-1: SerialNumber: syz [ 137.265432][ T5911] usb 1-1: config 0 descriptor?? [ 137.289209][ T6508] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 137.320698][ T5911] usb-storage 1-1:0.231: USB Mass Storage device detected [ 137.599113][ T6508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.635751][ T6508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.715007][ T5951] usb 1-1: USB disconnect, device number 4 [ 137.818400][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 138.163174][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.172720][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.178430][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 138.193431][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.220721][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 138.252258][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 138.276168][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.317624][ T10] usb 4-1: config 0 descriptor?? [ 138.386880][ T10] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 138.923970][ T5896] usb 4-1: USB disconnect, device number 5 [ 139.410529][ T6565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.156'. [ 139.790007][ T5896] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 139.985855][ T5896] usb 2-1: config 66 has an invalid interface number: 195 but max is 0 [ 140.077689][ T5896] usb 2-1: config 66 has no interface number 0 [ 140.105882][ T5951] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 140.154117][ T5896] usb 2-1: config 66 interface 195 has no altsetting 0 [ 140.215457][ T5896] usb 2-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=56.49 [ 140.272835][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.324842][ T5896] usb 2-1: Product: syz [ 140.335119][ T5951] usb 4-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.348136][ T5896] usb 2-1: Manufacturer: syz [ 140.352808][ T5896] usb 2-1: SerialNumber: syz [ 140.362260][ T5951] usb 4-1: config 0 interface 0 has no altsetting 0 [ 140.378183][ T5951] usb 4-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 140.418118][ T5951] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.490283][ T5951] usb 4-1: config 0 descriptor?? [ 140.560012][ T6580] binder: 6579:6580 ioctl c0306201 200000000080 returned -14 [ 140.604136][ T5896] usb 2-1: Found UVC 0.00 device syz (1bcf:0b40) [ 140.612549][ T5896] usb 2-1: Forcing UVC version to 1.0a [ 140.619846][ T5896] usb 2-1: No valid video chain found. [ 140.668449][ T5896] usb 2-1: USB disconnect, device number 4 [ 140.944172][ T5951] apple 0003:05AC:027A.0002: hidraw0: USB HID v8.00 Device [HID 05ac:027a] on usb-dummy_hcd.3-1/input0 [ 142.608623][ T5911] usb 4-1: USB disconnect, device number 6 [ 142.710162][ T5835] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 142.746550][ T5835] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 142.755730][ T5835] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 142.764391][ T5835] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 142.775006][ T5835] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 143.137988][ T30] audit: type=1800 audit(1750087498.988:2): pid=6628 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.176" name="file0" dev="overlay" ino=277 res=0 errno=0 [ 143.493694][ T6476] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.591693][ T6642] kvm: pic: non byte write [ 143.661793][ T6476] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.830478][ T6476] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.348124][ T5911] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 144.704291][ T5911] usb 1-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.747968][ T5911] usb 1-1: config 0 interface 0 has no altsetting 0 [ 144.754688][ T5911] usb 1-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 144.763687][ T6476] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.842554][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.873883][ T5833] Bluetooth: hci5: command tx timeout [ 144.881599][ T6615] chnl_net:caif_netlink_parms(): no params data found [ 144.899325][ T5911] usb 1-1: config 0 descriptor?? [ 145.374018][ T5911] apple 0003:05AC:027A.0003: hidraw0: USB HID v8.00 Device [HID 05ac:027a] on usb-dummy_hcd.0-1/input0 [ 145.453131][ T6476] bridge_slave_1: left allmulticast mode [ 145.464507][ T6476] bridge_slave_1: left promiscuous mode [ 145.478225][ T6476] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.497819][ T6476] bridge_slave_0: left allmulticast mode [ 145.503768][ T6476] bridge_slave_0: left promiscuous mode [ 145.510465][ T6476] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.985359][ T6476] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.997529][ T6476] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.008583][ T6476] bond0 (unregistering): Released all slaves [ 146.026815][ T6615] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.034524][ T6615] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.043584][ T6615] bridge_slave_0: entered allmulticast mode [ 146.053276][ T6615] bridge_slave_0: entered promiscuous mode [ 146.073964][ T6615] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.082573][ T6615] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.101514][ T6615] bridge_slave_1: entered allmulticast mode [ 146.116274][ T6615] bridge_slave_1: entered promiscuous mode [ 146.309629][ T6615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.334425][ T6615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.447321][ T6698] trusted_key: encrypted_key: insufficient parameters specified [ 146.450919][ T6615] team0: Port device team_slave_0 added [ 146.498262][ T6476] hsr_slave_0: left promiscuous mode [ 146.518046][ T6476] hsr_slave_1: left promiscuous mode [ 146.531271][ T6476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.549795][ T6476] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.560710][ T6476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.574456][ T6476] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.606360][ T6476] veth1_macvtap: left promiscuous mode [ 146.615454][ T6476] veth0_macvtap: left promiscuous mode [ 146.635053][ T6476] veth1_vlan: left promiscuous mode [ 146.655040][ T6476] veth0_vlan: left promiscuous mode [ 147.255808][ T5833] Bluetooth: hci5: command tx timeout [ 147.320982][ T10] usb 1-1: USB disconnect, device number 5 [ 147.580935][ T5896] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 148.376676][ T6476] team0 (unregistering): Port device team_slave_1 removed [ 148.497231][ T6476] team0 (unregistering): Port device team_slave_0 removed [ 149.348699][ T5833] Bluetooth: hci5: command tx timeout [ 149.469306][ T6727] netlink: 'syz.1.198': attribute type 10 has an invalid length. [ 149.566935][ T6615] team0: Port device team_slave_1 added [ 149.614289][ T6726] warning: `syz.1.198' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 149.772634][ T6727] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 150.018099][ T6615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.031243][ T6615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.126157][ T6615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.199861][ T6615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.218200][ T6615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.261942][ T6615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.422858][ T6749] syz_tun: entered allmulticast mode [ 150.595977][ T6615] hsr_slave_0: entered promiscuous mode [ 150.615962][ T6615] hsr_slave_1: entered promiscuous mode [ 150.624578][ T6615] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 150.636248][ T6615] Cannot create hsr debugfs directory [ 150.663665][ T6744] syz_tun: left allmulticast mode [ 151.428321][ T5833] Bluetooth: hci5: command tx timeout [ 152.069808][ T6771] bridge_slave_0: left allmulticast mode [ 152.118422][ T6771] bridge_slave_0: left promiscuous mode [ 152.125098][ T6771] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.181310][ T30] audit: type=1800 audit(1750087508.048:3): pid=6772 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.207" name="/" dev="fuse" ino=0 res=0 errno=0 [ 152.218732][ T5896] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 152.312008][ T6771] bridge_slave_1: left allmulticast mode [ 152.398574][ T6771] bridge_slave_1: left promiscuous mode [ 152.457522][ T6771] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.623422][ T6771] bond0: (slave bond_slave_0): Releasing backup interface [ 152.757337][ T6771] bond0: (slave bond_slave_1): Releasing backup interface [ 152.912675][ T6771] team0: Port device team_slave_0 removed [ 152.952519][ T6771] team0: Port device team_slave_1 removed [ 152.970027][ T6771] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.994010][ T6771] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.023731][ T6771] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.034449][ T6791] kvm: Disabled LAPIC found during irq injection [ 153.056669][ T6771] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.680706][ T6808] syzkaller0: entered promiscuous mode [ 153.700201][ T6808] syzkaller0: entered allmulticast mode [ 154.212654][ T6615] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 154.277428][ T6615] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 154.317570][ T6615] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 154.377134][ T6615] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 154.529475][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 154.714321][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 154.804845][ T10] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 154.816807][ T10] usb 5-1: config 0 has no interface number 0 [ 154.882852][ T10] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 154.917145][ T6615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.923430][ T10] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 155.123531][ T10] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 155.137934][ T10] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 155.151562][ T10] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 155.155798][ T6615] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.160701][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.179601][ T10] usb 5-1: config 0 descriptor?? [ 155.256476][ T1339] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.263785][ T1339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.268778][ T10] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 155.332875][ T1339] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.340215][ T1339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.502889][ T44] usb 5-1: USB disconnect, device number 5 [ 155.524818][ T44] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 157.460765][ T6615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.118553][ T5911] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 159.538514][ T6904] syzkaller0: entered promiscuous mode [ 159.550920][ T6904] syzkaller0: entered allmulticast mode [ 163.482421][ T6615] veth0_vlan: entered promiscuous mode [ 163.621041][ T6615] veth1_vlan: entered promiscuous mode [ 163.762195][ T6941] netlink: 24 bytes leftover after parsing attributes in process `syz.1.246'. [ 164.444317][ T6615] veth0_macvtap: entered promiscuous mode [ 164.541656][ T6615] veth1_macvtap: entered promiscuous mode [ 164.634227][ T6615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.677278][ T6615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.732475][ T6615] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.749189][ T6615] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.767725][ T6615] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.805091][ T6615] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.058077][ T44] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 165.098121][ T6476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.121455][ T6476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.229007][ T44] usb 2-1: Using ep0 maxpacket: 8 [ 165.249857][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.256640][ T44] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 165.277420][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.305841][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.535473][ T44] usb 2-1: config 0 descriptor?? [ 167.377017][ T6986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.253'. [ 168.465827][ T44] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 168.496543][ T44] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 168.525805][ T44] asix 2-1:0.0: probe with driver asix failed with error -71 [ 168.588573][ T44] usb 2-1: USB disconnect, device number 6 [ 172.581763][ T7068] Invalid logical block size (201) [ 172.921319][ T7069] binder: BINDER_SET_CONTEXT_MGR already set [ 172.927394][ T7069] binder: 7060:7069 ioctl 4018620d 200000000040 returned -16 [ 172.998491][ T7074] binder: 7060:7074 ioctl c0306201 2000000003c0 returned -14 [ 173.034796][ T7069] binder: 7060:7069 ioctl c0306201 2000000001c0 returned -14 [ 173.668889][ T7086] netlink: zone id is out of range [ 173.990691][ T7086] netlink: zone id is out of range [ 174.163351][ T7086] netlink: set zone limit has 4 unknown bytes [ 174.248437][ T5889] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 175.829686][ T7107] netlink: 'syz.4.279': attribute type 7 has an invalid length. [ 175.864073][ T7107] : entered promiscuous mode [ 181.986514][ T7149] syzkaller0: entered promiscuous mode [ 181.992182][ T7149] syzkaller0: entered allmulticast mode [ 182.949513][ T44] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 188.628285][ T5951] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 188.824975][ T5951] usb 4-1: Using ep0 maxpacket: 8 [ 189.059846][ T5951] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.070992][ T5951] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 189.087923][ T5951] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 189.116021][ T5951] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 189.116079][ T5951] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 189.116105][ T5951] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.145320][ T5951] hub 4-1:1.0: bad descriptor, ignoring hub [ 189.145355][ T5951] hub 4-1:1.0: probe with driver hub failed with error -5 [ 189.145769][ T5951] cdc_wdm 4-1:1.0: skipping garbage [ 189.145781][ T5951] cdc_wdm 4-1:1.0: skipping garbage [ 189.521571][ T7208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.552028][ T7208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.991149][ T5951] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 189.991176][ T5951] cdc_wdm 4-1:1.0: Unknown control protocol [ 190.045442][ T5951] usb 4-1: USB disconnect, device number 9 [ 190.280125][ T7223] tty tty21: ldisc open failed (-12), clearing slot 20 [ 190.308161][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 190.382287][ T7234] kvm: pic: single mode not supported [ 190.382432][ T7234] kvm: pic: level sensitive irq not supported [ 190.395889][ T7234] kvm: pic: single mode not supported [ 190.402628][ T7234] kvm: pic: level sensitive irq not supported [ 190.413797][ T7234] kvm: pic: level sensitive irq not supported [ 190.420234][ T7234] kvm: pic: level sensitive irq not supported [ 190.427758][ T7234] kvm: pic: single mode not supported [ 190.444447][ T7234] kvm: pic: level sensitive irq not supported [ 190.456560][ T7234] kvm: pic: single mode not supported [ 190.463048][ T7234] kvm: pic: level sensitive irq not supported [ 190.478064][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 190.482356][ T7238] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 190.503639][ T10] usb 7-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 190.503673][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.508535][ T7234] kvm: pic: single mode not supported [ 190.521483][ T7234] kvm: pic: level sensitive irq not supported [ 190.558048][ T10] usb 7-1: config 0 descriptor?? [ 190.594397][ T10] gspca_main: sunplus-2.14.0 probing 041e:400b [ 190.612890][ T7238] bridge0: entered promiscuous mode [ 190.629675][ T7238] vlan2: entered promiscuous mode [ 191.355457][ T10] gspca_sunplus: reg_w_riv err -110 [ 191.447123][ T10] sunplus 7-1:0.0: probe with driver sunplus failed with error -110 [ 192.288874][ T5951] usb 7-1: USB disconnect, device number 2 [ 192.422363][ T7267] netlink: 4 bytes leftover after parsing attributes in process `syz.4.318'. [ 192.526834][ T7267] tipc: Started in network mode [ 192.661185][ T7267] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 192.810922][ T7267] tipc: Enabled bearer , priority 10 [ 192.940791][ T7267] netlink: 14 bytes leftover after parsing attributes in process `syz.4.318'. [ 192.973759][ T7267] tipc: Resetting bearer [ 193.141421][ T7267] tipc: Disabling bearer [ 193.402021][ T7279] netfs: Couldn't get user pages (rc=-14) [ 195.996455][ T7309] ecryptfs: Unknown parameter 'ł(' [ 199.599055][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.605751][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.228389][ T7354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.337'. [ 201.329208][ T7354] syz_tun: entered promiscuous mode [ 201.349185][ T5903] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 201.382258][ T7354] macvtap1: entered promiscuous mode [ 201.418124][ T7354] macvtap1: entered allmulticast mode [ 201.456765][ T7354] syz_tun: entered allmulticast mode [ 201.550286][ T7361] syz_tun: left allmulticast mode [ 201.601548][ T7361] syz_tun: left promiscuous mode [ 202.167734][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 202.184995][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 202.199699][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 202.213605][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.230418][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 202.241125][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 202.496778][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.795313][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.092871][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.280537][ T7406] lo: entered allmulticast mode [ 204.358078][ T5835] Bluetooth: hci2: command tx timeout [ 205.457182][ T7404] lo: left allmulticast mode [ 205.692349][ T7416] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 205.692349][ T7416] program syz.3.346 not setting count and/or reply_len properly [ 206.388468][ T5835] Bluetooth: hci2: command tx timeout [ 207.190606][ T7425] netfs: Couldn't get user pages (rc=-14) [ 207.410435][ T13] bridge_slave_1: left allmulticast mode [ 207.418440][ T13] bridge_slave_1: left promiscuous mode [ 207.438179][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.487091][ T5835] Bluetooth: hci2: command tx timeout [ 208.608399][ T13] bridge_slave_0: left allmulticast mode [ 208.743868][ T13] bridge_slave_0: left promiscuous mode [ 209.248253][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.378327][ T5951] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 210.118105][ T5903] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 210.318564][ T5903] usb 5-1: Using ep0 maxpacket: 32 [ 210.352212][ T5903] usb 5-1: unable to get BOS descriptor or descriptor too short [ 210.388314][ T5903] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.445220][ T5903] usb 5-1: config 0 has no interfaces? [ 210.475605][ T5903] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 210.496082][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.534238][ T5903] usb 5-1: Product: syz [ 210.548367][ T5835] Bluetooth: hci2: command tx timeout [ 210.559079][ T5903] usb 5-1: Manufacturer: syz [ 210.572921][ T5903] usb 5-1: SerialNumber: syz [ 210.592489][ T5903] usb 5-1: config 0 descriptor?? [ 212.039919][ T7486] netlink: 28 bytes leftover after parsing attributes in process `syz.6.359'. [ 212.100077][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.115159][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.127716][ T13] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 212.146679][ T13] bond0 (unregistering): Released all slaves [ 212.213706][ T7465] tipc: Started in network mode [ 212.231389][ T7465] tipc: Node identity 064006d75be, cluster identity 4711 [ 212.259828][ T7465] tipc: Enabled bearer , priority 0 [ 212.319820][ T7477] tipc: Resetting bearer [ 212.330717][ T7471] syzkaller0: entered promiscuous mode [ 212.338923][ T7471] syzkaller0: entered allmulticast mode [ 212.470486][ T7380] chnl_net:caif_netlink_parms(): no params data found [ 212.527297][ T7467] tipc: Resetting bearer [ 212.570758][ T7491] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 212.588369][ T7467] tipc: Disabling bearer [ 212.888538][ T13] hsr_slave_0: left promiscuous mode [ 212.895419][ T13] hsr_slave_1: left promiscuous mode [ 212.906902][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.915386][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.929060][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.950326][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.004821][ T13] veth1_macvtap: left promiscuous mode [ 213.011313][ T13] veth0_macvtap: left promiscuous mode [ 213.017157][ T13] veth1_vlan: left promiscuous mode [ 213.035067][ T13] veth0_vlan: left promiscuous mode [ 214.023615][ T5951] usb 5-1: USB disconnect, device number 6 [ 215.921693][ T13] team0 (unregistering): Port device team_slave_1 removed [ 215.976591][ T13] team0 (unregistering): Port device team_slave_0 removed [ 215.996638][ T5951] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 216.735301][ T7380] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.787546][ T7380] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.803478][ T7380] bridge_slave_0: entered allmulticast mode [ 216.843465][ T7380] bridge_slave_0: entered promiscuous mode [ 216.880947][ T7380] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.890865][ T7529] netlink: 'syz.6.370': attribute type 10 has an invalid length. [ 216.924509][ T7380] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.953263][ T7380] bridge_slave_1: entered allmulticast mode [ 216.981028][ T7380] bridge_slave_1: entered promiscuous mode [ 217.198328][ T5842] Bluetooth: hci4: command 0x0406 tx timeout [ 217.205655][ T5842] Bluetooth: hci1: command 0x0406 tx timeout [ 217.883531][ T7529] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 218.816059][ T7380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.918382][ T7380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.968485][ T7542] netlink: 4 bytes leftover after parsing attributes in process `syz.4.374'. [ 219.134319][ T7542] hsr_slave_1 (unregistering): left promiscuous mode [ 220.310140][ T7380] team0: Port device team_slave_0 added [ 220.616860][ T7380] team0: Port device team_slave_1 added [ 221.621471][ T7556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.641149][ T7556] bond0: (slave rose0): Enslaving as an active interface with an up link [ 222.006058][ T7380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.013754][ T7380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.876824][ T7380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.898189][ T7380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.905338][ T7380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.067274][ T7380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.060503][ T7597] orangefs_mount: mount request failed with -4 [ 224.394722][ T7380] hsr_slave_0: entered promiscuous mode [ 224.570891][ T7380] hsr_slave_1: entered promiscuous mode [ 224.599762][ T7605] kvm: vcpu 0: requested 1664 ns lapic timer period limited to 200000 ns [ 224.720182][ T7606] gfs2: gfs2 mount does not exist [ 226.735458][ T7380] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 228.373311][ T7380] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 228.437350][ T7380] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 228.543770][ T7380] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 229.433016][ T7380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.522563][ T7380] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.714086][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.721390][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.038845][ T1194] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 230.090271][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.097519][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.277728][ T1194] usb 7-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.605547][ T1194] usb 7-1: config 0 interface 0 has no altsetting 0 [ 231.077509][ T1194] usb 7-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 231.458181][ T1194] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.502364][ T1194] usb 7-1: config 0 descriptor?? [ 232.221010][ T1194] apple 0003:05AC:027A.0004: hidraw0: USB HID v8.00 Device [HID 05ac:027a] on usb-dummy_hcd.6-1/input0 [ 234.736724][ T7684] netlink: 4 bytes leftover after parsing attributes in process `syz.4.402'. [ 234.898539][ T7380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.509295][ T7444] Bluetooth: hci3: Frame reassembly failed (-84) [ 237.276342][ T5833] Bluetooth: hci3: command 0x1003 tx timeout [ 237.283759][ T5838] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 238.878293][ T1194] usb 7-1: USB disconnect, device number 4 [ 241.700750][ T7736] trusted_key: encrypted_key: insufficient parameters specified [ 242.528659][ T7380] veth0_vlan: entered promiscuous mode [ 242.581113][ T7380] veth1_vlan: entered promiscuous mode [ 242.614646][ T5838] Bluetooth: hci1: unexpected event for opcode 0x1005 [ 242.726917][ T7380] veth0_macvtap: entered promiscuous mode [ 242.772202][ T7380] veth1_macvtap: entered promiscuous mode [ 242.796735][ T7761] capability: warning: `syz.4.416' uses deprecated v2 capabilities in a way that may be insecure [ 243.684782][ T7380] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.247048][ T7380] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.317223][ T7380] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.824588][ T7380] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.879492][ T7380] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.911246][ T7380] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.998097][ T44] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 245.235970][ T44] usb 1-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.236018][ T44] usb 1-1: config 0 interface 0 has no altsetting 0 [ 245.236058][ T44] usb 1-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 245.236085][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.243265][ T44] usb 1-1: config 0 descriptor?? [ 245.250081][ T5896] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 245.690322][ T5896] usb 7-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.690359][ T5896] usb 7-1: config 0 interface 0 has no altsetting 0 [ 245.690398][ T5896] usb 7-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 245.690425][ T5896] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.700614][ T5896] usb 7-1: config 0 descriptor?? [ 245.981539][ T44] apple 0003:05AC:027A.0005: hidraw0: USB HID v8.00 Device [HID 05ac:027a] on usb-dummy_hcd.0-1/input0 [ 246.000273][ T1321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.008892][ T1321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.163224][ T1339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.229716][ T1339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.319072][ T7790] netlink: 264 bytes leftover after parsing attributes in process `syz.4.421'. [ 246.329057][ T7790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.421'. [ 246.679593][ T5838] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 246.688509][ T5838] Bluetooth: hci1: Injecting HCI hardware error event [ 246.729477][ T5838] Bluetooth: hci1: hardware error 0x00 [ 246.836335][ T5896] apple 0003:05AC:027A.0006: hidraw1: USB HID v8.00 Device [HID 05ac:027a] on usb-dummy_hcd.6-1/input0 [ 248.158602][ T5903] usb 1-1: USB disconnect, device number 9 [ 248.360653][ T5896] usb 7-1: USB disconnect, device number 5 [ 248.371141][ T7792] fido_id[7792]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 251.291922][ T5838] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 252.158474][ T7801] trusted_key: encrypted_key: insufficient parameters specified [ 252.641347][ T7817] Zero length message leads to an empty skb [ 252.849199][ T7812] trusted_key: encrypted_key: insufficient parameters specified [ 253.330564][ T7831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.431'. [ 255.329231][ T24] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 255.689217][ T24] usb 7-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.706547][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 255.841379][ T24] usb 7-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 255.952190][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.556801][ T24] usb 7-1: config 0 descriptor?? [ 257.349104][ T24] apple 0003:05AC:027A.0007: hidraw0: USB HID v8.00 Device [HID 05ac:027a] on usb-dummy_hcd.6-1/input0 [ 258.608576][ T5911] usb 7-1: USB disconnect, device number 6 [ 258.747245][ T7858] fido_id[7858]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 261.034744][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.041211][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.450687][ T7892] xt_CT: You must specify a L4 protocol and not use inversions on it [ 265.648882][ T1194] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 266.099815][ T1194] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 266.143403][ T1194] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 266.155655][ T1194] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 266.170793][ T1194] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 266.188589][ T5903] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 266.188664][ T1194] usb 7-1: SerialNumber: syz [ 266.293720][ T7930] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 266.421366][ T5903] usb 5-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.442353][ T5903] usb 5-1: config 0 interface 0 has no altsetting 0 [ 266.463843][ T5903] usb 5-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 266.493005][ T1194] usb 7-1: 0:2 : does not exist [ 266.514511][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.560024][ T5903] usb 5-1: config 0 descriptor?? [ 266.651227][ T1194] usb 7-1: USB disconnect, device number 7 [ 268.035874][ T5903] apple 0003:05AC:027A.0008: hidraw0: USB HID v8.00 Device [HID 05ac:027a] on usb-dummy_hcd.4-1/input0 [ 268.164037][ T6010] udevd[6010]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 268.227997][ T5833] Bluetooth: hci5: command 0x0406 tx timeout [ 268.262659][ T5896] usb 5-1: USB disconnect, device number 8 [ 269.835535][ T7945] fido_id[7945]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 270.506543][ T7974] syz.4.464: attempt to access beyond end of device [ 270.506543][ T7974] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 270.519782][ T7974] efs: cannot read volume header [ 272.951408][ T7993] input: syz1 as /devices/virtual/input/input5 [ 275.895457][ T7999] trusted_key: encrypted_key: insufficient parameters specified [ 276.551581][ T8016] netlink: 28 bytes leftover after parsing attributes in process `syz.4.473'. [ 276.608915][ T8016] netlink: 28 bytes leftover after parsing attributes in process `syz.4.473'. [ 276.776503][ T8016] dummy0: entered promiscuous mode [ 276.806843][ T8016] team0: entered promiscuous mode [ 276.860518][ T8016] hsr1: Slave B (team0) is not up; please bring it up to get a fully working HSR network [ 278.005682][ T8038] netlink: 'syz.6.479': attribute type 1 has an invalid length. [ 279.963047][ T8038] 8021q: adding VLAN 0 to HW filter on device bond1 [ 280.624879][ T8045] bond1: (slave veth3): Enslaving as an active interface with a down link [ 281.264720][ T8046] bond1: (slave veth0_to_bond): making interface the new active one [ 281.305859][ T8046] veth0_to_bond: entered promiscuous mode [ 281.341170][ T8046] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 281.516517][ T8076] Cannot find add_set index 0 as target [ 282.101692][ T8075] syz.7.485 (8075): drop_caches: 2 [ 282.301271][ T8048] vlan2: entered allmulticast mode [ 282.309438][ T8048] veth1: entered allmulticast mode [ 282.318678][ T8048] veth1: entered promiscuous mode [ 283.023846][ T8083] syz.4.487 (8083) used greatest stack depth: 19840 bytes left [ 283.068691][ T8048] veth1: left promiscuous mode [ 283.127645][ T8048] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 286.218454][ T8102] netlink: 4 bytes leftover after parsing attributes in process `syz.4.492'. [ 287.357903][ T5955] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 287.656549][ T5955] usb 7-1: Using ep0 maxpacket: 32 [ 287.838207][ T5955] usb 7-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 288.517909][ T5955] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.866462][ T5955] usb 7-1: config 0 descriptor?? [ 288.890468][ T5955] usb 7-1: selecting invalid altsetting 3 [ 288.896499][ T5955] comedi comedi0: could not set alternate setting 3 in high speed [ 288.908747][ T5955] usbduxsigma 7-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 288.959173][ T5955] usbduxsigma 7-1:0.0: probe with driver usbduxsigma failed with error -22 [ 292.387841][ T5955] usb 7-1: USB disconnect, device number 8 [ 296.517674][ T8145] kvm: kvm [8140]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 296.538895][ T8145] kvm: kvm [8140]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 296.605574][ T8145] kvm: kvm [8140]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 296.683921][ T8145] kvm: kvm [8140]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0x4000 [ 297.464869][ T8175] orangefs_mount: mount request failed with -4 [ 298.149136][ T5911] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 298.608587][ T5911] usb 4-1: config 0 has no interfaces? [ 299.570955][ T5911] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 299.658006][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 299.666265][ T5911] usb 4-1: Product: syz [ 299.721140][ T5911] usb 4-1: Manufacturer: syz [ 299.748078][ T5911] usb 4-1: SerialNumber: syz [ 301.409480][ T5911] usb 4-1: config 0 descriptor?? [ 301.429934][ T5911] usb 4-1: can't set config #0, error -71 [ 301.440773][ T5911] usb 4-1: USB disconnect, device number 10 [ 301.577269][ T8214] syz.0.513 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 308.941613][ T8245] Invalid ELF header magic: != ELF [ 310.333818][ T24] IPVS: starting estimator thread 0... [ 310.436236][ T8256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 310.498136][ T8257] IPVS: using max 26 ests per chain, 62400 per kthread [ 310.700436][ T8261] syz_tun: entered allmulticast mode [ 310.739180][ T7446] veth0_to_bond: left promiscuous mode [ 310.858714][ T8260] syz_tun: left allmulticast mode [ 312.900658][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 312.923146][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 313.643901][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 313.659648][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 313.667643][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 314.115914][ T7682] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.194591][ T5833] Bluetooth: hci3: command tx timeout [ 316.584654][ T7682] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.227953][ T5833] Bluetooth: hci3: command tx timeout [ 318.314265][ T7682] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.544716][ T7682] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.674686][ T8331] trusted_key: encrypted_key: insufficient parameters specified [ 320.307995][ T5833] Bluetooth: hci3: command tx timeout [ 320.506507][ T8363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.544'. [ 320.515808][ T8363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.544'. [ 320.525022][ T8363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.544'. [ 320.534301][ T8363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.544'. [ 320.543418][ T8363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.544'. [ 320.553404][ T8363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.544'. [ 320.563323][ T8363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.544'. [ 320.572646][ T8363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.544'. [ 320.581864][ T8363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.544'. [ 320.591439][ T8363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.544'. [ 321.153944][ T8283] chnl_net:caif_netlink_parms(): no params data found [ 322.439091][ T5833] Bluetooth: hci3: command tx timeout [ 322.478582][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.484948][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 325.424056][ T8409] trusted_key: encrypted_key: insufficient parameters specified [ 325.668761][ T5896] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 325.870121][ T5896] usb 7-1: Using ep0 maxpacket: 32 [ 326.459283][ T5896] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 326.468674][ T5896] usb 7-1: config 0 has no interface number 0 [ 326.475398][ T5896] usb 7-1: config 0 interface 12 has no altsetting 0 [ 326.491610][ T5896] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 326.501112][ T5896] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.511889][ T5896] usb 7-1: Product: syz [ 326.516138][ T5896] usb 7-1: Manufacturer: syz [ 326.527851][ T5896] usb 7-1: SerialNumber: syz [ 326.535744][ T5896] usb 7-1: config 0 descriptor?? [ 326.544328][ T5896] f81534 7-1:0.12: required endpoints missing [ 326.580326][ T8415] __nla_validate_parse: 42 callbacks suppressed [ 326.580347][ T8415] netlink: 4 bytes leftover after parsing attributes in process `syz.3.557'. [ 327.412162][ T7682] bond0 (unregistering): Released all slaves [ 327.515066][ T24] usb 7-1: USB disconnect, device number 9 [ 327.725348][ T7682] : left promiscuous mode [ 328.025398][ T7682] tipc: Left network mode [ 332.530682][ T1194] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 332.969471][ T8283] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.976777][ T8283] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.032759][ T8283] bridge_slave_0: entered allmulticast mode [ 333.050757][ T8283] bridge_slave_0: entered promiscuous mode [ 333.061600][ T8283] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.441101][ T1194] usb 1-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.463776][ T8462] trusted_key: encrypted_key: insufficient parameters specified [ 333.472006][ T8283] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.485204][ T1194] usb 1-1: config 0 interface 0 has no altsetting 0 [ 333.492652][ T8283] bridge_slave_1: entered allmulticast mode [ 333.512690][ T1194] usb 1-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 333.537360][ T8283] bridge_slave_1: entered promiscuous mode [ 333.577008][ T1194] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.629505][ T1194] usb 1-1: config 0 descriptor?? [ 333.730355][ T8464] netlink: 8 bytes leftover after parsing attributes in process `syz.6.568'. [ 334.088236][ T7682] dummy0: left promiscuous mode [ 334.109739][ T7682] team0: left promiscuous mode [ 334.114071][ T1194] apple 0003:05AC:027A.0009: hidraw0: USB HID v8.00 Device [HID 05ac:027a] on usb-dummy_hcd.0-1/input0 [ 334.182612][ T7682] hsr_slave_0: left promiscuous mode [ 334.306738][ T7682] veth1_macvtap: left promiscuous mode [ 334.315655][ T7682] veth0_macvtap: left promiscuous mode [ 334.326221][ T7682] veth1_vlan: left promiscuous mode [ 334.364926][ T7682] veth0_vlan: left promiscuous mode [ 335.344049][ T1194] usb 1-1: USB disconnect, device number 10 [ 335.563404][ T8484] ALSA: mixer_oss: invalid OSS volume '˙18446744073709551615˙˙˙˙' [ 338.538520][ T5838] Bluetooth: hci3: command 0x0405 tx timeout [ 339.526435][ T8523] trusted_key: encrypted_key: insufficient parameters specified [ 340.933722][ T5838] Bluetooth: hci4: command 0x1003 tx timeout [ 341.163629][ T5833] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 341.799554][ T5814] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 342.060327][ T5814] usb 1-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.078876][ T5814] usb 1-1: config 0 interface 0 has no altsetting 0 [ 342.085580][ T5814] usb 1-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 342.105110][ T5814] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.121178][ T5814] usb 1-1: config 0 descriptor?? [ 342.451693][ T5903] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 342.532705][ T8283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.544883][ T8487] bridge0: port 3(netdevsim0) entered blocking state [ 342.553006][ T8487] bridge0: port 3(netdevsim0) entered disabled state [ 342.564249][ T8487] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 342.575890][ T8487] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 342.585260][ T8487] bridge0: port 3(netdevsim0) entered blocking state [ 342.592440][ T8487] bridge0: port 3(netdevsim0) entered forwarding state [ 342.612675][ T8511] netlink: 80 bytes leftover after parsing attributes in process `syz.3.578'. [ 342.652030][ T8283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.777083][ T5814] apple 0003:05AC:027A.000A: hidraw0: USB HID v8.00 Device [HID 05ac:027a] on usb-dummy_hcd.0-1/input0 [ 342.796075][ T5903] usb 8-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 342.858190][ T5903] usb 8-1: config 0 interface 0 has no altsetting 0 [ 342.911708][ T5903] usb 8-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00 [ 343.179712][ T5903] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.192211][ T5903] usb 8-1: config 0 descriptor?? [ 343.951778][ T5896] usb 1-1: USB disconnect, device number 11 [ 344.172832][ T8283] team0: Port device team_slave_0 added [ 344.243419][ T8283] team0: Port device team_slave_1 added [ 344.883120][ T5903] corsair-cpro 0003:1B1C:1D00.000B: hidraw1: USB HID v0.00 Device [HID 1b1c:1d00] on usb-dummy_hcd.7-1/input0 [ 344.973532][ T5903] corsair-cpro 0003:1B1C:1D00.000B: probe with driver corsair-cpro failed with error -38 [ 345.047583][ T5903] usb 8-1: USB disconnect, device number 2 [ 345.205913][ T8573] fido_id[8573]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 345.384545][ T8283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.392742][ T8283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.424822][ T8283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.447848][ T8283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.468032][ T8283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.502798][ T8283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.514577][ T8283] hsr_slave_0: entered promiscuous mode [ 346.567055][ T8283] hsr_slave_1: entered promiscuous mode [ 346.591832][ T8283] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 346.614003][ T8283] Cannot create hsr debugfs directory [ 347.586689][ T8583] trusted_key: encrypted_key: insufficient parameters specified [ 350.152979][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 350.599810][ T5814] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 352.239234][ T5814] usb 8-1: Using ep0 maxpacket: 32 [ 352.264237][ T5814] usb 8-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 352.474776][ T5814] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.813263][ T5814] usb 8-1: config 0 descriptor?? [ 353.027821][ T5814] usb 8-1: selecting invalid altsetting 3 [ 353.045307][ T5814] comedi comedi0: could not set alternate setting 3 in high speed [ 353.053912][ T5814] usbduxsigma 8-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 353.073313][ T5814] usbduxsigma 8-1:0.0: probe with driver usbduxsigma failed with error -22 [ 353.299488][ T5896] usb 8-1: USB disconnect, device number 3 [ 354.602788][ T8283] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 354.616326][ T8283] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 354.666800][ T8283] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 355.050367][ T8661] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 356.779951][ T5896] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 357.180104][ T8283] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 357.295458][ T5896] usb 4-1: config 0 has an invalid interface number: 205 but max is 0 [ 357.410094][ T8656] trusted_key: encrypted_key: insufficient parameters specified [ 357.461476][ T5896] usb 4-1: config 0 has no interface number 0 [ 357.568077][ T5896] usb 4-1: config 0 interface 205 altsetting 241 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 357.758976][ T5896] usb 4-1: config 0 interface 205 has no altsetting 0 [ 357.860137][ T5896] usb 4-1: string descriptor 0 read error: -71 [ 357.866517][ T5896] usb 4-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 357.899147][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.980958][ T5896] usb 4-1: config 0 descriptor?? [ 358.001650][ T5896] usb 4-1: can't set config #0, error -71 [ 358.042974][ T5896] usb 4-1: USB disconnect, device number 11 [ 358.164339][ T8283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.037458][ T8283] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.074934][ T7446] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.082180][ T7446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.477174][ T7446] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.484765][ T7446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.866685][ T8283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.581954][ T8728] trusted_key: encrypted_key: insufficient parameters specified [ 366.685896][ T8283] veth0_vlan: entered promiscuous mode [ 366.744367][ T8283] veth1_vlan: entered promiscuous mode [ 367.051560][ T8283] veth0_macvtap: entered promiscuous mode [ 367.062295][ T8283] veth1_macvtap: entered promiscuous mode [ 368.059443][ T8756] trusted_key: encrypted_key: insufficient parameters specified [ 368.457906][ T8283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.485430][ T13] Bluetooth: hci4: Frame reassembly failed (-84) [ 369.010247][ T8283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.403711][ T5814] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 370.570220][ T5838] Bluetooth: hci4: command 0x1003 tx timeout [ 370.582482][ T5833] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 372.801735][ T8779] trusted_key: encrypted_key: insufficient parameters specified [ 373.063142][ T8781] trusted_key: encrypted_key: insufficient parameters specified [ 373.449768][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 373.459091][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 373.467953][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 373.478061][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 373.486513][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 374.201210][ T8787] chnl_net:caif_netlink_parms(): no params data found [ 374.575666][ T8787] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.583371][ T8787] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.590656][ T8787] bridge_slave_0: entered allmulticast mode [ 374.598812][ T8787] bridge_slave_0: entered promiscuous mode [ 374.609510][ T8787] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.622444][ T8787] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.629814][ T8787] bridge_slave_1: entered allmulticast mode [ 374.643919][ T8787] bridge_slave_1: entered promiscuous mode [ 374.740723][ T8787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.778686][ T8787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.874739][ T8787] team0: Port device team_slave_0 added [ 374.886134][ T8787] team0: Port device team_slave_1 added [ 374.898733][ T1339] bridge_slave_1: left allmulticast mode [ 374.913227][ T1339] bridge_slave_1: left promiscuous mode [ 374.920122][ T1339] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.935035][ T1339] bridge_slave_0: left allmulticast mode [ 374.940757][ T1339] bridge_slave_0: left promiscuous mode [ 374.947143][ T1339] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.438010][ T1339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 375.459232][ T1339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 375.478712][ T1339] bond0 (unregistering): Released all slaves [ 375.512138][ T5838] Bluetooth: hci4: command tx timeout [ 375.601417][ T8787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.626100][ T8787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.662355][ T8787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.685727][ T1339] hsr_slave_0: left promiscuous mode [ 375.698703][ T1339] hsr_slave_1: left promiscuous mode [ 375.706073][ T1339] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 375.721121][ T1339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.729851][ T1339] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 375.743005][ T1339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 375.779754][ T1339] veth1_macvtap: left promiscuous mode [ 375.789474][ T1339] veth0_macvtap: left promiscuous mode [ 375.799577][ T1339] veth1_vlan: left promiscuous mode [ 375.807898][ T1339] veth0_vlan: left promiscuous mode [ 376.429343][ T1339] team0 (unregistering): Port device team_slave_1 removed [ 376.481418][ T1339] team0 (unregistering): Port device team_slave_0 removed [ 376.890623][ T8787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.898403][ T8787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.924845][ T8787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.037952][ T8787] hsr_slave_0: entered promiscuous mode [ 377.050511][ T8787] hsr_slave_1: entered promiscuous mode [ 377.057112][ T8787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 377.064749][ T8787] Cannot create hsr debugfs directory [ 377.602648][ T5838] Bluetooth: hci4: command tx timeout [ 377.696218][ T8787] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 377.710967][ T8787] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 377.724744][ T8787] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 377.741712][ T8787] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 377.900115][ T8787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.933912][ T8787] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.953766][ T1339] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.960999][ T1339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.996194][ T1339] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.003460][ T1339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.358063][ T8787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.741159][ T8787] veth0_vlan: entered promiscuous mode [ 378.761091][ T8787] veth1_vlan: entered promiscuous mode [ 378.823852][ T8787] veth0_macvtap: entered promiscuous mode [ 378.847200][ T8787] veth1_macvtap: entered promiscuous mode [ 378.880662][ T8787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.903650][ T8787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.924457][ T8787] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.937164][ T8787] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.957987][ T8787] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.967717][ T8787] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.088008][ T6025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.113322][ T6025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.156216][ T6025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.164666][ T6025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.350480][ T8906] random: crng reseeded on system resumption [ 380.402855][ T5838] Bluetooth: hci4: command tx timeout [ 382.476978][ T5838] Bluetooth: hci4: command tx timeout [ 383.944337][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.956277][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.779575][ T8937] trusted_key: encrypted_key: insufficient parameters specified [ 390.223866][ T8984] netlink: 4 bytes leftover after parsing attributes in process `syz.3.658'. [ 393.833941][ T9014] syz.7.664 (9014): drop_caches: 2 [ 395.616547][ T9029] trusted_key: encrypted_key: insufficient parameters specified [ 396.084098][ T9037] netlink: 40 bytes leftover after parsing attributes in process `syz.8.669'. [ 398.788095][ T9048] tipc: Started in network mode [ 398.793840][ T9048] tipc: Node identity _, cluster identity 4711 [ 411.985034][ T9147] Lens B: ================= START STATUS ================= [ 411.985082][ T9147] Lens B: Focus, Absolute: 0 [ 411.986281][ T9147] Lens B: ================== END STATUS ================== [ 412.984702][ T9156] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 412.984802][ T9156] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 414.242257][ T9151] trusted_key: encrypted_key: insufficient parameters specified [ 416.537553][ T1194] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 417.807562][ T1194] usb 7-1: config 0 has an invalid interface number: 93 but max is 0 [ 417.909957][ T1194] usb 7-1: config 0 has no interface number 0 [ 417.945598][ T1194] usb 7-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 418.151863][ T44] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 418.440579][ T44] usb 8-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.452096][ T44] usb 8-1: config 0 interface 0 has no altsetting 0 [ 418.460087][ T44] usb 8-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 418.573346][ T44] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.585405][ T1194] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.585437][ T1194] usb 7-1: Product: syz [ 418.585454][ T1194] usb 7-1: Manufacturer: syz [ 418.585596][ T1194] usb 7-1: SerialNumber: syz [ 418.773845][ T44] usb 8-1: config 0 descriptor?? [ 418.998944][ T1194] usb 7-1: config 0 descriptor?? [ 419.146757][ T1194] usb 7-1: can't set config #0, error -71 [ 419.387775][ T1194] usb 7-1: USB disconnect, device number 10 [ 420.678993][ T44] usbhid 8-1:0.0: can't add hid device: -71 [ 420.685512][ T44] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 420.698574][ T44] usb 8-1: USB disconnect, device number 5 [ 420.739216][ T9214] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 420.748339][ T9214] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 424.201012][ T9241] hfsplus: unable to find HFS+ superblock [ 425.504360][ T7446] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.911165][ T7446] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.353304][ T5814] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 427.737745][ T7446] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.774927][ T9273] program syz.3.721 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 429.079795][ T7446] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.368903][ T5814] usb 7-1: device descriptor read/all, error -71 [ 430.189234][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 430.234499][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 430.352352][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 430.371320][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 430.384125][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 430.920499][ T9301] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 432.500984][ T7446] bridge_slave_1: left allmulticast mode [ 432.522860][ T9312] overlayfs: failed to get index nlink (file1/file0, err=-61) [ 432.531203][ T7446] bridge_slave_1: left promiscuous mode [ 432.562420][ T5833] Bluetooth: hci3: command tx timeout [ 432.593437][ T7446] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.858535][ T7446] bridge_slave_0: left allmulticast mode [ 432.867953][ T9307] ceph: No mds server is up or the cluster is laggy [ 432.888977][ T7446] bridge_slave_0: left promiscuous mode [ 432.934223][ T7446] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.577678][ T9238] syz.0.712 (9238): drop_caches: 2 [ 434.651136][ T5833] Bluetooth: hci3: command tx timeout [ 436.149672][ T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 436.172128][ T1194] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 436.725186][ T5833] Bluetooth: hci3: command tx timeout [ 438.799863][ T5833] Bluetooth: hci3: command tx timeout [ 441.810371][ T1194] usb 4-1: device descriptor read/64, error -110 [ 443.035299][ T9375] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 443.602065][ T7446] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 443.645092][ T7446] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 443.709327][ T9384] vivid-002: ================= START STATUS ================= [ 443.719110][ T9384] vivid-002: Radio HW Seek Mode: Bounded [ 443.726376][ T9384] vivid-002: Radio Programmable HW Seek: false [ 443.732940][ T9384] vivid-002: RDS Rx I/O Mode: Block I/O [ 443.738733][ T9384] vivid-002: Generate RBDS Instead of RDS: false [ 443.746152][ T9384] vivid-002: RDS Reception: true [ 443.751480][ T9384] vivid-002: RDS Program Type: 0 inactive [ 443.757445][ T9384] vivid-002: RDS PS Name: inactive [ 443.767164][ T9384] vivid-002: RDS Radio Text: inactive [ 443.877014][ T9384] vivid-002: RDS Traffic Announcement: false inactive [ 443.888579][ T7446] bond0 (unregistering): Released all slaves [ 444.817571][ T9384] vivid-002: RDS Traffic Program: false inactive [ 444.990593][ T9384] vivid-002: RDS Music: false inactive [ 444.998795][ T9384] vivid-002: ================== END STATUS ================== [ 445.385065][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.391552][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.911177][ T9418] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 445.930384][ T9418] qnx6: wrong signature (magic) in superblock #1. [ 445.936987][ T9418] qnx6: unable to read the first superblock [ 448.001126][ T5833] Bluetooth: hci2: command 0x0406 tx timeout [ 448.878308][ T9296] chnl_net:caif_netlink_parms(): no params data found [ 448.887665][ T9449] fuse: Bad value for 'fd' [ 449.313111][ T7446] hsr_slave_0: left promiscuous mode [ 449.403551][ T7446] hsr_slave_1: left promiscuous mode [ 449.451750][ T7446] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.505507][ T7446] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 449.581685][ T7446] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 449.589844][ T7446] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 449.700101][ T7446] veth1_macvtap: left promiscuous mode [ 449.809528][ T7446] veth0_macvtap: left promiscuous mode [ 450.223459][ T7446] veth1_vlan: left promiscuous mode [ 450.231010][ T7446] veth0_vlan: left promiscuous mode [ 450.232055][ T7444] Bluetooth: hci4: Frame reassembly failed (-84) [ 450.606034][ T9460] netlink: 684 bytes leftover after parsing attributes in process `syz.6.758'. [ 452.243833][ T5833] Bluetooth: hci4: command 0x1003 tx timeout [ 452.254416][ T5838] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 452.576893][ T9473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.761'. [ 452.586405][ T9473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.761'. [ 452.954602][ T9477] openvswitch: netlink: IP tunnel dst address not specified [ 453.977889][ T9482] random: crng reseeded on system resumption [ 460.004500][ T9506] netlink: 'syz.6.769': attribute type 10 has an invalid length. [ 460.627256][ T9515] xt_CT: You must specify a L4 protocol and not use inversions on it [ 463.191471][ T9522] 9pnet_fd: Insufficient options for proto=fd [ 463.196655][ T9520] trusted_key: encrypted_key: insufficient parameters specified [ 463.397856][ T7446] team0 (unregistering): Port device team_slave_1 removed [ 463.453256][ T7446] team0 (unregistering): Port device team_slave_0 removed [ 463.588431][ T9525] 9pnet_fd: Insufficient options for proto=fd [ 464.310391][ T9506] team0: Port device syz_tun added [ 465.659613][ T9553] trusted_key: encrypted_key: insufficient parameters specified [ 467.167785][ T9296] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.184079][ T9296] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.227808][ T9296] bridge_slave_0: entered allmulticast mode [ 467.252252][ T9296] bridge_slave_0: entered promiscuous mode [ 467.277694][ T9296] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.292047][ T9296] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.407642][ T9296] bridge_slave_1: entered allmulticast mode [ 467.477235][ T9296] bridge_slave_1: entered promiscuous mode [ 468.583156][ T10] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 469.032484][ T9589] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 469.797713][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 471.115226][ T10] usb 8-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 471.128739][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.131944][ T9296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 471.146649][ T10] usb 8-1: config 0 descriptor?? [ 471.285814][ T9296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 471.303590][ T10] usb 8-1: can't set config #0, error -71 [ 471.336681][ T10] usb 8-1: USB disconnect, device number 6 [ 473.139781][ T9615] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 475.940898][ T9296] team0: Port device team_slave_0 added [ 475.987350][ T9296] team0: Port device team_slave_1 added [ 476.915756][ T9296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.017137][ T9296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.348943][ T9296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.434444][ T9644] loop6: detected capacity change from 0 to 524287999 [ 477.523562][ T9296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.531281][ T9296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.595089][ T9605] Buffer I/O error on dev loop6, logical block 0, async page read [ 477.607400][ T9605] Buffer I/O error on dev loop6, logical block 0, async page read [ 477.616649][ T9605] Buffer I/O error on dev loop6, logical block 0, async page read [ 477.629576][ T9296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 477.641649][ T9605] Buffer I/O error on dev loop6, logical block 0, async page read [ 477.658268][ T9605] Buffer I/O error on dev loop6, logical block 0, async page read [ 477.914435][ T9605] Buffer I/O error on dev loop6, logical block 0, async page read [ 477.923778][ T9605] Buffer I/O error on dev loop6, logical block 0, async page read [ 477.931931][ T9605] Buffer I/O error on dev loop6, logical block 0, async page read [ 477.942028][ T9605] ldm_validate_partition_table(): Disk read failed. [ 477.953550][ T9605] Buffer I/O error on dev loop6, logical block 0, async page read [ 477.963389][ T9605] Buffer I/O error on dev loop6, logical block 0, async page read [ 477.975309][ T9605] Dev loop6: unable to read RDB block 0 [ 477.991680][ T9605] loop6: unable to read partition table [ 478.424625][ T9651] trusted_key: encrypted_key: insufficient parameters specified [ 478.441345][ T9296] hsr_slave_0: entered promiscuous mode [ 478.537727][ T9296] hsr_slave_1: entered promiscuous mode [ 478.995091][ T9296] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 479.040977][ T9296] Cannot create hsr debugfs directory [ 481.574233][ T9691] No such timeout policy "syz1" [ 484.511494][ T9715] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.810'. [ 485.180011][ T9705] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 485.199841][ T9296] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 485.222118][ T9705] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 485.738065][ T9296] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 485.765306][ T5838] Bluetooth: hci5: command 0x0406 tx timeout [ 485.840473][ T9705] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 485.848271][ T9296] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 485.874292][ T9705] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 485.891234][ T9705] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 485.914358][ T7445] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 485.914905][ T9296] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 485.954872][ T9705] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 487.645688][ T9733] trusted_key: encrypted_key: insufficient parameters specified [ 487.911657][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 487.911743][ T5838] Bluetooth: hci5: command 0x0406 tx timeout [ 487.926573][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 490.061593][ T3563] Bluetooth: (null): Invalid header checksum [ 490.065216][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 490.144550][ T3563] Bluetooth: (null): Invalid header checksum [ 490.150764][ T3563] Bluetooth: (null): Invalid header checksum [ 490.158458][ T3563] Bluetooth: (null): Invalid header checksum [ 490.175909][ T3563] Bluetooth: (null): Invalid header checksum [ 490.195317][ T7444] Bluetooth: (null): Invalid header checksum [ 490.309343][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 490.319493][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 490.329366][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 490.346416][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 490.383487][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 490.612879][ T9781] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 492.995316][ T9792] netlink: 60 bytes leftover after parsing attributes in process `syz.3.823'. [ 493.025169][ T5838] Bluetooth: hci4: command tx timeout [ 493.784456][ T9791] ip6erspan0: entered allmulticast mode [ 494.628580][ T9813] trusted_key: encrypted_key: insufficient parameters specified [ 495.429376][ T5838] Bluetooth: hci4: command tx timeout [ 497.449546][ T5838] Bluetooth: hci4: command tx timeout [ 497.865714][ T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 498.256972][ T9771] chnl_net:caif_netlink_parms(): no params data found [ 498.759877][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 499.236895][ T10] usb 4-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 499.246335][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.367899][ T10] usb 4-1: config 0 descriptor?? [ 499.457146][ T10] usb 4-1: selecting invalid altsetting 3 [ 499.495127][ T10] comedi comedi0: could not set alternate setting 3 in high speed [ 499.503028][ T10] usbduxsigma 4-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 499.525253][ T5838] Bluetooth: hci4: command tx timeout [ 499.552545][ T10] usbduxsigma 4-1:0.0: probe with driver usbduxsigma failed with error -22 [ 500.085307][ T9581] usb 4-1: USB disconnect, device number 14 [ 500.364794][ T7445] bridge_slave_1: left allmulticast mode [ 501.055586][ T7445] bridge_slave_1: left promiscuous mode [ 501.063428][ T7445] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.293573][ T7445] bridge_slave_0: left allmulticast mode [ 501.300398][ T7445] bridge_slave_0: left promiscuous mode [ 501.306838][ T7445] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.227434][ T9882] netlink: 'syz.7.840': attribute type 11 has an invalid length. [ 504.329229][ T9892] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 504.535370][ T9890] trusted_key: encrypted_key: insufficient parameters specified [ 504.626018][ T7445] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 504.650961][ T7445] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 504.668855][ T7445] bond0 (unregistering): Released all slaves [ 504.775409][ T9898] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 505.005646][ T7445] hsr_slave_0: left promiscuous mode [ 505.021698][ T7445] hsr_slave_1: left promiscuous mode [ 505.030283][ T7445] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 505.086720][ T7445] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 506.192235][ T9914] syz.6.846 (9914): drop_caches: 2 [ 507.464741][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.504916][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 508.015218][ T5903] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 508.909259][ T9933] syz.3.850 (9933): drop_caches: 2 [ 509.548122][ T5903] usb 7-1: Using ep0 maxpacket: 32 [ 509.595994][ T5903] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 509.604159][ T5903] usb 7-1: config 0 has no interface number 0 [ 509.690727][ T5903] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 509.716077][ T5903] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.085174][ T5903] usb 7-1: Product: syz [ 511.089419][ T5903] usb 7-1: Manufacturer: syz [ 511.094067][ T5903] usb 7-1: SerialNumber: syz [ 511.158245][ T5903] usb 7-1: config 0 descriptor?? [ 511.194254][ T5903] usb 7-1: can't set config #0, error -71 [ 511.208126][ T5903] usb 7-1: USB disconnect, device number 13 [ 511.482193][ T9957] trusted_key: encrypted_key: insufficient parameters specified [ 511.586891][ T7445] team0 (unregistering): Port device team_slave_1 removed [ 512.401377][ T7445] team0 (unregistering): Port device team_slave_0 removed [ 513.546838][ T9771] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.563620][ T9771] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.587434][ T9771] bridge_slave_0: entered allmulticast mode [ 514.504527][ T9771] bridge_slave_0: entered promiscuous mode [ 514.757563][ T9771] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.764791][ T9771] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.789379][ T9771] bridge_slave_1: entered allmulticast mode [ 514.816829][ T9771] bridge_slave_1: entered promiscuous mode [ 515.745386][ T9977] btrfs: Unknown parameter 'barrieré«Č›o[ě' [ 518.652386][ T9771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 518.840591][ T9771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 521.643558][ T9771] team0: Port device team_slave_0 added [ 521.968963][ T9771] team0: Port device team_slave_1 added [ 522.034263][T10012] trusted_key: encrypted_key: insufficient parameters specified [ 522.326267][ T5814] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 522.432765][ T9771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 522.440145][ T9771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 522.565370][ T5814] usb 8-1: Using ep0 maxpacket: 16 [ 522.603469][ T5814] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 522.695195][ T5814] usb 8-1: too many endpoints for config 1 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 522.695424][ T10] libceph: connect (1)[c::]:6789 error -101 [ 522.707303][ T5814] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 522.771891][ T9771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 522.772223][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 522.951369][ T5814] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 522.952212][ T9771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 522.977037][ T9771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.015341][ T5814] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 523.202299][ T5814] usb 8-1: SerialNumber: syz [ 523.207771][ T10] libceph: connect (1)[c::]:6789 error -101 [ 523.209219][ T9771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.220992][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 524.091883][T10035] ceph: No mds server is up or the cluster is laggy [ 524.658045][T10051] ptrace attach of "./syz-executor exec"[7380] was attempted by "./syz-executor exec"[10051] [ 524.813930][ T9902] libceph: connect (1)[c::]:6789 error -101 [ 524.832174][ T9902] libceph: mon0 (1)[c::]:6789 connect error [ 524.912976][ T9771] hsr_slave_0: entered promiscuous mode [ 524.951388][ T9771] hsr_slave_1: entered promiscuous mode [ 524.964011][ T9771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 524.972037][ T10] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 524.979994][ T9771] Cannot create hsr debugfs directory [ 524.987193][T10051] netlink: 4 bytes leftover after parsing attributes in process `syz.7.871'. [ 525.005856][T10051] tipc: Enabled bearer , priority 10 [ 525.351647][ T10] usb 7-1: device descriptor read/64, error -71 [ 525.676653][ T10] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 525.845845][ T10] usb 7-1: device descriptor read/64, error -71 [ 525.965746][ T10] usb usb7-port1: attempt power cycle [ 526.017311][ T9902] tipc: Node number set to 523894784 [ 527.081338][ T5814] usb 8-1: USB disconnect, device number 7 [ 527.125490][ T10] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 527.181766][ T10] usb 7-1: device descriptor read/8, error -71 [ 527.671454][T10072] syz_tun: entered allmulticast mode [ 528.066945][T10070] syz_tun: left allmulticast mode [ 529.373192][T10090] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 530.170977][ T9771] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 530.439015][ T9771] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 530.868928][ T9771] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 530.976236][ T9771] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 530.985482][T10097] trusted_key: encrypted_key: insufficient parameters specified [ 533.429175][ T10] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 533.942840][ T9771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 534.125402][ T9771] 8021q: adding VLAN 0 to HW filter on device team0 [ 534.135135][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 534.142414][ T10] usb 7-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 534.151996][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.183811][ T10] usb 7-1: config 0 descriptor?? [ 534.197656][ T3563] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.204906][ T3563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 534.329577][T10140] Illegal XDP return value 4294967282 on prog (id 205) dev N/A, expect packet loss! [ 534.735534][T10139] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 534.747196][ T10] usb 7-1: selecting invalid altsetting 3 [ 534.787650][ T10] comedi comedi0: could not set alternate setting 3 in high speed [ 534.828364][ T3563] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.835679][ T3563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 534.853911][ T10] usbduxsigma 7-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 534.907379][ T10] usbduxsigma 7-1:0.0: probe with driver usbduxsigma failed with error -22 [ 534.956721][ T10] usb 7-1: USB disconnect, device number 18 [ 535.933010][T10133] syz.7.890 (10133) used greatest stack depth: 16656 bytes left [ 539.476527][T10167] ALSA: mixer_oss: invalid OSS volume '' [ 540.856386][ T9771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 541.970962][T10195] RDS: rds_bind could not find a transport for fe80::17, load rds_tcp or rds_rdma? [ 541.997769][ T30] audit: type=1800 audit(1750088153.837:4): pid=10195 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.901" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=28272 res=0 errno=0 [ 544.233187][T10214] ALSA: seq fatal error: cannot create timer (-16) [ 549.785461][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 549.802786][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 549.816546][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 549.933947][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 549.976561][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 552.115928][ T5833] Bluetooth: hci3: command tx timeout [ 552.694664][T10286] netlink: 'syz.6.917': attribute type 2 has an invalid length. [ 555.124946][ T5833] Bluetooth: hci3: command tx timeout [ 557.285259][ T5833] Bluetooth: hci3: command tx timeout [ 558.386481][T10321] netlink: 36 bytes leftover after parsing attributes in process `syz.3.925'. [ 558.415476][T10321] netlink: 16 bytes leftover after parsing attributes in process `syz.3.925'. [ 558.437721][T10321] netlink: 36 bytes leftover after parsing attributes in process `syz.3.925'. [ 558.448647][T10321] netlink: 36 bytes leftover after parsing attributes in process `syz.3.925'. [ 558.463222][ T6615] team0: Port device syz_tun removed [ 558.515794][T10257] chnl_net:caif_netlink_parms(): no params data found [ 558.711644][T10331] netlink: 36 bytes leftover after parsing attributes in process `syz.0.927'. [ 558.862237][T10325] syz_tun: entered allmulticast mode [ 559.019189][T10322] syz_tun: left allmulticast mode [ 559.367093][ T5833] Bluetooth: hci3: command tx timeout [ 559.493018][T10257] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.500415][T10257] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.508245][T10257] bridge_slave_0: entered allmulticast mode [ 559.516439][T10257] bridge_slave_0: entered promiscuous mode [ 560.018972][T10359] Mount JFS Failure: -22 [ 560.023533][T10359] jfs_mount failed w/return code = -22 [ 560.997585][T10257] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.007521][T10257] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.021339][T10257] bridge_slave_1: entered allmulticast mode [ 561.247601][T10257] bridge_slave_1: entered promiscuous mode [ 563.138464][T10368] xt_TPROXY: Can be used only with -p tcp or -p udp [ 563.770812][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 563.795493][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 563.804657][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 563.838776][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 563.849210][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 565.219849][T10257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 565.247673][T10257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 566.291754][ T5838] Bluetooth: hci4: command tx timeout [ 567.310706][T10257] team0: Port device team_slave_0 added [ 567.415319][ T24] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 567.422419][T10257] team0: Port device team_slave_1 added [ 568.257818][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.264155][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.325403][ T5838] Bluetooth: hci4: command tx timeout [ 568.351290][T10389] sp0: Synchronizing with TNC [ 570.085174][T10257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 570.121858][T10407] btrfs: Unknown parameter 'barrieré«Č›o[ě' [ 570.405351][ T5838] Bluetooth: hci4: command tx timeout [ 570.448328][T10257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 570.622028][T10257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 570.961522][T10257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 570.975182][T10257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 676.189113][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 676.196215][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P10415/1:b..l P10414/1:b..l [ 676.206286][ C0] rcu: (detected by 0, t=10502 jiffies, g=41101, q=526 ncpus=2) [ 676.214230][ C0] task:sed state:R running task stack:23464 pid:10414 tgid:10414 ppid:10413 task_flags:0x400000 flags:0x00004000 [ 676.229966][ C0] Call Trace: [ 676.233301][ C0] [ 676.236287][ C0] __schedule+0x16a2/0x4cb0 [ 676.241015][ C0] ? __pfx___schedule+0x10/0x10 [ 676.245926][ C0] ? preempt_schedule_irq+0xb5/0x150 [ 676.251455][ C0] ? __pfx___schedule+0x10/0x10 [ 676.256466][ C0] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 676.263557][ C0] ? rcu_is_watching+0x15/0xb0 [ 676.268400][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 676.273855][ C0] preempt_schedule_irq+0xb5/0x150 [ 676.279023][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 676.284893][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 676.290753][ C0] irqentry_exit+0x6f/0x90 [ 676.295322][ C0] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 676.301362][ C0] RIP: 0010:__asan_memset+0x2f/0x50 [ 676.306695][ C0] Code: 41 56 53 48 89 d3 89 f5 49 89 fe 48 8b 4c 24 18 48 89 d6 ba 01 00 00 00 e8 7e e4 ff ff 84 c0 74 11 4c 89 f7 89 ee 48 89 da 5b <41> 5e 5d e9 09 ab 3d 09 31 c0 5b 41 5e 5d c3 cc cc cc cc cc 66 66 [ 676.326602][ C0] RSP: 0018:ffffc9000440f560 EFLAGS: 00000202 [ 676.332710][ C0] RAX: 1ffff92000881e01 RBX: ffffc9000440f680 RCX: ffffffff8172a6e8 [ 676.340808][ C0] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc9000440f698 [ 676.348982][ C0] RBP: 0000000000000000 R08: ffffc9000440f6a7 R09: 1ffff92000881ed4 [ 676.357175][ C0] R10: dffffc0000000000 R11: fffff52000881ed5 R12: ffffc9000440fae0 [ 676.366063][ C0] R13: ffffc9000440f698 R14: ffffc9000440f698 R15: ffffc9000440f690 [ 676.374191][ C0] ? unwind_next_frame+0xc98/0x2390 [ 676.379761][ C0] unwind_next_frame+0xc98/0x2390 [ 676.385050][ C0] ? unwind_next_frame+0xa5/0x2390 [ 676.390329][ C0] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 676.396747][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 676.403230][ C0] arch_stack_walk+0x11c/0x150 [ 676.408063][ C0] ? tomoyo_path_perm+0x213/0x4b0 [ 676.413335][ C0] stack_trace_save+0x9c/0xe0 [ 676.418700][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 676.424226][ C0] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 676.431271][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 676.436848][ C0] kasan_save_track+0x3e/0x80 [ 676.441771][ C0] ? kasan_save_track+0x3e/0x80 [ 676.446764][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 676.452110][ C0] ? __kmalloc_noprof+0x27a/0x4f0 [ 676.457204][ C0] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 676.463263][ C0] __kasan_kmalloc+0x93/0xb0 [ 676.467945][ C0] __kmalloc_noprof+0x27a/0x4f0 [ 676.473025][ C0] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 676.478809][ C0] tomoyo_realpath_from_path+0xe3/0x5d0 [ 676.484553][ C0] ? tomoyo_domain+0xda/0x130 [ 676.489421][ C0] tomoyo_path_perm+0x213/0x4b0 [ 676.494348][ C0] ? tomoyo_path_perm+0x1e3/0x4b0 [ 676.499966][ C0] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 676.505565][ C0] ? rcu_is_watching+0x15/0xb0 [ 676.510427][ C0] ? __pfx___schedule+0x10/0x10 [ 676.515342][ C0] security_inode_getattr+0x12f/0x330 [ 676.521321][ C0] __x64_sys_newfstat+0xfc/0x200 [ 676.526438][ C0] ? rcu_is_watching+0x15/0xb0 [ 676.531583][ C0] ? __pfx___x64_sys_newfstat+0x10/0x10 [ 676.537373][ C0] ? preempt_schedule_irq+0xde/0x150 [ 676.542963][ C0] do_syscall_64+0xfa/0x3b0 [ 676.547638][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.553759][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 676.559567][ C0] ? clear_bhb_loop+0x60/0xb0 [ 676.564393][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.570332][ C0] RIP: 0033:0x7f6ed2cf0e87 [ 676.574960][ C0] RSP: 002b:00007ffe242884c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000005 [ 676.584048][ C0] RAX: ffffffffffffffda RBX: 00007f6ed2cc6ab0 RCX: 00007f6ed2cf0e87 [ 676.592145][ C0] RDX: 0000000000000003 RSI: 00007ffe24288560 RDI: 0000000000000003 [ 676.600157][ C0] RBP: 00007ffe24288620 R08: 00007f6ed29c8690 R09: 00007f6ed2cc6ab0 [ 676.608251][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 676.616260][ C0] R13: 0000000000000000 R14: 00007ffe242886c0 R15: 0000000000000000 [ 676.624620][ C0] [ 676.627868][ C0] task:syz.0.945 state:R running task stack:26664 pid:10415 tgid:10408 ppid:5824 task_flags:0x400140 flags:0x00004002 [ 676.641522][ C0] Call Trace: [ 676.644838][ C0] [ 676.647976][ C0] __schedule+0x16a2/0x4cb0 [ 676.652619][ C0] ? finish_task_switch+0x18b/0x950 [ 676.658328][ C0] ? finish_task_switch+0x266/0x950 [ 676.663842][ C0] ? preempt_schedule_irq+0xb5/0x150 [ 676.669526][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 676.674877][ C0] ? __pfx___schedule+0x10/0x10 [ 676.679880][ C0] ? rcu_is_watching+0x15/0xb0 [ 676.684868][ C0] ? __schedule+0x16c0/0x4cb0 [ 676.689613][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 676.694949][ C0] preempt_schedule_irq+0xb5/0x150 [ 676.700126][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 676.706076][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 676.712499][ C0] irqentry_exit+0x6f/0x90 [ 676.717156][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 676.723397][ C0] RIP: 0010:lock_acquire+0x58/0x360 [ 676.728654][ C0] Code: 8b 05 6c 7f fb 10 48 89 44 24 58 0f 1f 44 00 00 65 8b 05 6f 7f fb 10 83 f8 08 0f 83 b8 01 00 00 89 c0 48 0f a3 05 18 b2 01 0e <73> 16 e8 71 f1 08 00 84 c0 75 0d f6 05 76 a6 eb 0d 01 0f 84 d7 01 [ 676.748755][ C0] RSP: 0018:ffffc9000445ef98 EFLAGS: 00000297 [ 676.754866][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000002 [ 676.763070][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e13ed60 [ 676.771258][ C0] RBP: ffffffff81729af5 R08: 0000000000000000 R09: 0000000000000000 [ 676.779344][ C0] R10: ffffc9000445f158 R11: ffffffff81acf5a0 R12: 0000000000000002 [ 676.787347][ C0] R13: ffffffff8e13ed60 R14: 0000000000000000 R15: 0000000000000000 [ 676.795444][ C0] ? unwind_next_frame+0xa5/0x2390 [ 676.800952][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 676.807354][ C0] ? unwind_next_frame+0xa5/0x2390 [ 676.812769][ C0] ? ksys_write+0x145/0x250 [ 676.817404][ C0] ? unwind_next_frame+0xa5/0x2390 [ 676.822651][ C0] unwind_next_frame+0xc2/0x2390 [ 676.827630][ C0] ? unwind_next_frame+0xa5/0x2390 [ 676.832980][ C0] ? unwind_next_frame+0xa5/0x2390 [ 676.838244][ C0] ? vfs_write+0x54b/0xa90 [ 676.842726][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 676.848944][ C0] arch_stack_walk+0x11c/0x150 [ 676.853789][ C0] ? ksys_write+0x145/0x250 [ 676.858530][ C0] stack_trace_save+0x9c/0xe0 [ 676.863342][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 676.868768][ C0] save_stack+0xf7/0x1f0 [ 676.873060][ C0] ? __pfx_save_stack+0x10/0x10 [ 676.877962][ C0] ? post_alloc_hook+0x240/0x2a0 [ 676.883051][ C0] ? get_page_from_freelist+0x21d5/0x22b0 [ 676.888936][ C0] ? __alloc_frozen_pages_noprof+0x181/0x370 [ 676.894980][ C0] ? alloc_pages_mpol+0x232/0x4a0 [ 676.900141][ C0] ? folio_alloc_mpol_noprof+0x39/0x70 [ 676.905646][ C0] ? shmem_alloc_and_add_folio+0x447/0xf60 [ 676.911610][ C0] ? shmem_get_folio_gfp+0x59d/0x1660 [ 676.917014][ C0] ? shmem_write_begin+0xf7/0x2b0 [ 676.922205][ C0] ? generic_perform_write+0x2c4/0x910 [ 676.927712][ C0] ? shmem_file_write_iter+0xf8/0x120 [ 676.933341][ C0] ? vfs_write+0x54b/0xa90 [ 676.937811][ C0] ? ksys_write+0x145/0x250 [ 676.942472][ C0] ? seqcount_lockdep_reader_access+0x102/0x180 [ 676.948787][ C0] __set_page_owner+0x8d/0x4a0 [ 676.953708][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 676.959145][ C0] post_alloc_hook+0x240/0x2a0 [ 676.963959][ C0] get_page_from_freelist+0x21d5/0x22b0 [ 676.969643][ C0] ? __lock_acquire+0xab9/0xd20 [ 676.974603][ C0] ? __pfx_get_page_from_freelist+0x10/0x10 [ 676.980661][ C0] ? prepare_alloc_pages+0x213/0x610 [ 676.986016][ C0] __alloc_frozen_pages_noprof+0x181/0x370 [ 676.991875][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 676.998282][ C0] ? policy_nodemask+0x27c/0x720 [ 677.003283][ C0] alloc_pages_mpol+0x232/0x4a0 [ 677.008300][ C0] folio_alloc_mpol_noprof+0x39/0x70 [ 677.013663][ C0] shmem_alloc_and_add_folio+0x447/0xf60 [ 677.019552][ C0] ? filemap_get_entry+0xad/0x2f0 [ 677.025090][ C0] ? filemap_get_entry+0xad/0x2f0 [ 677.030172][ C0] ? filemap_get_entry+0xad/0x2f0 [ 677.035444][ C0] ? filemap_get_entry+0x28f/0x2f0 [ 677.040619][ C0] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 677.047017][ C0] ? shmem_allowable_huge_orders+0x1f8/0x420 [ 677.053136][ C0] shmem_get_folio_gfp+0x59d/0x1660 [ 677.058445][ C0] shmem_write_begin+0xf7/0x2b0 [ 677.063782][ C0] generic_perform_write+0x2c4/0x910 [ 677.069229][ C0] ? __pfx_generic_perform_write+0x10/0x10 [ 677.075354][ C0] ? down_write+0x162/0x1f0 [ 677.079923][ C0] ? file_update_time+0x2da/0x490 [ 677.085433][ C0] shmem_file_write_iter+0xf8/0x120 [ 677.091395][ C0] vfs_write+0x54b/0xa90 [ 677.095763][ C0] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 677.101638][ C0] ? __pfx_vfs_write+0x10/0x10 [ 677.106463][ C0] ? __fget_files+0x2a/0x420 [ 677.111113][ C0] ksys_write+0x145/0x250 [ 677.115505][ C0] ? __pfx_ksys_write+0x10/0x10 [ 677.120393][ C0] ? rcu_is_watching+0x15/0xb0 [ 677.125229][ C0] ? do_syscall_64+0xbe/0x3b0 [ 677.129979][ C0] do_syscall_64+0xfa/0x3b0 [ 677.134566][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 677.139910][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.146017][ C0] ? clear_bhb_loop+0x60/0xb0 [ 677.150842][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.156786][ C0] RIP: 0033:0x7f165f98e929 [ 677.161247][ C0] RSP: 002b:00007f165d7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 677.170133][ C0] RAX: ffffffffffffffda RBX: 00007f165fbb6080 RCX: 00007f165f98e929 [ 677.178228][ C0] RDX: 0000000000806000 RSI: 0000200000000200 RDI: 0000000000000009 [ 677.186619][ C0] RBP: 00007f165fa10b39 R08: 0000000000000000 R09: 0000000000000000 [ 677.194836][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 677.202934][ C0] R13: 0000000000000000 R14: 00007f165fbb6080 R15: 00007ffcc66ddcd8 [ 677.211242][ C0] [ 677.214326][ C0] rcu: rcu_preempt kthread starved for 10470 jiffies! g41101 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 677.225575][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 677.235580][ C0] rcu: RCU grace-period kthread stack dump: [ 677.241495][ C0] task:rcu_preempt state:R running task stack:27128 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 677.255059][ C0] Call Trace: [ 677.258545][ C0] [ 677.261563][ C0] __schedule+0x16a2/0x4cb0 [ 677.266135][ C0] ? schedule+0x165/0x360 [ 677.270707][ C0] ? __pfx___schedule+0x10/0x10 [ 677.275640][ C0] ? schedule+0x91/0x360 [ 677.279963][ C0] schedule+0x165/0x360 [ 677.284207][ C0] schedule_timeout+0x12b/0x270 [ 677.289123][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 677.294726][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 677.301038][ C0] ? __pfx_process_timeout+0x10/0x10 [ 677.306415][ C0] ? prepare_to_swait_event+0x341/0x380 [ 677.312118][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 677.317130][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 677.322669][ C0] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 677.329169][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 677.334619][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 677.340948][ C0] ? finish_swait+0xcd/0x1f0 [ 677.345742][ C0] rcu_gp_kthread+0x99/0x390 [ 677.350933][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 677.356685][ C0] ? __kthread_parkme+0x7b/0x200 [ 677.362051][ C0] ? __kthread_parkme+0x1a1/0x200 [ 677.367747][ C0] kthread+0x70e/0x8a0 [ 677.372832][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 677.378457][ C0] ? __pfx_kthread+0x10/0x10 [ 677.383678][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 677.389654][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 677.395172][ C0] ? __pfx_kthread+0x10/0x10 [ 677.399983][ C0] ret_from_fork+0x3fc/0x770 [ 677.404800][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 677.411469][ C0] ? __switch_to_asm+0x39/0x70 [ 677.416365][ C0] ? __switch_to_asm+0x33/0x70 [ 677.421274][ C0] ? __pfx_kthread+0x10/0x10 [ 677.425906][ C0] ret_from_fork_asm+0x1a/0x30 [ 677.430752][ C0] [ 677.433906][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 677.440501][ C0] CPU: 0 UID: 0 PID: 6025 Comm: kworker/u8:9 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 677.451296][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 677.461864][ C0] Workqueue: events_unbound toggle_allocation_gate [ 677.468793][ C0] RIP: 0010:smp_call_function_many_cond+0xf69/0x12d0 [ 677.475662][ C0] Code: 00 45 8b 2f 44 89 ee 83 e6 01 31 ff e8 50 78 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 fb 73 0b 00 eb 37 f3 90 <43> 0f b6 04 2c 84 c0 75 10 41 f7 07 01 00 00 00 74 1e e8 e0 73 0b [ 677.496112][ C0] RSP: 0018:ffffc9000ab976a0 EFLAGS: 00000293 [ 677.502665][ C0] RAX: ffffffff81b4e760 RBX: ffff8880b863c9c0 RCX: ffff88802b96da00 [ 677.510764][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 677.519076][ C0] RBP: ffffc9000ab97800 R08: ffffffff8f9fe2f7 R09: 1ffffffff1f3fc5e [ 677.527121][ C0] R10: dffffc0000000000 R11: fffffbfff1f3fc5f R12: 1ffff110170e825d [ 677.535240][ C0] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff8880b87412e8 [ 677.543269][ C0] FS: 0000000000000000(0000) GS:ffff888125c85000(0000) knlGS:0000000000000000 [ 677.552319][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 677.558936][ C0] CR2: 00007fa8d99d5f98 CR3: 000000000df38000 CR4: 00000000003526f0 [ 677.567292][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 677.575490][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 677.583699][ C0] Call Trace: [ 677.587016][ C0] [ 677.589995][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 677.596394][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 677.601827][ C0] ? kmem_cache_alloc_bulk_noprof+0x148/0x790 [ 677.607964][ C0] ? __pfx___text_poke+0x10/0x10 [ 677.613039][ C0] ? rcu_is_watching+0x15/0xb0 [ 677.617859][ C0] ? trace_contention_end+0x39/0x120 [ 677.623197][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 677.628449][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 677.633701][ C0] smp_text_poke_batch_finish+0x5e0/0x1100 [ 677.639561][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 677.644723][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 677.651009][ C0] ? arch_jump_label_transform_queue+0x97/0x110 [ 677.657583][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 677.663808][ C0] static_key_enable_cpuslocked+0x128/0x250 [ 677.670081][ C0] static_key_enable+0x1a/0x20 [ 677.674892][ C0] toggle_allocation_gate+0xad/0x240 [ 677.680230][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 677.686187][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 677.691979][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 677.697759][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 677.703721][ C0] process_scheduled_works+0xade/0x17b0 [ 677.709384][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 677.715533][ C0] worker_thread+0x8a0/0xda0 [ 677.720317][ C0] kthread+0x70e/0x8a0 [ 677.724710][ C0] ? __pfx_worker_thread+0x10/0x10 [ 677.730748][ C0] ? __pfx_kthread+0x10/0x10 [ 677.735924][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 677.744065][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 677.751237][ C0] ? __pfx_kthread+0x10/0x10 [ 677.757086][ C0] ret_from_fork+0x3fc/0x770 [ 677.761855][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 677.767954][ C0] ? __switch_to_asm+0x39/0x70 [ 677.772870][ C0] ? __switch_to_asm+0x33/0x70 [ 677.777682][ C0] ? __pfx_kthread+0x10/0x10 [ 677.782508][ C0] ret_from_fork_asm+0x1a/0x30 [ 677.787336][ C0]