last executing test programs: 31m55.39186468s ago: executing program 32 (id=299): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) socket(0x2, 0x80805, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x5, 0x4}, &(0x7f00000000c0)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x40000000000001, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r1, &(0x7f0000019780)=""/102400, 0x19000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="84010000100013070000000000000000fe880000000000000000000000000101ac1414aa00"/55], 0x184}, 0x1, 0x0, 0x0, 0x44014}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r2, 0x0, 0x20003f) socket$inet6_tcp(0xa, 0x1, 0x0) accept4(r0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 26m32.634826528s ago: executing program 33 (id=1131): r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0xa0100, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) getpgid(0xffffffffffffffff) r2 = fcntl$getown(r0, 0x9) prlimit64(r2, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0xfffffffffffffffa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x0, 0x0, 0x2000}) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r5, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x84b06c5442c26536}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 16m55.498811299s ago: executing program 34 (id=2542): socket$nl_audit(0x10, 0x3, 0x9) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$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") syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x8d) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) r1 = socket(0x25, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) connect$unix(r1, &(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x2, 0x54c, &(0x7f0000000540)="$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") openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x122) socket$inet_sctp(0x2, 0x1, 0x84) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) 16m14.810937217s ago: executing program 6 (id=2697): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000340)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0) recvmsg(r1, 0x0, 0x0) 16m14.620477719s ago: executing program 6 (id=2699): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680)) r0 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x0) ioctl$VIDIOC_S_PRIORITY(r0, 0x40045644, 0x2) socket$inet(0x2, 0x1, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x30) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket(0x2, 0x80805, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x14, 0x2d, 0x1, 0x70bd2d, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x700}, 0x8004) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000100)={0x6, "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"}) 16m12.909698181s ago: executing program 6 (id=2704): ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc040564a, 0x0) r0 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000400)={&(0x7f0000000300)=""/196, 0xc4, 0xe77e, 0x21}) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000002580)={r2}, 0xc) keyctl$dh_compute(0x15, &(0x7f0000000200), 0x0, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) 16m11.211789153s ago: executing program 6 (id=2708): syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x2, 0x0) connect$unix(r0, &(0x7f0000000000)=@file={0x1}, 0x2) 16m10.06839783s ago: executing program 6 (id=2711): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) 16m8.986887132s ago: executing program 6 (id=2717): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x10, 0x8, 0x2}, 0x8) sendto$inet6(r3, &(0x7f0000000040)='H', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) 15m50.088933587s ago: executing program 35 (id=2717): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x10, 0x8, 0x2}, 0x8) sendto$inet6(r3, &(0x7f0000000040)='H', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) 15m38.796384237s ago: executing program 3 (id=2771): socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100", @ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 15m37.683191302s ago: executing program 3 (id=2773): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x81}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) getpgid(0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000240)='./file0\x00') r6 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r6, 0x2007ffc) sendfile(r6, r6, 0x0, 0x800000009) 15m36.474390938s ago: executing program 3 (id=2775): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x100008b}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4001, @multicast, 'ip6gre0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) connect$pppoe(r0, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x2, 0x0, 0x0) 15m31.450026536s ago: executing program 3 (id=2784): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='workqueue_activate_work\x00', r0, 0x0, 0x7}, 0x18) 15m31.211390575s ago: executing program 3 (id=2786): futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a320000000005000400000000001400078008001240000000000500150022000000050005000200"], 0x64}}, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x109101, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110c230000) r6 = fsopen(&(0x7f0000000240)='rpc_pipefs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000040)='E\xe1\x85\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x4004743c, 0xf0ff1f00000000) 15m24.602636374s ago: executing program 3 (id=2806): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x1, 0xfffffffd, 0x1, 0xfffffffffffffff9, 0x3ffffffff, 0x0, 0x1, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x2}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x13, 0x0, 0x0) write$P9_RVERSION(r2, 0x0, 0xfffffeb5) unshare(0x6a040000) mount(0x0, 0x0, 0x0, 0x100020, &(0x7f0000000100)='!&/}}s/#@\x00') shutdown(0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x4a0f0000}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e21, @multicast1}}}, &(0x7f0000000000)=0x84) 15m9.237714358s ago: executing program 36 (id=2806): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x1, 0xfffffffd, 0x1, 0xfffffffffffffff9, 0x3ffffffff, 0x0, 0x1, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x2}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x13, 0x0, 0x0) write$P9_RVERSION(r2, 0x0, 0xfffffeb5) unshare(0x6a040000) mount(0x0, 0x0, 0x0, 0x100020, &(0x7f0000000100)='!&/}}s/#@\x00') shutdown(0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x4a0f0000}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e21, @multicast1}}}, &(0x7f0000000000)=0x84) 13m56.939583973s ago: executing program 1 (id=3001): socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100", @ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 13m54.332324s ago: executing program 1 (id=3005): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x187982, 0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) bind$can_j1939(r2, 0x0, 0x0) epoll_create(0x2) setfsgid(0xee00) syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') pread64(r3, &(0x7f0000000500)=""/31, 0x1f, 0x40000000009) 13m50.248910321s ago: executing program 1 (id=3010): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = userfaultfd(0x801) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r3) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="1709000000000000000001000000050007000000000008000900fffffffe060002000000000008000a000100000008001800ac1414aa080019"], 0x58}}, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000042000b0026bd7000004000000300000008000200070000100a0001"], 0x28}}, 0x4040080) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400000000fddbdf250000007c", @ANYRES32=0x0, @ANYBLOB="90010000305200001c00128009000100626f6e64000000000c000280050016"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) r7 = userfaultfd(0x80801) personality(0xc) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYRES16, @ANYRESDEC=r0], 0x24}, 0x1, 0x0, 0x0, 0x20044844}, 0x4) sendmsg$NL80211_CMD_SET_COALESCE(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r9, @ANYBLOB="1b25a34f96015f97bb37d49664df7800", @ANYRES32=r10, @ANYBLOB], 0x28}}, 0x0) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) 13m46.919331518s ago: executing program 1 (id=3015): socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100", @ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 13m45.973423317s ago: executing program 1 (id=3017): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r0}, 0x38) 13m42.12170825s ago: executing program 1 (id=3027): socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100", @ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 13m26.914864926s ago: executing program 37 (id=3027): socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100", @ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 8m45.689311079s ago: executing program 4 (id=3573): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, 0x0, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="7b6f21ae2733a0e29fca525e76bdf9b7d3550ad698981ff30e36f9a91d2f846d59d8bc84ae4c585f6e132674bf35a5284ac6affbefa5e8cb1325c681979fa739", 0x40) lstat(0x0, 0x0) r4 = open(&(0x7f0000000580)='./file0\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000440)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x203, 0x1, {0xffffffffffffffff, 0x9, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x400000}}, {0x0, 0x13}}}, 0x35) sendfile(r4, r4, &(0x7f0000000080), 0x7f03) 8m44.193419616s ago: executing program 4 (id=3574): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) lseek(r0, 0xd0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1e000000000000"], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) 8m43.415659886s ago: executing program 4 (id=3577): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x8, 0x40, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001680)) r2 = eventfd2(0x1, 0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x0, r2}) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) 8m41.557389098s ago: executing program 4 (id=3579): signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8, 0x80800) io_setup(0x2, &(0x7f0000000b80)) socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = open$dir(0x0, 0x290200, 0x4) mkdirat(r0, &(0x7f0000000080)='./file1\x00', 0x59) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x8000000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000000c0)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000580), r3}}, 0x20) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @loopback, 0x3}}}, 0x30) read$msr(r1, &(0x7f000001aa40)=""/102400, 0x19000) mprotect(&(0x7f000044d000/0x2000)=nil, 0x2000, 0x1) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1f00, 0x12) 8m40.799668623s ago: executing program 4 (id=3581): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000040)=0x4, 0x4) 8m39.655458178s ago: executing program 4 (id=3584): syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(0x0, r0, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, 0x0, 0x1, 0x4}) r1 = socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, 0x0, 0x0) rt_sigsuspend(0x0, 0x0) r3 = memfd_create(0x0, 0x7) io_setup(0x7ff, &(0x7f0000000500)) fallocate(r3, 0x0, 0x0, 0x200401) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 8m24.242492308s ago: executing program 38 (id=3584): syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(0x0, r0, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, 0x0, 0x1, 0x4}) r1 = socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, 0x0, 0x0) rt_sigsuspend(0x0, 0x0) r3 = memfd_create(0x0, 0x7) io_setup(0x7ff, &(0x7f0000000500)) fallocate(r3, 0x0, 0x0, 0x200401) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 23.355049358s ago: executing program 5 (id=4690): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x94) syz_usb_control_io$printer(r0, 0x0, 0x0) 18.999597425s ago: executing program 5 (id=4698): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c00018006000600884700000800028004007280080007"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 18.127607596s ago: executing program 5 (id=4701): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@deltfilter={0x24, 0x2d, 0x8, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xc, 0x3}, {0xb, 0x2}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @loopback, 0x4}, 0x1c) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0xf, 0x3}, {0x8, 0xffe0}, {0x0, 0x10}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x807f}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x9}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi1\x00', 0x40041, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 16.707043232s ago: executing program 7 (id=4706): socket(0x10, 0x3, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x13, 0x0, 0x24) 15.635748881s ago: executing program 7 (id=4709): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x9, 0x34, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) openat$tun(0xffffffffffffff9c, 0x0, 0x432402, 0x0) unshare(0x22060400) 14.103908665s ago: executing program 7 (id=4711): r0 = socket$kcm(0xf, 0x3, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000100)=0xc) setresuid(r2, r2, r2) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCSFLAGS(r3, 0x40047459, &(0x7f0000000040)=0x32402) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'vlan1\x00', &(0x7f0000000000)=@ethtool_drvinfo={0x3, "87d52890d86dde1f66f6917dcad7d7ad92f7eb71ae6687481d34af7f8009c03e", "282e2debe5b6e2d9cad8f3518100f38f417d72544a2bb7fa11b662fef4dcc9a3", "cc23b1f369d519afed2d88adb87a656e4818391934fadf59616c097176643d4d", "fde867d2e299226caad10a947624655f91c4544c05b52b7ec7e68e27a55c6afb", "bee1fd21ead56db3e38ff37c0ad23d47f9aaeca9c5831008e79c20a71128d4c6", "0f0c3b4a2fe52f95297b7b93", 0x1, 0x4, 0x40, 0x5, 0xb0}}) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@arp={0x806, @ether_ipv4={0x18, 0x800, 0x6, 0x4, 0x9, @local, @remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={0xac, 0x14, 0x14, 0x30}}}}}, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000000)={0x4, 0x0, 0x16, 0x1, 0x100, &(0x7f0000000040)="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"}) ioctl$VT_DISALLOCATE(r6, 0x5608) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'macsec0\x00', 0x0}) r8 = accept4$packet(r1, 0x0, &(0x7f0000000080), 0x80800) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000040)={r7, 0x1, 0x6, @local}, 0x10) r9 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x2000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x58, &(0x7f0000000540)}, 0x10) ioctl$DRM_IOCTL_MODE_ADDFB(r9, 0xc01c64ae, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002a00)={0x2020}, 0x2020) 13.46936411s ago: executing program 8 (id=4712): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) listen(0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000000c0)=0xa1, 0x4) 13.417973502s ago: executing program 2 (id=4713): statx(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x1000, 0x200, 0x0) madvise(&(0x7f000062e000/0x2000)=nil, 0x2000, 0x19) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) io_uring_setup(0xb1d, &(0x7f0000000100)={0x0, 0xdda5, 0x40, 0x0, 0x5d}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40000) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7}, 0xa) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card1/oss_mixer\x00', 0x1, 0x0) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000400)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETA(r2, 0x560a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0, r3) r4 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x42400) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0x10, 0x2, 0x0) 13.269778101s ago: executing program 7 (id=4715): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r1, 0x0}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0xa, 0xfffffffe) r7 = add_key(0x0, &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r7, 0xffffffffffffffff, 0xffffffff) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000000)={r1, r2, 0x1, 0x0, 0x3}) 12.133444651s ago: executing program 2 (id=4717): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) sysinfo(&(0x7f0000000000)=""/196) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r2, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x14, "3eccd8fd0000000000000010000000040100"}) setsockopt$nfc_llcp_NFC_LLCP_RW(0xffffffffffffffff, 0x118, 0x0, &(0x7f0000000000)=0xa, 0x4) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xe4}, 0x1, 0x0, 0x0, 0x20000841}, 0x44050) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@setlink={0x50, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}]}]}]}, 0x50}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0xb, 0x10000}}) 11.751145279s ago: executing program 8 (id=4719): syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) 10.828004364s ago: executing program 9 (id=4720): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mkdir(&(0x7f0000000380)='./file1\x00', 0x1bb) chdir(&(0x7f0000000280)='./file1\x00') quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_int(r3, 0x0, 0x32, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x141080) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000200)=0x5) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000700)=0x31) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000080)="40eeb1", 0x3}, {0x0}], 0x2) socket(0x40000000015, 0x5, 0x0) 10.25964989s ago: executing program 8 (id=4721): socket(0x10, 0x3, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x13, 0x0, 0x24) 10.251286285s ago: executing program 0 (id=4722): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'vlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x28, r4, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x28}}, 0x0) 10.243809604s ago: executing program 5 (id=4723): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}, {0x0}], 0x2}, 0x0, 0x40000000, 0x1}) r0 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0xc, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r0, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 9.312421519s ago: executing program 5 (id=4724): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getpeername(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x3) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x76, 0x0, 0x0) read$msr(r1, &(0x7f000001dc00)=""/102392, 0x18ff8) mount(&(0x7f0000000140)=@filename='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000680)='btrfs\x00', 0x208000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000340)={0x2000, r3}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r2, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0) 8.637866807s ago: executing program 8 (id=4725): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r1, 0x1000006) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x1000000}) 8.389884599s ago: executing program 9 (id=4726): r0 = syz_open_dev$video(&(0x7f0000000b40), 0x7, 0x28000) preadv(r0, &(0x7f0000001200)=[{&(0x7f0000000c00)=""/113, 0x71}], 0x1, 0x4, 0xb) 7.910745238s ago: executing program 0 (id=4727): openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x4) r0 = memfd_create(&(0x7f00000000c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\x89cqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4w\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x7) r1 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x108002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x3, 0x0, 0x3, 0x5, 0x2f, 0x7, 0x7, 0x5, 0xffe, 0x1, 0x0, 0x8500, 0x1003, 0x4, 0xffff, 0xffff, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x3, 0x10, 0x0, 0x8, 0xe2df, 0x746f, 0x8, 0x5, 0x3, 0x0, 0x4, 0x8049]}) ftruncate(r0, 0x8800000) 7.70402177s ago: executing program 2 (id=4728): socket$unix(0x1, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x1c9282, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000440)='block_bio_complete\x00', r2, 0x0, 0x1}, 0x18) write$cgroup_int(r1, &(0x7f0000000040)=0x1c9, 0x12) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r4 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0x400, &(0x7f0000000080)=ANY=[@ANYBLOB='mpol=b', @ANYRESOCT]) lseek(r0, 0xd0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x8, &(0x7f00000006c0)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x5, 0xa, &(0x7f00000002c0)=""/10, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x6, 0x20000005}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0xf, 0x1, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r1, r1, r1, r1, r1, r1, r1, r1, r6, r6, 0xffffffffffffffff], &(0x7f0000000300), 0x10, 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB="000002000000001800"/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="020000000100"/21], 0x48) 6.578060343s ago: executing program 0 (id=4729): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffa4) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x2200890, 0x0) 6.397462956s ago: executing program 9 (id=4730): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r0) r2 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r7, &(0x7f00000000c0)={0x1d, r8}, 0x10) sendmsg$can_bcm(r7, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000140)={'c6xdigio\x00', [0xb02f, 0x7ff, 0xe2, 0x3, 0x88d7, 0x8d, 0x1007, 0x1, 0x1002, 0xffffffff, 0x200, 0x7, 0x10000009, 0x1, 0x5, 0x401, 0x8, 0x3, 0x9, 0x8e, 0x10c, 0x4003, 0x7, 0xa, 0x5, 0x1, 0xb0c4, 0xe, 0xff, 0x400002, 0x4000001]}) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000ffdbdf251e00000008000400ffffffff080001"], 0x24}, 0x1, 0x0, 0x0, 0x8050}, 0x40010) 4.259540386s ago: executing program 2 (id=4731): signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80800) io_setup(0x2, &(0x7f0000000b80)) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = open$dir(0x0, 0x290200, 0x4) mkdirat(r1, &(0x7f0000000080)='./file1\x00', 0x59) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x8000000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @ib_path={0x0, r4}}, 0x20) r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @loopback, 0x3}}}, 0x30) read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000) mprotect(&(0x7f000044d000/0x2000)=nil, 0x2000, 0x1) write$cgroup_int(r0, &(0x7f0000000040)=0x1f00, 0x12) 4.258715414s ago: executing program 0 (id=4732): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000380)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x1, r1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x33, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$pppoe(0x18, 0x1, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000200)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) 4.258102132s ago: executing program 9 (id=4733): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x81}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) r4 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r4, 0x2007ffc) sendfile(r4, r4, 0x0, 0x800000009) 2.689806649s ago: executing program 9 (id=4734): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) 2.47948467s ago: executing program 0 (id=4735): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$I2C(0x0, 0x10001, 0x240000) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e23, 0x1, @empty, 0x3}, 0x1c) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r6}) close_range(r0, 0xffffffffffffffff, 0x0) 2.259549888s ago: executing program 2 (id=4736): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x88) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpu.weight\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000240)=0x1, 0x12) 1.470903924s ago: executing program 9 (id=4737): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003300)=ANY=[@ANYBLOB="3c1100003e00010329bd700000dcdf2503000000"], 0x113c}}, 0x8004) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x842, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0xdaf}}, './file0\x00'}) r4 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, &(0x7f0000000000)=@t={0x4, 0x8, 0x1, 0x2}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0xffffffffffffff5a) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='net/if_inet6\x00') r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000180)={0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r6, r6, 0x0, 0x200000) 1.403823099s ago: executing program 5 (id=4738): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.300273432s ago: executing program 7 (id=4739): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x123a02, 0x0) pwritev(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)="b2", 0xfdef}], 0x10000000000000bb, 0x7, 0x1) 1.227083437s ago: executing program 2 (id=4740): socket$phonet(0x23, 0x2, 0x1) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, 0x0, 0x1) io_setup(0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x1) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) kexec_load(0x5, 0x3, &(0x7f0000001080), 0x3e0000) 1.226264144s ago: executing program 0 (id=4741): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) socket$inet6(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1404200bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x2000000) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB], 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r1}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.093583665s ago: executing program 8 (id=4742): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r1, 0x3ba0, &(0x7f0000000380)={0x48, 0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x4}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$key(0xffffffffffffffff, 0x0, 0x4040004) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r3) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec00", @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) sendto$inet6(r2, &(0x7f00000001c0)='X', 0x1, 0x20010010, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x2, 0x0, 0x8, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, 0xe) syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) shutdown(r2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(r2, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 927.553071ms ago: executing program 7 (id=4743): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002a80)={@fallback, 0x36, 0x1, 0x1, &(0x7f0000002980), 0x0, 0x0, 0x0, 0x0, &(0x7f0000002a40)=[0x0]}, 0x40) syz_emit_ethernet(0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='iocharset', 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) connect$inet(0xffffffffffffffff, &(0x7f0000003580)={0x2, 0x4e21, @dev}, 0x10) r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}], 0x1, 0x40800) add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) r3 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0) write$proc_mixer(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="5245434c45560a50484f4e454f55540a535045414b455220274344272030303030303030303030303030303030303030300a4449474954414c32202706b86e"], 0xb8) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000280), &(0x7f00000000c0)=""/83, 0x53, 0x0) 0s ago: executing program 8 (id=4744): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd29, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) kernel console output (not intermixed with test programs): [ 1591.478486][T19404] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1591.519037][T19536] team0: Port device team_slave_1 added [ 1592.116955][ T6698] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1592.144851][ T6698] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1592.207532][T19404] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1592.620703][T12553] bridge0: port 1(bridge_slave_0) entered blocking state [ 1592.628103][T12553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1592.888704][ T6698] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1592.899170][ T6698] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1592.933540][T19536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1592.948557][T19536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1593.012686][T19536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1593.038612][ T1001] bridge0: port 2(bridge_slave_1) entered blocking state [ 1593.045856][ T1001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1593.105614][T19536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1593.119097][T19536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1593.187009][T19536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1593.266279][T19652] afs: Unknown parameter 'fl' [ 1593.682003][T19536] hsr_slave_0: entered promiscuous mode [ 1593.703745][T19536] hsr_slave_1: entered promiscuous mode [ 1593.733133][T19536] debugfs: 'hsr0' already exists in 'hsr' [ 1593.739040][T19536] Cannot create hsr debugfs directory [ 1594.166405][T19245] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1594.921116][ T6698] bridge_slave_1: left allmulticast mode [ 1594.927546][ T6698] bridge_slave_1: left promiscuous mode [ 1594.940093][ T6698] bridge0: port 2(bridge_slave_1) entered disabled state [ 1594.977295][ T6698] bridge_slave_0: left allmulticast mode [ 1594.983308][ T6698] bridge_slave_0: left promiscuous mode [ 1594.989120][ T6698] bridge0: port 1(bridge_slave_0) entered disabled state [ 1595.003256][ T6698] bridge_slave_1: left allmulticast mode [ 1595.008918][ T6698] bridge_slave_1: left promiscuous mode [ 1595.019834][ T6698] bridge0: port 2(bridge_slave_1) entered disabled state [ 1595.031016][ T6698] bridge_slave_0: left allmulticast mode [ 1595.036688][ T6698] bridge_slave_0: left promiscuous mode [ 1595.047194][ T6698] bridge0: port 1(bridge_slave_0) entered disabled state [ 1595.991976][ T6698] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1596.024334][ T6698] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1596.057837][ T6698] bond0 (unregistering): Released all slaves [ 1597.379006][T19404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1597.564069][T19404] 8021q: adding VLAN 0 to HW filter on device team0 [ 1597.596366][T15705] bridge0: port 1(bridge_slave_0) entered blocking state [ 1597.603588][T15705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1599.394856][T15705] bridge0: port 2(bridge_slave_1) entered blocking state [ 1599.402108][T15705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1600.213683][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1600.227884][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1600.239916][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1600.259099][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1600.269218][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1600.559077][ T6698] hsr_slave_0: left promiscuous mode [ 1600.566867][ T6698] hsr_slave_1: left promiscuous mode [ 1600.600573][ T6698] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1600.617665][ T6698] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1600.919201][ T6698] hsr_slave_0: left promiscuous mode [ 1600.938610][ T6698] hsr_slave_1: left promiscuous mode [ 1600.960985][ T6698] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1600.978131][ T6698] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1600.997353][ T6698] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1601.013683][ T6698] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1601.678998][ T6698] veth1_macvtap: left promiscuous mode [ 1601.782470][ T6698] veth0_macvtap: left promiscuous mode [ 1601.950134][ T6698] veth1_vlan: left promiscuous mode [ 1602.007337][ T6698] veth0_vlan: left promiscuous mode [ 1602.213601][T19711] afs: Unknown parameter 'fl' [ 1602.299042][T19714] program syz.8.3585 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1602.319415][ T51] Bluetooth: hci0: command tx timeout [ 1603.698133][T19722] Bluetooth: MGMT ver 1.23 [ 1604.413054][T10369] Bluetooth: hci0: command tx timeout [ 1604.899890][ T6698] team0 (unregistering): Port device team_slave_1 removed [ 1604.976167][ T6698] team0 (unregistering): Port device team_slave_0 removed [ 1605.849816][ T51] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1606.482976][ T51] Bluetooth: hci0: command 0x040f tx timeout [ 1606.725573][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.477253][T19754] fuse: Unknown parameter 'group_i00000000000000000000' [ 1608.599499][ T51] Bluetooth: hci0: command 0x040f tx timeout [ 1610.639734][T19760] Bluetooth: hci0: command 0x040f tx timeout [ 1610.662765][ T51] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1611.105429][ T6698] team0 (unregistering): Port device team_slave_1 removed [ 1611.181013][ T6698] team0 (unregistering): Port device team_slave_0 removed [ 1612.001211][ T6698] team0 (unregistering): Port device dummy0 removed [ 1612.724044][ T51] Bluetooth: hci0: command 0x040f tx timeout [ 1612.868138][T19709] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1612.895851][T19709] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1613.076707][T19404] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1613.739385][T19709] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1613.754192][T19709] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1614.208254][T19709] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1614.238672][T19709] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 1614.630975][T19709] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1614.651432][T19709] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1615.622528][T19709] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1615.628457][T19709] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1615.698798][T19536] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1616.319524][T19760] Bluetooth: hci0: command 0x040f tx timeout [ 1616.325747][ T51] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1616.665087][T19536] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1616.691743][T19709] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1616.697952][T19709] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1616.804759][T19404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1617.109575][T19536] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1617.168599][T19536] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1618.941886][T19693] chnl_net:caif_netlink_parms(): no params data found [ 1619.311215][T19853] fuse: Unknown parameter 'group_i00000000000000000000' [ 1619.352467][T19760] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1619.380908][T19760] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1619.400312][T19760] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1619.421282][T19760] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1619.434230][T19760] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1619.451981][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1619.461650][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1619.467877][T19536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1619.566237][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1619.581909][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1619.596000][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1621.049703][T19760] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1621.992092][T19760] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1622.041879][ T30] audit: type=1326 audit(1759016273.509:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19863 comm="syz.8.3620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f191bf8eec9 code=0x7fc00000 [ 1622.697380][T10369] Bluetooth: hci3: command tx timeout [ 1622.707795][T10369] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1622.734888][T10369] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1622.751745][T10369] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1623.185618][T19536] 8021q: adding VLAN 0 to HW filter on device team0 [ 1623.341567][T19882] overlayfs: failed to resolve './file0': -2 [ 1624.719376][ T51] Bluetooth: hci3: command tx timeout [ 1624.834678][T19693] bridge0: port 1(bridge_slave_0) entered blocking state [ 1625.027696][T19693] bridge0: port 1(bridge_slave_0) entered disabled state [ 1625.127673][ T51] Bluetooth: hci7: command tx timeout [ 1625.320589][T19693] bridge_slave_0: entered allmulticast mode [ 1625.328706][T19693] bridge_slave_0: entered promiscuous mode [ 1625.361606][T19693] bridge0: port 2(bridge_slave_1) entered blocking state [ 1625.414919][T19693] bridge0: port 2(bridge_slave_1) entered disabled state [ 1625.429550][T19693] bridge_slave_1: entered allmulticast mode [ 1625.455964][T19693] bridge_slave_1: entered promiscuous mode [ 1625.750046][ T6699] bridge0: port 1(bridge_slave_0) entered blocking state [ 1625.757209][ T6699] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1625.895332][ T6008] bridge0: port 2(bridge_slave_1) entered blocking state [ 1625.902513][ T6008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1626.035558][T19693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1626.111911][T19693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1626.811016][ T51] Bluetooth: hci3: command tx timeout [ 1627.177721][T19918] nvme_fabrics: unknown parameter or missing value 'V' in ctrl creation request [ 1627.285745][ T51] Bluetooth: hci7: command tx timeout [ 1629.006161][ T51] Bluetooth: hci3: command tx timeout [ 1629.085288][ T30] audit: type=1326 audit(1759016280.529:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19915 comm="syz.7.3630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51a38eec9 code=0x7fc00000 [ 1629.149108][T19693] team0: Port device team_slave_0 added [ 1629.197608][T19693] team0: Port device team_slave_1 added [ 1629.383699][ T51] Bluetooth: hci7: command tx timeout [ 1631.071064][T19693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1631.086481][T19693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1631.123447][T19693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1631.139223][T19693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1631.147318][T19945] overlayfs: failed to resolve './file0': -2 [ 1631.153540][T19693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1631.265947][T19693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1631.521899][ T51] Bluetooth: hci7: command tx timeout [ 1632.050559][T19693] hsr_slave_0: entered promiscuous mode [ 1632.082450][T19693] hsr_slave_1: entered promiscuous mode [ 1633.025875][ T6698] bridge_slave_1: left allmulticast mode [ 1633.042451][ T6698] bridge_slave_1: left promiscuous mode [ 1633.056886][ T6698] bridge0: port 2(bridge_slave_1) entered disabled state [ 1633.094978][ T6698] bridge_slave_0: left allmulticast mode [ 1633.111022][ T6698] bridge_slave_0: left promiscuous mode [ 1633.117132][ T6698] bridge0: port 1(bridge_slave_0) entered disabled state [ 1633.602349][T19973] binder: 19971:19973 ioctl c0046209 9999999999999999 returned -22 [ 1635.662848][ C0] vkms_vblank_simulate: vblank timer overrun [ 1635.727273][ C0] vkms_vblank_simulate: vblank timer overrun [ 1635.892251][ C0] vkms_vblank_simulate: vblank timer overrun [ 1636.050410][ C0] vkms_vblank_simulate: vblank timer overrun [ 1636.141020][ T30] audit: type=1326 audit(1759016287.659:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19992 comm="syz.7.3642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51a38eec9 code=0x7fc00000 [ 1637.196668][ T6698] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1637.208323][ T6698] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1637.218944][ T6698] bond0 (unregistering): Released all slaves [ 1637.432106][ T6698] hsr_slave_0: left promiscuous mode [ 1637.449835][ T6698] hsr_slave_1: left promiscuous mode [ 1637.455885][ T6698] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1637.480271][ T6698] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1637.751830][ T6698] team0 (unregistering): Port device team_slave_1 removed [ 1637.791392][ T6698] team0 (unregistering): Port device team_slave_0 removed [ 1638.058764][ C0] vkms_vblank_simulate: vblank timer overrun [ 1638.858617][T10369] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1638.869359][T10369] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1638.880122][T10369] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1638.888322][T10369] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1638.896289][T10369] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1639.278323][T20022] overlayfs: failed to resolve './file0': -2 [ 1639.513431][T19854] chnl_net:caif_netlink_parms(): no params data found [ 1639.554967][T19867] chnl_net:caif_netlink_parms(): no params data found [ 1640.310155][T20030] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1640.959471][T10369] Bluetooth: hci2: command tx timeout [ 1641.085034][T19867] bridge0: port 1(bridge_slave_0) entered blocking state [ 1641.132508][T19867] bridge0: port 1(bridge_slave_0) entered disabled state [ 1641.159769][T19867] bridge_slave_0: entered allmulticast mode [ 1641.167950][T19867] bridge_slave_0: entered promiscuous mode [ 1641.214259][T19867] bridge0: port 2(bridge_slave_1) entered blocking state [ 1641.252016][T19867] bridge0: port 2(bridge_slave_1) entered disabled state [ 1641.272354][T19867] bridge_slave_1: entered allmulticast mode [ 1641.304288][T19867] bridge_slave_1: entered promiscuous mode [ 1641.394433][T20033] binder: 20032:20033 ioctl c0046209 9999999999999999 returned -22 [ 1641.680917][T19867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1642.160936][T19867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1642.996518][T19854] bridge0: port 1(bridge_slave_0) entered blocking state [ 1643.016830][T19854] bridge0: port 1(bridge_slave_0) entered disabled state [ 1643.024966][T19854] bridge_slave_0: entered allmulticast mode [ 1643.039659][T10369] Bluetooth: hci2: command tx timeout [ 1643.040865][T19854] bridge_slave_0: entered promiscuous mode [ 1643.131331][T19854] bridge0: port 2(bridge_slave_1) entered blocking state [ 1643.156919][T19854] bridge0: port 2(bridge_slave_1) entered disabled state [ 1643.166433][T19854] bridge_slave_1: entered allmulticast mode [ 1643.178162][T19854] bridge_slave_1: entered promiscuous mode [ 1643.236283][T19867] team0: Port device team_slave_0 added [ 1643.476257][T19867] team0: Port device team_slave_1 added [ 1643.750632][T19854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1643.815258][T19854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1643.919841][T19867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1643.929313][T19867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1643.956009][T19867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1644.200867][T19867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1644.228281][T19867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1644.259399][T19867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1645.086714][T19854] team0: Port device team_slave_0 added [ 1645.124579][T10369] Bluetooth: hci2: command tx timeout [ 1645.211213][T19854] team0: Port device team_slave_1 added [ 1645.303142][T19867] hsr_slave_0: entered promiscuous mode [ 1645.320535][T19867] hsr_slave_1: entered promiscuous mode [ 1645.335660][T19867] debugfs: 'hsr0' already exists in 'hsr' [ 1645.343704][T19867] Cannot create hsr debugfs directory [ 1645.356195][T20017] chnl_net:caif_netlink_parms(): no params data found [ 1646.362774][T20066] binder: 20065:20066 ioctl c0046209 9999999999999999 returned -22 [ 1646.444859][T19854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1646.455197][T19854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1646.481705][T19854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1646.585415][T19693] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1646.622088][T19854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1646.637246][T19854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1646.676134][T19854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1647.331997][T10369] Bluetooth: hci2: command tx timeout [ 1648.044314][T19693] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1648.058855][T19693] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1648.224642][T19693] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1648.291248][T19854] hsr_slave_0: entered promiscuous mode [ 1648.313738][T19854] hsr_slave_1: entered promiscuous mode [ 1648.358491][T19854] debugfs: 'hsr0' already exists in 'hsr' [ 1648.392109][T19854] Cannot create hsr debugfs directory [ 1648.701700][T20094] vivid-007: ================= START STATUS ================= [ 1648.709594][T20094] vivid-007: Enable Output Cropping: true [ 1648.715458][T20094] vivid-007: Enable Output Composing: true [ 1648.721657][T20094] vivid-007: Enable Output Scaler: true [ 1648.727388][T20094] vivid-007: Tx RGB Quantization Range: Automatic [ 1648.734007][T20094] vivid-007: Transmit Mode: HDMI [ 1648.739111][T20094] vivid-007: Hotplug Present: 0x00000000 [ 1648.744941][T20094] vivid-007: RxSense Present: 0x00000000 [ 1648.750772][T20094] vivid-007: EDID Present: 0x00000000 [ 1648.756393][T20094] vivid-007: ================== END STATUS ================== [ 1649.657574][T20017] bridge0: port 1(bridge_slave_0) entered blocking state [ 1649.672380][T20017] bridge0: port 1(bridge_slave_0) entered disabled state [ 1649.690834][T20017] bridge_slave_0: entered allmulticast mode [ 1649.710903][T20017] bridge_slave_0: entered promiscuous mode [ 1649.727748][T20017] bridge0: port 2(bridge_slave_1) entered blocking state [ 1649.737468][T20017] bridge0: port 2(bridge_slave_1) entered disabled state [ 1649.751003][T20017] bridge_slave_1: entered allmulticast mode [ 1649.765344][T20017] bridge_slave_1: entered promiscuous mode [ 1650.068829][T20017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1650.168717][T20017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1650.345576][T20017] team0: Port device team_slave_0 added [ 1650.383893][T20017] team0: Port device team_slave_1 added [ 1651.720637][T20017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1651.727716][T20017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1651.925700][T20017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1651.960403][T20017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1651.967457][T20017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1651.993403][ C0] vkms_vblank_simulate: vblank timer overrun [ 1652.709911][T20017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1652.959175][T19693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1653.033565][T20017] hsr_slave_0: entered promiscuous mode [ 1653.097367][T20017] hsr_slave_1: entered promiscuous mode [ 1653.750334][T20017] debugfs: 'hsr0' already exists in 'hsr' [ 1653.839458][T20017] Cannot create hsr debugfs directory [ 1654.027890][ T6698] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1654.681567][ T6698] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1654.853653][T19693] 8021q: adding VLAN 0 to HW filter on device team0 [ 1655.076721][T20129] vivid-007: ================= START STATUS ================= [ 1655.084973][T20129] vivid-007: Enable Output Cropping: true [ 1655.091201][T20129] vivid-007: Enable Output Composing: true [ 1655.097199][T20129] vivid-007: Enable Output Scaler: true [ 1655.102991][T20129] vivid-007: Tx RGB Quantization Range: Automatic [ 1655.109647][T20129] vivid-007: Transmit Mode: HDMI [ 1655.114769][T20129] vivid-007: Hotplug Present: 0x00000000 [ 1655.121149][T20129] vivid-007: RxSense Present: 0x00000000 [ 1655.127064][T20129] vivid-007: EDID Present: 0x00000000 [ 1655.132700][T20129] vivid-007: ================== END STATUS ================== [ 1655.236455][ T6698] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1655.668903][ T6698] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1656.064230][ T6699] bridge0: port 1(bridge_slave_0) entered blocking state [ 1656.071464][ T6699] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1656.194015][ T8271] bridge0: port 2(bridge_slave_1) entered blocking state [ 1656.201281][ T8271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1658.679788][ T6698] bridge_slave_1: left allmulticast mode [ 1658.685506][ T6698] bridge_slave_1: left promiscuous mode [ 1658.736658][ T6698] bridge0: port 2(bridge_slave_1) entered disabled state [ 1658.760632][ T6698] bridge_slave_0: left allmulticast mode [ 1658.766338][ T6698] bridge_slave_0: left promiscuous mode [ 1658.817341][ T6698] bridge0: port 1(bridge_slave_0) entered disabled state [ 1658.853576][ T6698] bridge_slave_1: left allmulticast mode [ 1658.866394][ T6698] bridge_slave_1: left promiscuous mode [ 1658.873028][ T6698] bridge0: port 2(bridge_slave_1) entered disabled state [ 1658.903133][ T6698] bridge_slave_0: left allmulticast mode [ 1658.908865][ T6698] bridge_slave_0: left promiscuous mode [ 1658.924218][ T6698] bridge0: port 1(bridge_slave_0) entered disabled state [ 1660.219648][ T6698] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1660.244927][ T6698] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1660.279586][ T6698] bond0 (unregistering): Released all slaves [ 1661.303190][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1661.314225][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1661.322599][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1661.331920][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1661.339678][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1661.632740][T20164] vivid-007: ================= START STATUS ================= [ 1661.640670][T20164] vivid-007: Enable Output Cropping: true [ 1661.646591][T20164] vivid-007: Enable Output Composing: true [ 1661.652667][T20164] vivid-007: Enable Output Scaler: true [ 1661.658425][T20164] vivid-007: Tx RGB Quantization Range: Automatic [ 1661.665155][T20164] vivid-007: Transmit Mode: HDMI [ 1661.670847][T20164] vivid-007: Hotplug Present: 0x00000000 [ 1661.676711][T20164] vivid-007: RxSense Present: 0x00000000 [ 1661.682723][T20164] vivid-007: EDID Present: 0x00000000 [ 1661.688344][T20164] vivid-007: ================== END STATUS ================== [ 1661.874741][ T6698] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1661.914118][ T6698] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1661.953048][ T6698] bond0 (unregistering): Released all slaves [ 1662.422742][ C0] vkms_vblank_simulate: vblank timer overrun [ 1663.629704][ T51] Bluetooth: hci0: command tx timeout [ 1663.704280][ T6698] bond0 (unregistering): Released all slaves [ 1663.913170][T20177] wg1: entered promiscuous mode [ 1663.918079][T20177] wg1: entered allmulticast mode [ 1664.248873][T20184] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3689'. [ 1664.366523][T20185] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3689'. [ 1664.687498][ T6698] hsr_slave_0: left promiscuous mode [ 1664.711701][ T6698] hsr_slave_1: left promiscuous mode [ 1664.738331][ T6698] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1664.751547][ T6698] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1664.794856][ T6698] hsr_slave_0: left promiscuous mode [ 1664.814763][ T6698] hsr_slave_1: left promiscuous mode [ 1664.826666][ T6698] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1664.835030][ T6698] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1664.854659][ T6698] hsr_slave_0: left promiscuous mode [ 1665.087340][ T6698] veth1_macvtap: left promiscuous mode [ 1665.857816][ T51] Bluetooth: hci0: command tx timeout [ 1665.915835][ T6698] veth0_macvtap: left promiscuous mode [ 1665.928999][ T6698] veth1_vlan: left promiscuous mode [ 1667.108172][ T6698] team0 (unregistering): Port device team_slave_1 removed [ 1667.165074][ T6698] team0 (unregistering): Port device team_slave_0 removed [ 1667.924492][ C0] vkms_vblank_simulate: vblank timer overrun [ 1667.932341][ T51] Bluetooth: hci0: command tx timeout [ 1668.023592][ C0] vkms_vblank_simulate: vblank timer overrun [ 1668.090084][ C0] vkms_vblank_simulate: vblank timer overrun [ 1668.224612][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.084009][T20209] No buffer was provided with the request [ 1669.091162][T20210] fuse: Bad value for 'fd' [ 1669.224094][ T6698] team0 (unregistering): Port device team_slave_1 removed [ 1669.363031][ T6698] team0 (unregistering): Port device team_slave_0 removed [ 1670.001902][ T51] Bluetooth: hci0: command tx timeout [ 1672.457155][ C0] vkms_vblank_simulate: vblank timer overrun [ 1673.943717][T20239] fuse: Bad value for 'fd' [ 1673.976538][T19867] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1674.018965][T19867] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1674.120834][T19867] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1674.232834][T19867] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1675.463285][T20161] chnl_net:caif_netlink_parms(): no params data found [ 1677.271801][T20266] overlayfs: overlapping lowerdir path [ 1678.043636][T20161] bridge0: port 1(bridge_slave_0) entered blocking state [ 1678.099903][T20161] bridge0: port 1(bridge_slave_0) entered disabled state [ 1678.115614][T20161] bridge_slave_0: entered allmulticast mode [ 1678.152690][T20161] bridge_slave_0: entered promiscuous mode [ 1678.177646][T20280] fuse: Bad value for 'fd' [ 1678.191915][T20278] No buffer was provided with the request [ 1678.199923][T20161] bridge0: port 2(bridge_slave_1) entered blocking state [ 1678.207074][T20161] bridge0: port 2(bridge_slave_1) entered disabled state [ 1678.240052][T20161] bridge_slave_1: entered allmulticast mode [ 1678.254412][T10369] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1678.255546][T20161] bridge_slave_1: entered promiscuous mode [ 1678.290280][T10369] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1678.299035][T10369] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1678.316088][T10369] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1678.326466][T10369] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1678.424666][T20161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1678.458591][T20161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1678.631889][T20161] team0: Port device team_slave_0 added [ 1678.656545][T20161] team0: Port device team_slave_1 added [ 1678.754124][T20017] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1678.765545][T20161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1678.772608][T20161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1678.800101][T20161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1678.813586][T20161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1678.820913][T20161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1678.847085][T20161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1678.884979][T20017] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1678.921825][T20017] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1678.955313][ C0] vkms_vblank_simulate: vblank timer overrun [ 1679.844034][T20017] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1680.090367][T20161] hsr_slave_0: entered promiscuous mode [ 1680.118062][T20296] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1680.180208][T20161] hsr_slave_1: entered promiscuous mode [ 1680.186663][T20161] debugfs: 'hsr0' already exists in 'hsr' [ 1680.202510][T20161] Cannot create hsr debugfs directory [ 1680.419445][T10369] Bluetooth: hci4: command tx timeout [ 1681.458942][ T6698] IPVS: stop unused estimator thread 0... [ 1682.559380][ T51] Bluetooth: hci4: command tx timeout [ 1682.580111][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1682.589732][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1682.597602][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1682.606132][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1682.613719][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1682.897556][T20319] fuse: Bad value for 'fd' [ 1683.105815][T20323] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3725'. [ 1683.127387][T20323] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3725'. [ 1683.149644][T20323] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3725'. [ 1683.186368][T20323] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3725'. [ 1683.846953][T20281] chnl_net:caif_netlink_parms(): no params data found [ 1684.547080][T20341] input: syz1 as /devices/virtual/input/input24 [ 1684.689488][ T51] Bluetooth: hci4: command tx timeout [ 1684.694978][ T51] Bluetooth: hci5: command tx timeout [ 1685.791601][T20281] bridge0: port 1(bridge_slave_0) entered blocking state [ 1685.851132][T20281] bridge0: port 1(bridge_slave_0) entered disabled state [ 1685.858544][T20281] bridge_slave_0: entered allmulticast mode [ 1685.867570][T20281] bridge_slave_0: entered promiscuous mode [ 1686.001807][T20281] bridge0: port 2(bridge_slave_1) entered blocking state [ 1686.008980][T20281] bridge0: port 2(bridge_slave_1) entered disabled state [ 1686.052101][T20281] bridge_slave_1: entered allmulticast mode [ 1686.075148][T20281] bridge_slave_1: entered promiscuous mode [ 1686.366425][T20017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1686.466917][T20362] No buffer was provided with the request [ 1686.482734][T20281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1686.507028][T20312] chnl_net:caif_netlink_parms(): no params data found [ 1686.576126][T20281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1686.638048][T20017] 8021q: adding VLAN 0 to HW filter on device team0 [ 1686.699793][T20161] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1686.726586][ T51] Bluetooth: hci5: command tx timeout [ 1686.732332][T10369] Bluetooth: hci4: command tx timeout [ 1686.739719][T20161] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1686.752270][T20161] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1688.355785][ T1001] bridge0: port 1(bridge_slave_0) entered blocking state [ 1688.362958][ T1001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1688.390546][ T1001] bridge0: port 2(bridge_slave_1) entered blocking state [ 1688.397788][ T1001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1688.799568][ T51] Bluetooth: hci5: command tx timeout [ 1689.022741][T20161] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1689.070429][ T6698] bridge_slave_1: left allmulticast mode [ 1689.076141][ T6698] bridge_slave_1: left promiscuous mode [ 1689.131531][ T6698] bridge0: port 2(bridge_slave_1) entered disabled state [ 1689.169112][ T6698] bridge_slave_0: left allmulticast mode [ 1689.176377][ T6698] bridge_slave_0: left promiscuous mode [ 1689.199706][ T6698] bridge0: port 1(bridge_slave_0) entered disabled state [ 1689.218469][ T6698] bridge_slave_1: left allmulticast mode [ 1689.224382][ T6698] bridge_slave_1: left promiscuous mode [ 1689.238768][ T6698] bridge0: port 2(bridge_slave_1) entered disabled state [ 1689.256435][ T6698] bridge_slave_0: left allmulticast mode [ 1689.264331][ T6698] bridge_slave_0: left promiscuous mode [ 1689.270767][ T6698] bridge0: port 1(bridge_slave_0) entered disabled state [ 1690.446847][T20391] No buffer was provided with the request [ 1690.750425][ T6698] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1690.764497][ T6698] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1690.786528][ T6698] bond0 (unregistering): Released all slaves [ 1690.889445][ T51] Bluetooth: hci5: command tx timeout [ 1691.459572][ T6698] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1691.474551][ T6698] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1691.485632][ T6698] bond0 (unregistering): Released all slaves [ 1691.515590][T20281] team0: Port device team_slave_0 added [ 1691.524965][T20281] team0: Port device team_slave_1 added [ 1692.195064][ T6698] hsr_slave_0: left promiscuous mode [ 1692.295446][ T6698] hsr_slave_1: left promiscuous mode [ 1692.404159][ T6698] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1692.512485][ T6698] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1692.669858][ T6698] hsr_slave_0: left promiscuous mode [ 1692.680958][ T6698] hsr_slave_1: left promiscuous mode [ 1692.693737][ T6698] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1692.702001][ T6698] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1693.537450][ C0] vkms_vblank_simulate: vblank timer overrun [ 1693.683277][T20420] fuse: Unknown parameter '0x0000000000000003' [ 1693.703561][T20420] Invalid source name [ 1693.707646][T20420] UBIFS error (pid: 20420): cannot open "./file0", error -22 [ 1693.812444][ T6698] team0 (unregistering): Port device team_slave_1 removed [ 1693.865684][ T6698] team0 (unregistering): Port device team_slave_0 removed [ 1695.745773][ T6698] team0 (unregistering): Port device team_slave_1 removed [ 1696.018344][ T6698] team0 (unregistering): Port device team_slave_0 removed [ 1697.451245][T20281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1697.468419][T20281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1697.533421][T20281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1697.614122][T20281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1697.625398][T20281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1697.655645][T20281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1697.723664][T20312] bridge0: port 1(bridge_slave_0) entered blocking state [ 1697.924288][T20312] bridge0: port 1(bridge_slave_0) entered disabled state [ 1697.931894][T20312] bridge_slave_0: entered allmulticast mode [ 1697.940075][T20312] bridge_slave_0: entered promiscuous mode [ 1698.894349][T20312] bridge0: port 2(bridge_slave_1) entered blocking state [ 1698.907853][T20312] bridge0: port 2(bridge_slave_1) entered disabled state [ 1698.918828][T20312] bridge_slave_1: entered allmulticast mode [ 1698.935352][T20312] bridge_slave_1: entered promiscuous mode [ 1698.960018][T20281] hsr_slave_0: entered promiscuous mode [ 1698.966658][T20281] hsr_slave_1: entered promiscuous mode [ 1699.077883][T20312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1699.164279][T20312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1699.367887][T20312] team0: Port device team_slave_0 added [ 1699.376944][T20312] team0: Port device team_slave_1 added [ 1699.480839][T20312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1699.487820][T20312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1699.514511][T20312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1699.527225][T20312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1699.537233][T20312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1699.564116][T20312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1700.553196][T20312] hsr_slave_0: entered promiscuous mode [ 1700.580899][T20312] hsr_slave_1: entered promiscuous mode [ 1700.587625][T20312] debugfs: 'hsr0' already exists in 'hsr' [ 1700.908946][T20312] Cannot create hsr debugfs directory [ 1701.162484][T20161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1701.280389][T19873] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1701.290676][T19873] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1701.298727][T19873] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1701.311452][T19873] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1701.319195][T19873] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1702.590998][T20484] No buffer was provided with the request [ 1702.631816][T20161] 8021q: adding VLAN 0 to HW filter on device team0 [ 1703.440327][T19873] Bluetooth: hci2: command tx timeout [ 1703.742906][ T1001] bridge0: port 1(bridge_slave_0) entered blocking state [ 1703.750142][ T1001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1703.808611][ T1001] bridge0: port 2(bridge_slave_1) entered blocking state [ 1703.815840][ T1001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1704.561704][ T30] audit: type=1326 audit(1759016356.049:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20491 comm="syz.7.3774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51a38eec9 code=0x7fc00000 [ 1704.662543][ T30] audit: type=1326 audit(1759016356.049:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20491 comm="syz.7.3774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb51a38eec9 code=0x7fc00000 [ 1704.685315][ T30] audit: type=1326 audit(1759016356.049:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20491 comm="syz.7.3774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51a38eec9 code=0x7fc00000 [ 1704.719762][ T30] audit: type=1326 audit(1759016356.049:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20491 comm="syz.7.3774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51a38eec9 code=0x7fc00000 [ 1704.775602][ T30] audit: type=1326 audit(1759016356.049:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20491 comm="syz.7.3774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51a38eec9 code=0x7fc00000 [ 1704.846966][ T30] audit: type=1326 audit(1759016356.049:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20491 comm="syz.7.3774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51a38eec9 code=0x7fc00000 [ 1705.222289][ T6698] bridge_slave_1: left allmulticast mode [ 1705.227990][ T6698] bridge_slave_1: left promiscuous mode [ 1705.237876][ T6698] bridge0: port 2(bridge_slave_1) entered disabled state [ 1705.317751][ T6698] bridge_slave_0: left allmulticast mode [ 1705.357651][ T6698] bridge_slave_0: left promiscuous mode [ 1705.367043][ T6698] bridge0: port 1(bridge_slave_0) entered disabled state [ 1705.396887][ T6698] bridge_slave_1: left allmulticast mode [ 1705.414569][ T6698] bridge_slave_1: left promiscuous mode [ 1705.427608][ T6698] bridge0: port 2(bridge_slave_1) entered disabled state [ 1705.442957][ T6698] bridge_slave_0: left allmulticast mode [ 1705.448781][ T6698] bridge_slave_0: left promiscuous mode [ 1705.454772][ T6698] bridge0: port 1(bridge_slave_0) entered disabled state [ 1705.520082][T19873] Bluetooth: hci2: command tx timeout [ 1706.004252][T20519] No buffer was provided with the request [ 1706.137488][T20522] tmpfs: Bad value for 'mpol' [ 1706.196534][ T6698] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1706.215673][ T6698] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1706.227638][ T6698] bond0 (unregistering): Released all slaves [ 1706.544102][ T6698] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1706.566228][ T6698] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1706.607548][ T6698] bond0 (unregistering): Released all slaves [ 1706.641227][T20281] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1706.665034][T20281] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1706.717132][T20473] chnl_net:caif_netlink_parms(): no params data found [ 1707.602816][T19873] Bluetooth: hci2: command tx timeout [ 1707.961229][T20281] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1708.098042][T20281] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1708.202849][ T6698] hsr_slave_0: left promiscuous mode [ 1708.228936][ T6698] hsr_slave_1: left promiscuous mode [ 1708.253820][ T6698] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1708.275513][ T6698] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1708.294795][ T6698] hsr_slave_0: left promiscuous mode [ 1708.313599][ T6698] hsr_slave_1: left promiscuous mode [ 1708.329127][ T6698] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1708.348190][ T6698] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1709.679718][T19873] Bluetooth: hci2: command tx timeout [ 1710.051012][ T6698] team0 (unregistering): Port device team_slave_1 removed [ 1710.159216][ T6698] team0 (unregistering): Port device team_slave_0 removed [ 1710.985739][ T6698] team0 (unregistering): Port device team_slave_1 removed [ 1711.033871][ T6698] team0 (unregistering): Port device team_slave_0 removed [ 1711.385892][T20553] No buffer was provided with the request [ 1711.410523][T20161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1711.745416][T20562] sysfs: Unknown parameter 'lowerdir' [ 1712.493220][T20473] bridge0: port 1(bridge_slave_0) entered blocking state [ 1712.531863][T20473] bridge0: port 1(bridge_slave_0) entered disabled state [ 1712.589000][T20473] bridge_slave_0: entered allmulticast mode [ 1712.662933][T20473] bridge_slave_0: entered promiscuous mode [ 1713.287058][T20473] bridge0: port 2(bridge_slave_1) entered blocking state [ 1713.307246][T20473] bridge0: port 2(bridge_slave_1) entered disabled state [ 1713.354505][T20473] bridge_slave_1: entered allmulticast mode [ 1713.372625][T20473] bridge_slave_1: entered promiscuous mode [ 1713.729104][T20581] fuse: Unknown parameter 'use00000000000000000000' [ 1713.779103][T20473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1713.939497][T20473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1714.017975][T20281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1714.242564][T20473] team0: Port device team_slave_0 added [ 1714.654062][T20473] team0: Port device team_slave_1 added [ 1714.834028][T20312] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1714.883441][T20312] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1714.925136][T20281] 8021q: adding VLAN 0 to HW filter on device team0 [ 1714.942342][T20473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1714.956346][T20473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1714.986557][T20473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1715.018858][T20312] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1715.083532][T20312] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1715.993304][T20473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1716.038731][T20473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1716.122064][T20473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1716.274235][T12553] bridge0: port 1(bridge_slave_0) entered blocking state [ 1716.281492][T12553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1717.098749][T12553] bridge0: port 2(bridge_slave_1) entered blocking state [ 1717.106012][T12553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1717.297589][T20473] hsr_slave_0: entered promiscuous mode [ 1717.305818][T20473] hsr_slave_1: entered promiscuous mode [ 1717.312701][T20473] debugfs: 'hsr0' already exists in 'hsr' [ 1717.318544][T20473] Cannot create hsr debugfs directory [ 1718.494775][T20161] veth0_vlan: entered promiscuous mode [ 1718.664304][T20619] fuse: Unknown parameter 'use00000000000000000000' [ 1720.394687][T20312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1720.448593][T20281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1720.464254][T20312] 8021q: adding VLAN 0 to HW filter on device team0 [ 1720.501947][T12553] bridge0: port 1(bridge_slave_0) entered blocking state [ 1720.509114][T12553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1720.550795][T12553] bridge0: port 2(bridge_slave_1) entered blocking state [ 1720.557986][T12553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1721.266515][T20281] veth0_vlan: entered promiscuous mode [ 1721.558890][T20281] veth1_vlan: entered promiscuous mode [ 1721.985852][T20281] veth0_macvtap: entered promiscuous mode [ 1721.996266][T20281] veth1_macvtap: entered promiscuous mode [ 1722.127411][T20281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1722.143745][T20473] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1722.280433][T20281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1722.299608][T20473] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1722.432859][T20473] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1722.457033][ T1001] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1722.476257][ T1001] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1722.507530][T20473] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1722.581441][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1722.593051][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1722.601634][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1722.614081][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1722.626372][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1722.646518][ T1001] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1722.673738][ T1001] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1723.307702][T20312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1724.219646][T15705] bridge_slave_1: left allmulticast mode [ 1724.225432][T15705] bridge_slave_1: left promiscuous mode [ 1724.261828][T15705] bridge0: port 2(bridge_slave_1) entered disabled state [ 1724.301765][T15705] bridge_slave_0: left allmulticast mode [ 1724.317651][T15705] bridge_slave_0: left promiscuous mode [ 1724.338287][T15705] bridge0: port 1(bridge_slave_0) entered disabled state [ 1724.719846][ T51] Bluetooth: hci0: command tx timeout [ 1726.581970][T15705] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1726.604039][T15705] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1726.618759][T15705] bond0 (unregistering): Released all slaves [ 1726.667781][ T6698] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1726.705912][ T6698] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1726.800148][ T51] Bluetooth: hci0: command tx timeout [ 1727.145778][T15705] hsr_slave_0: left promiscuous mode [ 1727.203936][T15705] hsr_slave_1: left promiscuous mode [ 1727.294920][T15705] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1727.890326][T15705] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1727.963784][T15705] veth0_vlan: left promiscuous mode [ 1728.889775][ T51] Bluetooth: hci0: command tx timeout [ 1729.349970][T15705] team0 (unregistering): Port device team_slave_1 removed [ 1729.493989][T15705] team0 (unregistering): Port device team_slave_0 removed [ 1729.623337][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.387171][ C0] vkms_vblank_simulate: vblank timer overrun [ 1730.420341][ C0] vkms_vblank_simulate: vblank timer overrun [ 1730.523302][T16837] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1730.679454][T16837] usb 8-1: Using ep0 maxpacket: 32 [ 1730.688441][T16837] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1730.701753][T16837] usb 8-1: config 0 has no interface number 0 [ 1730.715568][T16837] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=2c.d8 [ 1730.731599][T16837] usb 8-1: New USB device strings: Mfr=193, Product=2, SerialNumber=3 [ 1730.759909][T16837] usb 8-1: Product: syz [ 1730.764197][T16837] usb 8-1: Manufacturer: syz [ 1730.768824][T16837] usb 8-1: SerialNumber: syz [ 1730.786921][T16837] usb 8-1: config 0 descriptor?? [ 1730.806453][T16837] usb 8-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1730.816115][ T6617] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1730.825434][ T6617] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1730.836692][T20312] veth0_vlan: entered promiscuous mode [ 1730.839606][T16837] usb 8-1: selecting invalid altsetting 1 [ 1730.853200][T16837] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1730.866970][T16837] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1730.877581][T16837] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1730.901220][T16837] usb 8-1: media controller created [ 1730.947379][T16837] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1730.959556][ T51] Bluetooth: hci0: command tx timeout [ 1730.970693][T20312] veth1_vlan: entered promiscuous mode [ 1731.118261][ C0] vkms_vblank_simulate: vblank timer overrun [ 1731.137136][T16837] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 1731.192180][T16837] zl10353_read_register: readreg error (reg=127, ret==-32) [ 1731.262541][T20473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1732.326463][T20705] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1733.007776][T20726] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1733.109016][T20652] chnl_net:caif_netlink_parms(): no params data found [ 1733.383881][T20312] veth0_macvtap: entered promiscuous mode [ 1733.534275][T20473] 8021q: adding VLAN 0 to HW filter on device team0 [ 1733.593550][T20312] veth1_macvtap: entered promiscuous mode [ 1733.639192][ T6617] bridge0: port 1(bridge_slave_0) entered blocking state [ 1733.646432][ T6617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1734.806654][T20312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1734.846540][ T6617] bridge0: port 2(bridge_slave_1) entered blocking state [ 1734.856069][ T6617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1735.053766][T20312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1735.353611][T20652] bridge0: port 1(bridge_slave_0) entered blocking state [ 1735.367770][T20652] bridge0: port 1(bridge_slave_0) entered disabled state [ 1735.387991][T20652] bridge_slave_0: entered allmulticast mode [ 1735.414931][T20652] bridge_slave_0: entered promiscuous mode [ 1735.450509][T20652] bridge0: port 2(bridge_slave_1) entered blocking state [ 1735.470604][T20652] bridge0: port 2(bridge_slave_1) entered disabled state [ 1735.493096][T20652] bridge_slave_1: entered allmulticast mode [ 1735.514345][T20652] bridge_slave_1: entered promiscuous mode [ 1735.539131][ T6698] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1735.558525][ T6698] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1735.659665][T16837] usb 8-1: USB disconnect, device number 25 [ 1735.790342][ T6698] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1735.873309][ T6698] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1735.932477][T20652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1735.987895][T20652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1736.199103][T20652] team0: Port device team_slave_0 added [ 1736.243947][T20652] team0: Port device team_slave_1 added [ 1736.418859][T20652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1736.490044][T20652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1736.517744][T20652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1736.566501][T20652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1736.588347][T20652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1736.667832][T20652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1737.519494][ T1001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1737.871568][ T1001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1738.252923][T20473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1738.308718][T20652] hsr_slave_0: entered promiscuous mode [ 1738.332237][T20652] hsr_slave_1: entered promiscuous mode [ 1738.368530][T20652] debugfs: 'hsr0' already exists in 'hsr' [ 1738.388673][T20652] Cannot create hsr debugfs directory [ 1742.489492][ T43] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1742.653223][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 1742.684657][ T43] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 1742.715397][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1742.752192][ T43] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1742.782943][ T43] usb 1-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 1742.806664][ T43] usb 1-1: Product: syz [ 1742.841325][ T43] usb 1-1: config 0 descriptor?? [ 1742.862734][T20796] syz.8.3850 (20796): drop_caches: 2 [ 1743.055250][T20473] veth0_vlan: entered promiscuous mode [ 1743.115292][T20804] fuse: Unknown parameter 'user_i00000000000000000000' [ 1743.267866][T15705] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1743.466469][T20473] veth1_vlan: entered promiscuous mode [ 1743.488892][T19873] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1743.502330][T19873] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1743.510438][T19873] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1743.519753][T19873] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1743.528337][T19873] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1743.703501][T15705] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1743.936450][T15705] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1744.180693][ T976] usb 1-1: USB disconnect, device number 34 [ 1744.330336][T15705] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1744.462608][T20473] veth0_macvtap: entered promiscuous mode [ 1744.587446][T20473] veth1_macvtap: entered promiscuous mode [ 1744.702179][T20652] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1744.746147][T20652] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1744.756884][T20652] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1744.782791][T20473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1744.858528][T20652] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1745.002533][T20473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1745.028618][T15705] bridge_slave_1: left allmulticast mode [ 1745.047926][T15705] bridge_slave_1: left promiscuous mode [ 1745.067230][T15705] bridge0: port 2(bridge_slave_1) entered disabled state [ 1745.102424][T15705] bridge_slave_0: left allmulticast mode [ 1745.121136][T15705] bridge_slave_0: left promiscuous mode [ 1745.149553][T15705] bridge0: port 1(bridge_slave_0) entered disabled state [ 1745.600603][T19873] Bluetooth: hci3: command tx timeout [ 1747.680122][T19873] Bluetooth: hci3: command tx timeout [ 1749.759570][T19873] Bluetooth: hci3: command tx timeout [ 1749.852865][T15705] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1749.868967][T15705] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1749.886740][T15705] bond0 (unregistering): Released all slaves [ 1750.116041][ T6699] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1750.181055][ T6699] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1750.190883][ T6699] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1750.245636][ T6699] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1750.456498][T20808] chnl_net:caif_netlink_parms(): no params data found [ 1750.764758][T15705] hsr_slave_0: left promiscuous mode [ 1750.771987][T15705] hsr_slave_1: left promiscuous mode [ 1750.778206][T15705] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1750.796657][T15705] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1750.808971][T15705] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1750.817009][T15705] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1750.861800][T15705] veth1_macvtap: left promiscuous mode [ 1750.867541][T15705] veth0_macvtap: left promiscuous mode [ 1750.880390][T15705] veth1_vlan: left promiscuous mode [ 1750.885912][T15705] veth0_vlan: left promiscuous mode [ 1751.839650][T19873] Bluetooth: hci3: command tx timeout [ 1752.115549][T20877] tmpfs: Unknown parameter 'mp' [ 1752.395635][T15705] team0 (unregistering): Port device team_slave_1 removed [ 1752.621378][T15705] team0 (unregistering): Port device team_slave_0 removed [ 1753.100350][ C0] vkms_vblank_simulate: vblank timer overrun [ 1753.413869][T20882] netlink: 2384 bytes leftover after parsing attributes in process `syz.0.3870'. [ 1755.032630][T20890] trusted_key: encrypted_key: keyword 'new¼°±‹U£_5' not recognized [ 1755.043106][T20890] overlayfs: failed to resolve './file1': -2 [ 1755.974909][T20652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1756.025488][T17741] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1756.124164][T17741] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1757.119699][T20906] tmpfs: Bad value for 'mpol' [ 1757.272313][T20652] 8021q: adding VLAN 0 to HW filter on device team0 [ 1757.333283][T17741] bridge0: port 1(bridge_slave_0) entered blocking state [ 1757.340467][T17741] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1757.351803][T20911] Bluetooth: MGMT ver 1.23 [ 1757.415345][T20914] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3879'. [ 1757.427215][T20914] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3879'. [ 1757.430259][T20808] bridge0: port 1(bridge_slave_0) entered blocking state [ 1757.444089][T20914] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3879'. [ 1757.458913][T20914] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3879'. [ 1757.480956][T20808] bridge0: port 1(bridge_slave_0) entered disabled state [ 1757.488185][T20808] bridge_slave_0: entered allmulticast mode [ 1757.501477][T20808] bridge_slave_0: entered promiscuous mode [ 1757.515282][T20808] bridge0: port 2(bridge_slave_1) entered blocking state [ 1757.522932][T20808] bridge0: port 2(bridge_slave_1) entered disabled state [ 1757.558049][T20808] bridge_slave_1: entered allmulticast mode [ 1757.567994][T20808] bridge_slave_1: entered promiscuous mode [ 1757.587049][T17741] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1757.599722][ T5968] bridge0: port 2(bridge_slave_1) entered blocking state [ 1757.606962][ T5968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1757.616285][T17741] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1757.705406][T20808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1757.743518][T20808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1757.835061][T20808] team0: Port device team_slave_0 added [ 1757.870864][T20808] team0: Port device team_slave_1 added [ 1758.027417][T20808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1758.041891][T20808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1758.068000][ C0] vkms_vblank_simulate: vblank timer overrun [ 1758.083604][T20808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1758.104721][T20808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1758.113171][T20808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1758.139172][ C0] vkms_vblank_simulate: vblank timer overrun [ 1758.148302][T20808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1758.421941][T20808] hsr_slave_0: entered promiscuous mode [ 1758.442757][T20808] hsr_slave_1: entered promiscuous mode [ 1758.452367][T20808] debugfs: 'hsr0' already exists in 'hsr' [ 1758.458196][T20808] Cannot create hsr debugfs directory [ 1759.289314][T12480] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1759.709431][T12480] usb 9-1: Using ep0 maxpacket: 16 [ 1759.736690][T12480] usb 9-1: config 0 has an invalid interface number: 17 but max is 0 [ 1759.769505][T12480] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1759.789746][T12480] usb 9-1: config 0 has no interface number 0 [ 1759.808974][T12480] usb 9-1: New USB device found, idVendor=0408, idProduct=4034, bcdDevice=dd.cd [ 1759.829278][T12480] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1759.879396][T12480] usb 9-1: Product: syz [ 1759.883909][T12480] usb 9-1: Manufacturer: syz [ 1759.888522][T12480] usb 9-1: SerialNumber: syz [ 1759.927390][T12480] usb 9-1: config 0 descriptor?? [ 1759.950421][T12480] usb 9-1: Found UVC 0.00 device syz (0408:4034) [ 1759.967238][T12480] usb 9-1: No valid video chain found. [ 1759.973339][T20652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1760.266554][T12480] usb 9-1: USB disconnect, device number 13 [ 1761.955286][T20808] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1762.041993][T20808] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1762.190146][T20808] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1762.299177][T20808] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1762.532058][T20975] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3894'. [ 1762.546657][T20960] syz.5.3890 (20960): drop_caches: 2 [ 1762.569017][T20975] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3894'. [ 1762.575284][T20652] veth0_vlan: entered promiscuous mode [ 1762.652751][T20975] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3894'. [ 1762.660317][T20652] veth1_vlan: entered promiscuous mode [ 1762.666876][T20975] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3894'. [ 1763.179960][T20652] veth0_macvtap: entered promiscuous mode [ 1763.227891][T20808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1763.320934][T20652] veth1_macvtap: entered promiscuous mode [ 1763.582274][T20808] 8021q: adding VLAN 0 to HW filter on device team0 [ 1763.616328][T20652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1763.749419][ T8271] bridge0: port 1(bridge_slave_0) entered blocking state [ 1763.756640][ T8271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1764.035750][ T8271] bridge0: port 2(bridge_slave_1) entered blocking state [ 1764.043021][ T8271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1764.351924][T20988] bridge0: port 3(syz_tun) entered blocking state [ 1764.359423][T20988] bridge0: port 3(syz_tun) entered disabled state [ 1764.366106][T20988] syz_tun: entered allmulticast mode [ 1764.373595][T20988] syz_tun: entered promiscuous mode [ 1764.379598][T20988] bridge0: port 3(syz_tun) entered blocking state [ 1764.386549][T20988] bridge0: port 3(syz_tun) entered forwarding state [ 1764.565309][T20652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1765.303886][T15705] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1765.371408][T15705] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1765.480391][T15705] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1765.565392][T15705] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1765.812119][T15705] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1765.868683][T15705] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1766.341362][T12553] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1766.364502][T12553] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1767.492196][T20808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1768.994294][T20808] veth0_vlan: entered promiscuous mode [ 1769.129621][T20808] veth1_vlan: entered promiscuous mode [ 1770.646019][T20808] veth0_macvtap: entered promiscuous mode [ 1770.723715][T20808] veth1_macvtap: entered promiscuous mode [ 1770.834197][T20808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1770.876642][T20808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1771.016170][ T5968] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1771.063385][ T5968] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1771.104363][ T5968] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1771.194639][ T5968] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1771.379337][T16837] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1771.545196][T16837] usb 6-1: Using ep0 maxpacket: 16 [ 1771.642663][ T5990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1771.672874][T16837] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1771.684182][ T5990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1771.805324][T15705] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1771.866067][T16837] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1771.880704][T15705] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1771.976132][T16837] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1772.512924][T16837] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1772.529506][T16837] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1772.565606][T16837] usb 6-1: config 0 descriptor?? [ 1773.464970][T16837] input: HID 0955:7214 Haptics as /devices/virtual/input/input26 [ 1773.675318][T16837] shield 0003:0955:7214.0009: Registered Thunderstrike controller [ 1773.769276][T16837] shield 0003:0955:7214.0009: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 1773.892179][T16837] usb 6-1: USB disconnect, device number 3 [ 1773.905999][T16152] shield 0003:0955:7214.0009: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1774.003596][T16152] shield 0003:0955:7214.0009: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1774.061734][T16152] shield 0003:0955:7214.0009: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1774.107875][T16152] shield 0003:0955:7214.0009: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1775.938318][T21093] sp0: Synchronizing with TNC [ 1781.051131][ C0] vkms_vblank_simulate: vblank timer overrun [ 1781.606240][T21123] overlay: Unknown parameter '/' [ 1781.691543][T21125] sysfs: Unknown parameter 'lowerdir' [ 1782.012659][T21132] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3933'. [ 1782.104113][T21132] netlink: zone id is out of range [ 1782.288654][T21132] netlink: zone id is out of range [ 1782.294354][T21132] netlink: zone id is out of range [ 1782.299544][T21132] netlink: zone id is out of range [ 1782.304833][T21132] netlink: zone id is out of range [ 1782.310116][T21132] netlink: zone id is out of range [ 1782.321556][T21132] netlink: zone id is out of range [ 1782.326835][T21132] netlink: zone id is out of range [ 1782.332440][T21132] netlink: zone id is out of range [ 1782.338018][T21132] netlink: zone id is out of range [ 1783.178988][ T5990] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1783.534712][T21141] sp0: Synchronizing with TNC [ 1783.900824][ T5990] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1783.931911][ T976] kernel read not supported for file /dsp (pid: 976 comm: kworker/1:2) [ 1784.606482][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1784.617093][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1784.628278][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1784.638551][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1784.652682][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1785.758095][ T5990] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1786.548207][ T5990] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1786.729493][T19873] Bluetooth: hci1: command tx timeout [ 1787.739330][T16462] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1787.833456][ T5990] bridge_slave_1: left allmulticast mode [ 1787.844347][ T5990] bridge_slave_1: left promiscuous mode [ 1787.868709][ T5990] bridge0: port 2(bridge_slave_1) entered disabled state [ 1787.903911][ T5990] bridge_slave_0: left allmulticast mode [ 1787.931376][T16462] usb 10-1: Using ep0 maxpacket: 16 [ 1787.960302][T16462] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1787.989847][T16462] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1788.054754][T16462] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1788.145373][T16462] usb 10-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1788.214252][T16462] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1788.294186][T16462] usb 10-1: config 0 descriptor?? [ 1788.377520][ T5990] bridge_slave_0: left promiscuous mode [ 1788.414001][ T5990] bridge0: port 1(bridge_slave_0) entered disabled state [ 1788.799560][T19873] Bluetooth: hci1: command tx timeout [ 1789.236737][T16462] input: HID 05ac:8241 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:05AC:8241.000A/input/input28 [ 1789.546121][T16462] appleir 0003:05AC:8241.000A: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.9-1/input0 [ 1789.639724][T16462] usb 10-1: USB disconnect, device number 2 [ 1790.897263][T19873] Bluetooth: hci1: command tx timeout [ 1791.155264][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.960397][T19873] Bluetooth: hci1: command tx timeout [ 1794.312903][ T5990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1794.411980][ T5990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1794.525281][ T5990] bond0 (unregistering): Released all slaves [ 1794.807711][T21250] sp0: Synchronizing with TNC [ 1795.013725][T21151] chnl_net:caif_netlink_parms(): no params data found [ 1797.341085][ T5990] hsr_slave_0: left promiscuous mode [ 1797.355887][ T5990] hsr_slave_1: left promiscuous mode [ 1797.371002][ T5990] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1797.378625][ T5990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1797.492149][ T5990] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1797.711415][ T5990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1798.359907][ T5990] veth1_macvtap: left promiscuous mode [ 1798.365537][ T5990] veth0_macvtap: left promiscuous mode [ 1798.466733][ T5990] veth1_vlan: left promiscuous mode [ 1798.508352][ T5990] veth0_vlan: left promiscuous mode [ 1798.782896][T21301] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input29 [ 1799.254225][ T5990] pim6reg (unregistering): left allmulticast mode [ 1801.973129][ T5990] team0 (unregistering): Port device team_slave_1 removed [ 1802.049758][ T5990] team0 (unregistering): Port device team_slave_0 removed [ 1803.373716][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 1803.897326][ C0] vkms_vblank_simulate: vblank timer overrun [ 1804.627351][T21151] bridge0: port 1(bridge_slave_0) entered blocking state [ 1804.639766][T21151] bridge0: port 1(bridge_slave_0) entered disabled state [ 1804.647132][T21151] bridge_slave_0: entered allmulticast mode [ 1804.661754][T21151] bridge_slave_0: entered promiscuous mode [ 1804.676499][T21151] bridge0: port 2(bridge_slave_1) entered blocking state [ 1804.684003][T21151] bridge0: port 2(bridge_slave_1) entered disabled state [ 1804.868954][T21151] bridge_slave_1: entered allmulticast mode [ 1804.878374][T21151] bridge_slave_1: entered promiscuous mode [ 1805.009453][T21293] netlink: 'syz.8.3983': attribute type 14 has an invalid length. [ 1805.675900][T21354] sp0: Synchronizing with TNC [ 1806.045131][T21151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1806.260842][T21374] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1806.271840][T21151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1806.381103][T21374] cramfs: wrong magic [ 1807.150320][T21151] team0: Port device team_slave_0 added [ 1807.159050][T21151] team0: Port device team_slave_1 added [ 1807.414245][T21386] trusted_key: syz.5.4006 sent an empty control message without MSG_MORE. [ 1807.677802][T21151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1807.729496][T21151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1807.755490][ C0] vkms_vblank_simulate: vblank timer overrun [ 1808.011514][T21151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1808.082469][T21151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1808.155788][T21151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1808.181779][ C0] vkms_vblank_simulate: vblank timer overrun [ 1808.404885][T21151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1808.921337][T21151] hsr_slave_0: entered promiscuous mode [ 1808.927963][T21151] hsr_slave_1: entered promiscuous mode [ 1808.994785][T21151] debugfs: 'hsr0' already exists in 'hsr' [ 1809.009230][T21151] Cannot create hsr debugfs directory [ 1811.785366][T21151] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1811.883919][T21151] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1811.959116][T21151] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1812.041245][T21151] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1812.289164][T21420] sp0: Synchronizing with TNC [ 1813.473545][T21151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1813.701905][T21151] 8021q: adding VLAN 0 to HW filter on device team0 [ 1813.976727][T21151] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1814.007951][T21151] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1814.122132][ T5990] bridge0: port 1(bridge_slave_0) entered blocking state [ 1814.129349][ T5990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1814.169595][ T5990] bridge0: port 2(bridge_slave_1) entered blocking state [ 1814.176767][ T5990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1816.354597][T21458] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4024'. [ 1816.363709][T21458] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4024'. [ 1816.378845][T21458] ubi31: attaching mtd0 [ 1816.386930][T21458] ubi31: scanning is finished [ 1816.391735][T21458] ubi31: empty MTD device detected [ 1817.155575][T21458] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1817.164011][T21458] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1817.171387][T21458] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1817.178408][T21458] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 1817.185915][T21458] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1817.192813][T21458] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1817.200990][T21458] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3477672696 [ 1817.211105][T21458] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1817.222241][T21464] ubi31: background thread "ubi_bgt31d" started, PID 21464 [ 1817.231003][T21462] fuse: Unknown parameter 'fd0x0000000000000003' [ 1819.010457][T21151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1819.508803][ T36] Bluetooth: hci5: Frame reassembly failed (-84) [ 1821.237691][T21151] veth0_vlan: entered promiscuous mode [ 1821.373872][T21151] veth1_vlan: entered promiscuous mode [ 1821.442995][T21513] sp0: Synchronizing with TNC [ 1821.519891][ T51] Bluetooth: hci5: command 0x1003 tx timeout [ 1821.527747][T19873] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1821.613242][T21151] veth0_macvtap: entered promiscuous mode [ 1821.724673][T21151] veth1_macvtap: entered promiscuous mode [ 1821.831349][T21151] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1822.024776][T21151] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1822.199457][ T1001] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1822.286510][ T1001] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1822.370000][ T1001] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1822.452951][ T1001] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1822.848909][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1822.909080][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1823.072233][ T1001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1823.134767][ T1001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1823.569794][T21522] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 1823.997941][T19873] Bluetooth: hci2: command 0x0406 tx timeout [ 1828.537255][T21557] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1829.617833][T21581] fuse: Unknown parameter 'fd0x0000000000000003' [ 1830.131609][T21589] input: syz1 as /devices/virtual/input/input30 [ 1830.889423][T16152] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 1831.951793][T16152] usb 6-1: config 0 interface 0 altsetting 127 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1831.988998][T16152] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1832.060105][T16152] usb 6-1: New USB device found, idVendor=0b05, idProduct=1a30, bcdDevice= 0.00 [ 1832.081222][T21597] sp0: Synchronizing with TNC [ 1832.117070][T16152] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1832.250181][T16152] usb 6-1: config 0 descriptor?? [ 1832.733400][T21604] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1833.747248][T16152] usbhid 6-1:0.0: can't add hid device: -71 [ 1833.866181][T16152] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1834.296403][T16152] usb 6-1: USB disconnect, device number 4 [ 1835.705864][T21624] random: crng reseeded on system resumption [ 1838.307842][T21643] tmpfs: Bad value for 'mpol' [ 1844.097472][T21689] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1844.210901][T21696] sp0: Synchronizing with TNC [ 1847.039254][T16152] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1847.211371][T16152] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1848.039429][T16152] usb 1-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 1848.050832][T16152] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1848.062714][T16152] usb 1-1: config 0 descriptor?? [ 1849.443220][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 1850.069627][T16152] usb 1-1: USB disconnect, device number 35 [ 1852.485886][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1858.371368][T21799] sp0: Synchronizing with TNC [ 1860.519387][ T43] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1861.345216][ T43] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1861.437677][ T43] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1861.546535][ T43] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1861.597712][ T43] usb 10-1: config 0 descriptor?? [ 1862.096244][ T43] pwc: Askey VC010 type 2 USB webcam detected. [ 1862.507678][ T43] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1862.618421][T21843] No buffer was provided with the request [ 1863.518575][ T43] pwc: recv_control_msg error -32 req 02 val 2700 [ 1863.717656][ T43] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1863.727000][ T43] pwc: recv_control_msg error -71 req 04 val 1000 [ 1863.737275][ T43] pwc: recv_control_msg error -71 req 04 val 1300 [ 1863.751044][ T43] pwc: recv_control_msg error -71 req 04 val 1400 [ 1863.796426][ T43] pwc: recv_control_msg error -71 req 02 val 2000 [ 1863.840783][ T43] pwc: recv_control_msg error -71 req 02 val 2100 [ 1863.877492][ T43] pwc: recv_control_msg error -71 req 04 val 1500 [ 1863.892984][ T43] pwc: recv_control_msg error -71 req 02 val 2500 [ 1863.916294][ T43] pwc: recv_control_msg error -71 req 02 val 2400 [ 1863.926564][ T43] pwc: recv_control_msg error -71 req 02 val 2600 [ 1864.410903][ T43] pwc: recv_control_msg error -71 req 02 val 2900 [ 1864.481171][ T43] pwc: recv_control_msg error -71 req 02 val 2800 [ 1864.495912][ T43] pwc: recv_control_msg error -71 req 04 val 1100 [ 1864.539558][ T43] pwc: recv_control_msg error -71 req 04 val 1200 [ 1864.596626][ T43] pwc: Registered as video103. [ 1864.611359][ T43] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input31 [ 1864.694475][ T43] usb 10-1: USB disconnect, device number 3 [ 1866.389276][T16152] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1866.599200][T16152] usb 3-1: Using ep0 maxpacket: 32 [ 1866.614054][T16152] usb 3-1: config 0 has an invalid interface number: 75 but max is 0 [ 1866.659006][T16152] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1866.715033][T16152] usb 3-1: config 0 has no interface number 0 [ 1867.204573][T16152] usb 3-1: config 0 interface 75 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1867.263204][T16152] usb 3-1: config 0 interface 75 has no altsetting 0 [ 1867.290664][T16152] usb 3-1: New USB device found, idVendor=1608, idProduct=030a, bcdDevice=7f.89 [ 1867.310172][T16152] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1867.554339][T16152] usb 3-1: Product: syz [ 1867.574132][T16152] usb 3-1: Manufacturer: syz [ 1868.344620][T16152] usb 3-1: SerialNumber: syz [ 1868.400466][T16152] usb 3-1: config 0 descriptor?? [ 1868.467067][T16152] io_ti 3-1:0.75: Edgeport TI 1 port adapter converter detected [ 1868.627893][T16152] io_ti 3-1:0.75: Direct firmware load for edgeport/down3.bin failed with error -2 [ 1869.153503][T16152] io_ti 3-1:0.75: Falling back to sysfs fallback for: edgeport/down3.bin [ 1869.212823][T21892] sp0: Synchronizing with TNC [ 1869.394112][T21898] No buffer was provided with the request [ 1870.003752][T19873] Bluetooth: hci3: command 0x0406 tx timeout [ 1873.713002][ T1001] Bluetooth: hci5: Frame reassembly failed (-84) [ 1873.790562][T16462] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1874.419292][T16462] usb 1-1: Using ep0 maxpacket: 32 [ 1874.445638][T16462] usb 1-1: config 0 has an invalid interface number: 75 but max is 0 [ 1874.682577][T16462] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1874.728714][T16462] usb 1-1: config 0 has no interface number 0 [ 1874.756614][T16462] usb 1-1: config 0 interface 75 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1874.808317][T16462] usb 1-1: config 0 interface 75 has no altsetting 0 [ 1874.826704][T16462] usb 1-1: New USB device found, idVendor=1608, idProduct=030a, bcdDevice=7f.89 [ 1874.839368][T16462] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1874.868165][T16462] usb 1-1: Product: syz [ 1874.881530][T16462] usb 1-1: Manufacturer: syz [ 1874.886165][T16462] usb 1-1: SerialNumber: syz [ 1874.918366][T16462] usb 1-1: config 0 descriptor?? [ 1874.931747][T16462] io_ti 1-1:0.75: Edgeport TI 1 port adapter converter detected [ 1875.759799][ T51] Bluetooth: hci5: command 0x1003 tx timeout [ 1875.771406][T19873] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1876.143025][T21960] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4169'. [ 1876.193463][T21960] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4169'. [ 1876.233913][T21960] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4169'. [ 1876.434945][T21960] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4169'. [ 1881.829456][ T43] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1882.110545][ T43] usb 9-1: Using ep0 maxpacket: 32 [ 1882.195447][ T43] usb 9-1: config 0 has an invalid interface number: 75 but max is 0 [ 1882.231393][ T43] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1882.278831][ T43] usb 9-1: config 0 has no interface number 0 [ 1882.303793][ T43] usb 9-1: config 0 interface 75 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1882.376462][ T43] usb 9-1: config 0 interface 75 has no altsetting 0 [ 1882.389559][T22011] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4185'. [ 1882.428749][ T43] usb 9-1: New USB device found, idVendor=1608, idProduct=030a, bcdDevice=7f.89 [ 1882.505586][T22011] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4185'. [ 1882.529287][ T43] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1882.568067][ T43] usb 9-1: Product: syz [ 1882.582523][T22011] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4185'. [ 1882.599469][ T43] usb 9-1: Manufacturer: syz [ 1882.606406][ T43] usb 9-1: SerialNumber: syz [ 1882.622873][T22011] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4185'. [ 1882.837859][ T43] usb 9-1: config 0 descriptor?? [ 1883.004558][ T43] io_ti 9-1:0.75: Edgeport TI 1 port adapter converter detected [ 1891.049331][T12480] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1891.189240][T12480] usb 8-1: device descriptor read/64, error -71 [ 1891.579514][T12480] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1891.816680][T12480] usb 8-1: device descriptor read/64, error -71 [ 1892.183887][T12480] usb usb8-port1: attempt power cycle [ 1892.632305][T12480] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1893.019723][T12480] usb 8-1: device descriptor read/8, error -71 [ 1893.269243][T12480] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1893.374414][T12480] usb 8-1: device descriptor read/8, error -71 [ 1894.219782][T12480] usb usb8-port1: unable to enumerate USB device [ 1897.516818][T19873] Bluetooth: hci1: link tx timeout [ 1897.526609][T19873] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1898.263230][ C0] vkms_vblank_simulate: vblank timer overrun [ 1898.348086][T22126] syz.2.4220 (22126): drop_caches: 2 [ 1898.652017][T19216] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1899.233325][T19216] usb 6-1: device descriptor read/64, error -71 [ 1899.519308][T19216] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1899.599266][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 1899.659286][T19216] usb 6-1: device descriptor read/64, error -71 [ 1900.519814][T19216] usb usb6-port1: attempt power cycle [ 1908.726298][T22202] No buffer was provided with the request [ 1910.289303][T20744] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1910.440187][T20744] usb 10-1: Using ep0 maxpacket: 32 [ 1910.486043][T20744] usb 10-1: config 0 has an invalid interface number: 75 but max is 0 [ 1910.750745][T20744] usb 10-1: config 0 has no interface number 0 [ 1911.541723][T20744] usb 10-1: config 0 interface 75 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1911.598672][T20744] usb 10-1: config 0 interface 75 has no altsetting 0 [ 1911.721465][T20744] usb 10-1: New USB device found, idVendor=1608, idProduct=030a, bcdDevice=7f.89 [ 1911.841500][T20744] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1912.229294][T20744] usb 10-1: Product: syz [ 1912.243936][T20744] usb 10-1: Manufacturer: syz [ 1912.263259][T20744] usb 10-1: SerialNumber: syz [ 1912.327986][T20744] usb 10-1: config 0 descriptor?? [ 1912.367080][T20744] usb 10-1: can't set config #0, error -71 [ 1912.402411][T20744] usb 10-1: USB disconnect, device number 4 [ 1913.928647][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.024833][T22248] No buffer was provided with the request [ 1919.822391][ T5881] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1920.041772][ T5881] usb 8-1: Using ep0 maxpacket: 32 [ 1920.614889][ T5881] usb 8-1: config 0 has an invalid interface number: 75 but max is 0 [ 1920.668625][ T5881] usb 8-1: config 0 has no interface number 0 [ 1920.720402][ T5881] usb 8-1: config 0 interface 75 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1920.775040][ T5881] usb 8-1: config 0 interface 75 has no altsetting 0 [ 1920.797894][ T5881] usb 8-1: New USB device found, idVendor=1608, idProduct=030a, bcdDevice=7f.89 [ 1920.851899][ T5881] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1921.013909][ T5881] usb 8-1: Product: syz [ 1921.019906][ T5881] usb 8-1: Manufacturer: syz [ 1921.032927][ T5881] usb 8-1: SerialNumber: syz [ 1921.056188][ T5881] usb 8-1: config 0 descriptor?? [ 1921.078028][ T5881] io_ti 8-1:0.75: Edgeport TI 1 port adapter converter detected [ 1922.573853][T22296] tmpfs: Bad value for 'mpol' [ 1926.379297][T20744] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1926.719774][T20744] usb 6-1: Using ep0 maxpacket: 16 [ 1926.727772][T20744] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1926.747259][T20744] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 1926.778756][T20744] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 1926.853609][T20744] usb 6-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 1926.870079][T20744] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1926.883372][T20744] usb 6-1: Product: syz [ 1926.887628][T20744] usb 6-1: Manufacturer: syz [ 1926.896999][T20744] usb 6-1: SerialNumber: syz [ 1926.912400][T20744] usb 6-1: config 0 descriptor?? [ 1926.922369][T22339] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1927.060235][T20744] mcba_usb 6-1:0.0 can0: failed tx_urb -90 [ 1927.086460][T20744] mcba_usb 6-1:0.0 can0: Failed to send cmd (169) [ 1927.111949][T20744] mcba_usb 6-1:0.0 can0: failed tx_urb -90 [ 1927.135598][T20744] mcba_usb 6-1:0.0 can0: Failed to send cmd (169) [ 1927.157354][T20744] mcba_usb 6-1:0.0: Microchip CAN BUS Analyzer connected [ 1927.802489][T19216] usb 6-1: USB disconnect, device number 8 [ 1927.810970][T19216] mcba_usb 6-1:0.0 can0: device disconnected [ 1928.054148][T22357] syz.2.4294 (22357): drop_caches: 2 [ 1929.340358][T16152] io_ti 3-1:0.75: Failed to load image "edgeport/down3.bin" err -110 [ 1929.349498][T16152] io_ti 3-1:0.75: probe with driver io_ti failed with error -110 [ 1929.357306][T16462] io_ti 1-1:0.75: Failed to load image "edgeport/down3.bin" err -2 [ 1929.378182][T16462] io_ti 1-1:0.75: probe with driver io_ti failed with error -2 [ 1929.383630][ T43] io_ti 9-1:0.75: Failed to load image "edgeport/down3.bin" err -2 [ 1929.399657][T16152] usb 3-1: USB disconnect, device number 9 [ 1930.089408][ T5881] io_ti 8-1:0.75: Failed to load image "edgeport/down3.bin" err -2 [ 1930.097648][ T5881] io_ti 8-1:0.75: probe with driver io_ti failed with error -2 [ 1930.222165][T16462] usb 1-1: USB disconnect, device number 36 [ 1930.310324][ T43] io_ti 9-1:0.75: probe with driver io_ti failed with error -2 [ 1930.349845][ T5881] usb 8-1: USB disconnect, device number 30 [ 1930.403552][ T43] usb 9-1: USB disconnect, device number 14 [ 1931.329378][T22389] sp0: Synchronizing with TNC [ 1931.340950][T22388] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4304'. [ 1931.409194][T22388] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4304'. [ 1931.467612][T22388] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4304'. [ 1931.525988][T22388] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4304'. [ 1935.765064][ T6009] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1935.977013][T22443] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4321'. [ 1935.989738][ T6009] usb 8-1: Using ep0 maxpacket: 8 [ 1936.008529][ T6009] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1936.021877][T22443] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4321'. [ 1936.044811][ T6009] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1936.073268][T22443] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4321'. [ 1936.123112][T22443] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4321'. [ 1936.380259][ T6009] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1936.423233][ T6009] pvrusb2: ********** [ 1936.465597][ T6009] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1936.536122][ T6009] pvrusb2: Important functionality might not be entirely working. [ 1936.581677][T22450] random: crng reseeded on system resumption [ 1936.588136][ T6009] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1936.731175][ T6009] pvrusb2: ********** [ 1936.778082][ T2339] pvrusb2: Invalid write control endpoint [ 1938.566915][T22458] syz.0.4323 (22458): drop_caches: 2 [ 1938.808856][T16152] usb 8-1: USB disconnect, device number 31 [ 1938.913580][T22461] sp0: Synchronizing with TNC [ 1938.953349][ T2339] pvrusb2: Invalid write control endpoint [ 1938.966171][ T2339] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1939.011222][ T2339] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1939.033214][ T2339] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1939.083388][ T2339] pvrusb2: Device being rendered inoperable [ 1939.138794][ T2339] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1939.176237][ T2339] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1939.245528][ T2339] pvrusb2: Attached sub-driver cx25840 [ 1939.254700][ T2339] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1939.304743][ T2339] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1944.386923][T22505] input: syz1 as /devices/virtual/input/input32 [ 1944.629324][ T43] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1944.847408][ T43] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 1944.887685][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1944.939446][ T43] usb 1-1: config 0 has no interface number 0 [ 1944.981151][ T43] usb 1-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46 [ 1944.999258][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1945.007297][ T43] usb 1-1: Product: syz [ 1945.033140][ T43] usb 1-1: Manufacturer: syz [ 1945.487640][ T43] usb 1-1: SerialNumber: syz [ 1945.610592][ T43] usb 1-1: config 0 descriptor?? [ 1945.630435][ T43] HFC-S_USB 1-1:0.117: probe with driver HFC-S_USB failed with error -5 [ 1945.669839][T22517] sp0: Synchronizing with TNC [ 1945.842049][T16152] usb 1-1: USB disconnect, device number 37 [ 1952.697813][T22569] sp0: Synchronizing with TNC [ 1953.417464][ T5881] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1953.640553][ T5881] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 1953.648750][ T5881] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1953.682054][ T5881] usb 1-1: config 0 has no interface number 0 [ 1953.694795][ T5881] usb 1-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46 [ 1953.711401][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1953.747247][ T5881] usb 1-1: Product: syz [ 1953.759410][ T5881] usb 1-1: Manufacturer: syz [ 1953.771860][ T5881] usb 1-1: SerialNumber: syz [ 1953.795026][ T5881] usb 1-1: config 0 descriptor?? [ 1953.816172][ T5881] HFC-S_USB 1-1:0.117: probe with driver HFC-S_USB failed with error -5 [ 1954.024231][ T5881] usb 1-1: USB disconnect, device number 38 [ 1957.745000][T22618] tmpfs: Bad value for 'mpol' [ 1959.147703][T22636] 9pnet_fd: Insufficient options for proto=fd [ 1962.640218][ T5881] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 1963.394736][ T5881] usb 8-1: config 0 has an invalid interface number: 117 but max is 0 [ 1963.413312][ T5881] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1963.484636][ T5881] usb 8-1: config 0 has no interface number 0 [ 1963.560954][ T5881] usb 8-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46 [ 1963.619515][ T5881] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1963.646867][ T5881] usb 8-1: Product: syz [ 1963.664371][ T5881] usb 8-1: Manufacturer: syz [ 1963.670216][ T5881] usb 8-1: SerialNumber: syz [ 1963.699550][ T5881] usb 8-1: config 0 descriptor?? [ 1963.784287][ T5881] HFC-S_USB 8-1:0.117: probe with driver HFC-S_USB failed with error -5 [ 1964.244108][T16462] usb 8-1: USB disconnect, device number 32 [ 1964.902352][T22673] tmpfs: Bad value for 'mpol' [ 1973.549305][T16152] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1973.709195][T16152] usb 3-1: Using ep0 maxpacket: 32 [ 1973.738326][T22736] tmpfs: Bad value for 'mpol' [ 1973.976558][T16152] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1974.089233][T16152] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1974.140638][T16152] usb 3-1: config 0 descriptor?? [ 1974.364387][T16152] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1974.392373][T16152] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1974.439960][T16152] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1974.447173][T16152] usb 3-1: media controller created [ 1974.537077][T16152] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1975.767265][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.046255][T16152] DVB: Unable to find symbol dib7000p_attach() [ 1976.046275][T16152] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1976.432057][T16462] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1976.449352][T16152] rc_core: IR keymap rc-dib0700-rc5 not found [ 1976.449375][T16152] Registered IR keymap rc-empty [ 1976.449720][T16152] dvb-usb: could not initialize remote control. [ 1976.449735][T16152] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1976.631285][T16462] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1976.631410][T16462] usb 9-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 1976.631447][T16462] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1976.648027][T16462] usb 9-1: config 0 descriptor?? [ 1976.656717][ T5881] usb 3-1: USB disconnect, device number 10 [ 1977.210154][T16462] usbhid 9-1:0.0: can't add hid device: -71 [ 1977.258100][ T5881] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1977.259269][T16462] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1977.326875][T16462] usb 9-1: USB disconnect, device number 15 [ 1977.607498][T22777] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4404'. [ 1977.628839][T22777] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4404'. [ 1977.672857][T22777] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4404'. [ 1977.689407][T22777] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4404'. [ 1981.172972][T22803] tmpfs: Bad value for 'mpol' [ 1984.729200][ T5881] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1986.015834][ T5881] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 1986.046739][ T5881] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1986.096836][ T5881] usb 3-1: config 0 has no interface number 0 [ 1986.107027][ T5881] usb 3-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30 [ 1986.146523][ T5881] usb 3-1: config 0 interface 117 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 239 [ 1986.207417][ T5881] usb 3-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46 [ 1986.219493][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1986.284729][ T5881] usb 3-1: Product: syz [ 1986.297517][ T5881] usb 3-1: Manufacturer: syz [ 1986.319351][ T5881] usb 3-1: SerialNumber: syz [ 1986.362594][ T5881] usb 3-1: config 0 descriptor?? [ 1986.699376][ T5881] usb 3-1: can't set config #0, error -71 [ 1986.718132][ T5881] usb 3-1: USB disconnect, device number 11 [ 1989.492559][T22852] tmpfs: Bad value for 'mpol' [ 1990.922964][T22862] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1999.327359][ T5881] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1999.528313][ T5881] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1999.577287][ T5881] usb 6-1: config 0 has no interface number 0 [ 1999.605708][ T5881] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1999.619735][ T5881] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1999.798405][ T5881] usb 6-1: Product: syz [ 1999.803370][ T5881] usb 6-1: Manufacturer: syz [ 1999.807998][ T5881] usb 6-1: SerialNumber: syz [ 1999.815995][ T5881] usb 6-1: config 0 descriptor?? [ 2000.935389][ T5881] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 2001.007461][ T5881] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2001.046913][ T5881] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 2001.064039][ T5881] usb 6-1: media controller created [ 2001.136462][ T5881] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2001.220012][ T5881] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 2001.376684][ T5881] usb 6-1: USB disconnect, device number 9 [ 2004.909243][T19216] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 2005.121541][T19216] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2005.186568][T19216] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2006.054568][T19216] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2006.070227][T19216] usb 6-1: config 0 descriptor?? [ 2006.083267][T19216] pwc: Askey VC010 type 2 USB webcam detected. [ 2006.328618][T22969] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4473'. [ 2006.762855][T19216] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2006.996767][T19216] pwc: recv_control_msg error -32 req 02 val 2700 [ 2007.030323][T22975] tmpfs: Bad value for 'mpol' [ 2007.359920][T19216] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2007.387374][T19216] pwc: recv_control_msg error -32 req 04 val 1000 [ 2007.396786][T19216] pwc: recv_control_msg error -32 req 04 val 1300 [ 2007.416564][T19216] pwc: recv_control_msg error -32 req 04 val 1400 [ 2007.434428][T19216] pwc: recv_control_msg error -32 req 02 val 2000 [ 2007.444859][T19216] pwc: recv_control_msg error -32 req 02 val 2100 [ 2007.459855][T19216] pwc: recv_control_msg error -32 req 04 val 1500 [ 2007.471523][T19216] pwc: recv_control_msg error -32 req 02 val 2500 [ 2007.482328][T19216] pwc: recv_control_msg error -32 req 02 val 2400 [ 2007.505603][T19216] pwc: recv_control_msg error -32 req 02 val 2600 [ 2007.731138][T19216] pwc: recv_control_msg error -71 req 02 val 2800 [ 2007.766243][T19216] pwc: recv_control_msg error -71 req 04 val 1100 [ 2007.966220][T22978] Trying to write to read-only block-device nullb0 [ 2007.991057][T19216] pwc: recv_control_msg error -71 req 04 val 1200 [ 2008.066733][T19216] pwc: Registered as video103. [ 2008.095732][T19216] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input36 [ 2008.155787][T19216] usb 6-1: USB disconnect, device number 10 [ 2008.696280][T22984] afs: Unknown parameter 'fl' [ 2008.820238][T22985] program syz.7.4477 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2010.039944][T22995] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4480'. [ 2012.250613][T22928] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 2012.430316][T22928] usb 9-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 2012.474876][T22928] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2012.509681][T22928] usb 9-1: Product: syz [ 2012.520730][T22928] usb 9-1: Manufacturer: syz [ 2012.540672][T22928] usb 9-1: SerialNumber: syz [ 2012.595641][T22928] usb 9-1: config 0 descriptor?? [ 2012.809107][T23021] tmpfs: Bad value for 'mpol' [ 2013.249906][T22928] usb-storage 9-1:0.0: USB Mass Storage device detected [ 2013.448291][T22928] usb 9-1: USB disconnect, device number 16 [ 2014.736536][T23036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4494'. [ 2024.779258][T20801] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 2024.961444][T20801] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2024.995941][T20801] usb 6-1: config 1 has an invalid interface number: 206 but max is 0 [ 2025.029712][T20801] usb 6-1: config 1 has no interface number 0 [ 2025.066324][T20801] usb 6-1: config 1 interface 206 has no altsetting 0 [ 2025.101953][T20801] usb 6-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=29.cb [ 2025.132124][T20801] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2025.168268][T20801] usb 6-1: Product: syz [ 2025.188299][T20801] usb 6-1: Manufacturer: syz [ 2025.207923][T20801] usb 6-1: SerialNumber: syz [ 2025.489307][T20801] net1080 6-1:1.206: probe with driver net1080 failed with error -22 [ 2025.547852][T20801] usb 6-1: USB disconnect, device number 11 [ 2030.895560][T23146] fuse: Bad value for 'fd' [ 2037.203139][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 2040.159207][T23204] tmpfs: Bad value for 'mpol' [ 2040.350242][T23207] random: crng reseeded on system resumption [ 2040.967686][T23213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4547'. [ 2041.889204][T16152] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 2042.183217][T16152] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2042.245824][T16152] usb 10-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 2042.297320][T23228] afs: Unknown parameter 'fl' [ 2042.312678][T16152] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2042.364358][T16152] usb 10-1: config 0 descriptor?? [ 2042.378359][T23230] program syz.8.4553 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2042.392887][T16152] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 2042.464034][T23233] evm: overlay not supported [ 2043.652390][ T30] audit: type=1326 audit(1759016695.126:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23229 comm="syz.5.4554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10c118eec9 code=0x7fc00000 [ 2043.765123][ T30] audit: type=1326 audit(1759016695.126:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23229 comm="syz.5.4554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f10c118eec9 code=0x7fc00000 [ 2043.813271][ T30] audit: type=1326 audit(1759016695.126:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23229 comm="syz.5.4554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10c118eec9 code=0x7fc00000 [ 2043.835630][ C0] vkms_vblank_simulate: vblank timer overrun [ 2043.862260][ T30] audit: type=1326 audit(1759016695.136:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23229 comm="syz.5.4554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10c118eec9 code=0x7fc00000 [ 2043.884655][ C0] vkms_vblank_simulate: vblank timer overrun [ 2044.008004][ C0] vkms_vblank_simulate: vblank timer overrun [ 2044.319197][ C0] vkms_vblank_simulate: vblank timer overrun [ 2044.367317][ C0] vkms_vblank_simulate: vblank timer overrun [ 2044.435503][ C0] vkms_vblank_simulate: vblank timer overrun [ 2044.549040][ C0] vkms_vblank_simulate: vblank timer overrun [ 2044.678292][ T30] audit: type=1326 audit(1759016695.136:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23229 comm="syz.5.4554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10c118eec9 code=0x7fc00000 [ 2044.700751][ C0] vkms_vblank_simulate: vblank timer overrun [ 2044.775423][T23256] netlink: 'syz.0.4564': attribute type 1 has an invalid length. [ 2044.828349][ T30] audit: type=1326 audit(1759016695.136:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23229 comm="syz.5.4554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10c118eec9 code=0x7fc00000 [ 2044.850796][ C0] vkms_vblank_simulate: vblank timer overrun [ 2044.944917][T16837] usb 10-1: USB disconnect, device number 5 [ 2045.128380][T19873] Bluetooth: hci1: link tx timeout [ 2045.133720][T19873] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 2045.145471][T19873] Bluetooth: hci1: link tx timeout [ 2045.151840][T19873] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 2045.163430][T19873] Bluetooth: hci1: link tx timeout [ 2045.168908][T19873] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 2045.178833][T19873] Bluetooth: hci1: link tx timeout [ 2045.185313][T19873] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 2047.250715][T19873] Bluetooth: hci1: command 0x0406 tx timeout [ 2054.370054][T16152] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 2054.539544][T16152] usb 6-1: Using ep0 maxpacket: 32 [ 2054.547700][T16152] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 2054.565093][T16152] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 2054.616560][T16152] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 2054.659313][T16152] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 2054.720239][T16152] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2054.759393][T16152] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2054.768710][T16152] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2054.797161][T16152] usb 6-1: Product: syz [ 2054.820258][T16152] usb 6-1: Manufacturer: syz [ 2054.853859][T16152] usb 6-1: SerialNumber: syz [ 2054.884090][T16152] usb 6-1: config 0 descriptor?? [ 2054.904593][T16152] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2054.927985][T16152] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2055.625626][T23320] afs: Unknown parameter 'fl' [ 2056.001642][T23323] program syz.2.4583 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2057.322263][ T43] usb 6-1: USB disconnect, device number 12 [ 2057.400793][ T43] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 2061.352142][T23367] veth0_to_bridge: entered promiscuous mode [ 2062.116494][T23360] veth0_to_bridge: left promiscuous mode [ 2063.601179][T23372] afs: Unknown parameter 'fl' [ 2063.845156][T23381] program syz.9.4598 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2070.402824][T23439] comedi comedi0: Minor 3 could not be opened [ 2070.420911][ T43] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 2070.978275][ T43] usb 3-1: device descriptor read/64, error -71 [ 2071.709223][ T43] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 2071.878712][ T43] usb 3-1: device descriptor read/64, error -71 [ 2072.076361][ T43] usb usb3-port1: attempt power cycle [ 2072.539263][ T43] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 2072.763836][ T43] usb 3-1: device descriptor read/8, error -71 [ 2073.039147][ T43] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 2074.315139][ T43] usb 3-1: device not accepting address 15, error -71 [ 2074.390339][ T43] usb usb3-port1: unable to enumerate USB device [ 2074.522437][T22928] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 2074.906303][T22928] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 2074.946749][T22928] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2075.364678][T22928] usb 6-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 2075.416809][T22928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2075.463822][T22928] usb 6-1: config 0 descriptor?? [ 2075.484816][T22928] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 2076.591155][T23472] kexec: Could not allocate control_code_buffer [ 2078.102901][T16837] usb 6-1: USB disconnect, device number 13 [ 2083.210113][T23534] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4648'. [ 2088.027428][T23584] tmpfs: Unknown parameter 'uslqu' [ 2088.295819][T23581] tmpfs: Bad value for 'mpol' [ 2089.479108][ C0] vkms_vblank_simulate: vblank timer overrun [ 2089.513065][ C0] vkms_vblank_simulate: vblank timer overrun [ 2089.603719][ C0] vkms_vblank_simulate: vblank timer overrun [ 2089.746411][ C0] vkms_vblank_simulate: vblank timer overrun [ 2089.780343][ C0] vkms_vblank_simulate: vblank timer overrun [ 2089.814527][ C0] vkms_vblank_simulate: vblank timer overrun [ 2090.435915][T23606] No buffer was provided with the request [ 2094.182169][T16152] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 2094.890116][T16152] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2094.914718][T16152] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2094.939132][T16152] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2095.149495][T23630] sp0: Synchronizing with TNC [ 2095.157129][T16152] usb 8-1: config 0 descriptor?? [ 2095.171637][T16152] pwc: Askey VC010 type 2 USB webcam detected. [ 2095.880335][T16152] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2095.919123][T16152] pwc: recv_control_msg error -32 req 02 val 2700 [ 2095.939396][T16152] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2095.959456][T16152] pwc: recv_control_msg error -32 req 04 val 1000 [ 2095.978045][T16152] pwc: recv_control_msg error -32 req 04 val 1300 [ 2096.169976][T16152] pwc: recv_control_msg error -32 req 04 val 1400 [ 2096.566209][T16152] pwc: recv_control_msg error -32 req 02 val 2000 [ 2096.576677][T16152] pwc: recv_control_msg error -32 req 02 val 2100 [ 2096.586559][T16152] pwc: recv_control_msg error -32 req 04 val 1500 [ 2096.626599][T16152] pwc: recv_control_msg error -32 req 02 val 2500 [ 2096.644198][T16152] pwc: recv_control_msg error -32 req 02 val 2400 [ 2096.667959][T16152] pwc: recv_control_msg error -32 req 02 val 2600 [ 2096.884966][T16152] pwc: recv_control_msg error -71 req 02 val 2800 [ 2097.474826][T16152] pwc: recv_control_msg error -71 req 04 val 1100 [ 2097.523239][T16152] pwc: recv_control_msg error -71 req 04 val 1200 [ 2097.576968][T16152] pwc: Registered as video103. [ 2097.643392][T16152] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input37 [ 2097.777123][T16152] usb 8-1: USB disconnect, device number 33 [ 2098.806776][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 2098.840765][T19216] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 2099.819272][T19216] usb 6-1: Using ep0 maxpacket: 32 [ 2099.828205][T19216] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 2099.845567][T19216] usb 6-1: config 0 has no interface number 0 [ 2100.540579][T19216] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2100.559711][T19216] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2100.659460][T19216] usb 6-1: Product: syz [ 2100.669436][T19216] usb 6-1: Manufacturer: syz [ 2100.679407][T19216] usb 6-1: SerialNumber: syz [ 2100.705524][T19216] usb 6-1: config 0 descriptor?? [ 2100.717192][T19216] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2102.035459][T19216] usb 6-1: qt2_attach - failed to power on unit: -71 [ 2102.035554][T23689] net_ratelimit: 73 callbacks suppressed [ 2102.035571][T23689] openvswitch: netlink: Message has 4 unknown bytes. [ 2102.065362][T19216] quatech2 6-1:0.51: probe with driver quatech2 failed with error -71 [ 2102.251858][T19216] usb 6-1: USB disconnect, device number 14 [ 2102.269077][T16837] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 2102.852162][T16837] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 2102.882332][T16837] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2102.956987][T16837] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2103.002233][T16837] usb 1-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 2103.019592][T16837] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2103.057992][T16837] usb 1-1: config 0 descriptor?? [ 2103.660379][ T5881] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 2103.906925][T16837] sony 0003:054C:024B.000C: unknown main item tag 0x0 [ 2103.920274][T16837] sony 0003:054C:024B.000C: unknown main item tag 0x0 [ 2103.947747][T16837] sony 0003:054C:024B.000C: collection stack underflow [ 2103.998505][T16837] sony 0003:054C:024B.000C: item 0 0 0 12 parsing failed [ 2104.029750][T16837] sony 0003:054C:024B.000C: parse failed [ 2104.035509][T16837] sony 0003:054C:024B.000C: probe with driver sony failed with error -22 [ 2104.081080][ T5881] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2104.092820][T16837] usb 1-1: USB disconnect, device number 39 [ 2104.114392][ T5881] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2104.145277][ T5881] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2104.211499][ T5881] usb 10-1: config 0 descriptor?? [ 2105.175749][ T5881] pwc: Askey VC010 type 2 USB webcam detected. [ 2106.854188][ T5881] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2106.892998][ T5881] pwc: recv_control_msg error -32 req 02 val 2700 [ 2106.931498][ T5881] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2106.994984][ T5881] pwc: recv_control_msg error -32 req 04 val 1000 [ 2107.123581][T23733] comedi comedi0: Minor 3 could not be opened [ 2107.519085][ T5881] pwc: recv_control_msg error -32 req 04 val 1300 [ 2107.642877][ T5881] pwc: recv_control_msg error -32 req 04 val 1400 [ 2107.706188][ T5881] pwc: recv_control_msg error -32 req 02 val 2000 [ 2107.730593][ T5881] pwc: recv_control_msg error -32 req 02 val 2100 [ 2107.762343][ T5881] pwc: recv_control_msg error -32 req 04 val 1500 [ 2107.843631][ T5881] pwc: recv_control_msg error -32 req 02 val 2500 [ 2107.866429][ T5881] pwc: recv_control_msg error -32 req 02 val 2400 [ 2108.264771][ T5881] pwc: recv_control_msg error -32 req 02 val 2600 [ 2108.849145][ T5881] pwc: recv_control_msg error -71 req 02 val 2800 [ 2108.868913][ T5881] pwc: recv_control_msg error -71 req 04 val 1100 [ 2108.879770][ T5881] pwc: recv_control_msg error -71 req 04 val 1200 [ 2109.709438][ T5881] pwc: Registered as video103. [ 2109.774057][ T5881] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input38 [ 2110.704463][ T5881] usb 10-1: USB disconnect, device number 6 [ 2113.438260][T23781] comedi comedi0: Minor 3 could not be opened [ 2115.010119][T23783] tmpfs: Bad value for 'mpol' [ 2119.862693][T23824] netlink: 4388 bytes leftover after parsing attributes in process `syz.9.4737'. [ 2121.410855][T23842] ------------[ cut here ]------------ [ 2121.416351][T23842] DEBUG_LOCKS_WARN_ON(1) [ 2121.416526][T23842] WARNING: CPU: 0 PID: 23842 at kernel/locking/lockdep.c:238 __lock_acquire+0x379/0xd20 [ 2121.430458][T23842] Modules linked in: [ 2121.434338][T23842] CPU: 0 UID: 0 PID: 23842 Comm: syz.7.4743 Not tainted syzkaller #0 PREEMPT(full) [ 2121.443689][T23842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2121.453729][T23842] RIP: 0010:__lock_acquire+0x379/0xd20 [ 2121.459184][T23842] Code: eb 33 90 e8 99 c9 27 03 85 c0 74 22 83 3d 72 66 06 0e 00 75 19 90 48 c7 c7 12 8b ba 8d 48 c7 c6 20 d8 a9 8d e8 58 e8 e5 ff 90 <0f> 0b 90 90 90 31 c0 48 8b 3c 24 0f b6 98 c4 00 00 00 41 8b 46 20 [ 2121.478798][T23842] RSP: 0018:ffffc900038cf890 EFLAGS: 00010046 [ 2121.484873][T23842] RAX: 316d2269819da300 RBX: ffffffff8b36d828 RCX: 0000000000080000 [ 2121.492833][T23842] RDX: ffffc90014b99000 RSI: 0000000000003d2c RDI: 0000000000003d2d [ 2121.500787][T23842] RBP: 0000000000001ff7 R08: ffff8880b8624253 R09: 1ffff110170c484a [ 2121.508743][T23842] R10: dffffc0000000000 R11: ffffed10170c484b R12: 0000000000000000 [ 2121.516700][T23842] R13: 0000000000000000 R14: ffff888035a42940 R15: ffff888035a428f0 [ 2121.524659][T23842] FS: 00007f34929a76c0(0000) GS:ffff888125c12000(0000) knlGS:0000000000000000 [ 2121.533571][T23842] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2121.540133][T23842] CR2: 0000001b34d1fff8 CR3: 000000007c951000 CR4: 0000000000350ef0 [ 2121.548088][T23842] Call Trace: [ 2121.551349][T23842] [ 2121.554264][T23842] ? dns_resolver_preparse+0xb8/0xdc0 [ 2121.559620][T23842] ? kernfs_remove_by_name_ns+0x3d/0x130 [ 2121.565258][T23842] lock_acquire+0x120/0x360 [ 2121.569770][T23842] ? kernfs_remove_by_name_ns+0x3d/0x130 [ 2121.575407][T23842] ? dns_resolver_preparse+0x48/0xdc0 [ 2121.580776][T23842] down_write+0x96/0x1f0 [ 2121.585010][T23842] ? kernfs_remove_by_name_ns+0x3d/0x130 [ 2121.590640][T23842] ? __pfx_down_write+0x10/0x10 [ 2121.595512][T23842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2121.601162][T23842] ? __rcu_read_unlock+0x84/0xe0 [ 2121.606124][T23842] ? kernfs_root+0x1c/0x230 [ 2121.610626][T23842] ? __pfx_net_ctl_permissions+0x10/0x10 [ 2121.616271][T23842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2121.621909][T23842] ? kernfs_root+0x1ea/0x230 [ 2121.626492][T23842] ? dns_resolver_preparse+0x48/0xdc0 [ 2121.631856][T23842] kernfs_remove_by_name_ns+0x3d/0x130 [ 2121.637322][T23842] bus_remove_driver+0x198/0x2f0 [ 2121.642256][T23842] comedi_device_detach_locked+0x178/0x750 [ 2121.648083][T23842] comedi_unlocked_ioctl+0xcde/0x1020 [ 2121.653463][T23842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2121.659096][T23842] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 2121.664916][T23842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2121.670545][T23842] ? trace_irq_disable+0x37/0x110 [ 2121.675576][T23842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2121.681203][T23842] ? security_file_ioctl+0x26e/0x2d0 [ 2121.686489][T23842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2121.692114][T23842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2121.697742][T23842] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 2121.703550][T23842] __se_sys_ioctl+0xfc/0x170 [ 2121.708135][T23842] do_syscall_64+0xfa/0x3b0 [ 2121.712630][T23842] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2121.718695][T23842] ? asm_sysvec_call_function_single+0x1a/0x20 [ 2121.724856][T23842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2121.730744][T23842] RIP: 0033:0x7f3491b8eec9 [ 2121.735146][T23842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2121.754749][T23842] RSP: 002b:00007f34929a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2121.763162][T23842] RAX: ffffffffffffffda RBX: 00007f3491de6090 RCX: 00007f3491b8eec9 [ 2121.771126][T23842] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000006 [ 2121.779092][T23842] RBP: 00007f3491c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 2121.787054][T23842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2121.795013][T23842] R13: 00007f3491de6128 R14: 00007f3491de6090 R15: 00007ffe28a927a8 [ 2121.802985][T23842] [ 2121.805994][T23842] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2121.813264][T23842] CPU: 0 UID: 0 PID: 23842 Comm: syz.7.4743 Not tainted syzkaller #0 PREEMPT(full) [ 2121.822631][T23842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2121.832685][T23842] Call Trace: [ 2121.835956][T23842] [ 2121.838873][T23842] dump_stack_lvl+0x99/0x250 [ 2121.843493][T23842] ? __asan_memcpy+0x40/0x70 [ 2121.848087][T23842] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2121.853293][T23842] ? __pfx__printk+0x10/0x10 [ 2121.857895][T23842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2121.863531][T23842] vpanic+0x281/0x750 [ 2121.867516][T23842] ? __pfx__printk+0x10/0x10 [ 2121.872116][T23842] ? __pfx_vpanic+0x10/0x10 [ 2121.876626][T23842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2121.882265][T23842] ? is_bpf_text_address+0x292/0x2b0 [ 2121.887562][T23842] panic+0xb9/0xc0 [ 2121.891280][T23842] ? __pfx_panic+0x10/0x10 [ 2121.895695][T23842] __warn+0x31b/0x4b0 [ 2121.899673][T23842] ? __lock_acquire+0x379/0xd20 [ 2121.904528][T23842] ? __lock_acquire+0x379/0xd20 [ 2121.909405][T23842] report_bug+0x2be/0x4f0 [ 2121.913728][T23842] ? __lock_acquire+0x379/0xd20 [ 2121.918574][T23842] ? __lock_acquire+0x379/0xd20 [ 2121.923429][T23842] ? __lock_acquire+0x37b/0xd20 [ 2121.928290][T23842] handle_bug+0x84/0x160 [ 2121.932534][T23842] exc_invalid_op+0x1a/0x50 [ 2121.937040][T23842] asm_exc_invalid_op+0x1a/0x20 [ 2121.941883][T23842] RIP: 0010:__lock_acquire+0x379/0xd20 [ 2121.947345][T23842] Code: eb 33 90 e8 99 c9 27 03 85 c0 74 22 83 3d 72 66 06 0e 00 75 19 90 48 c7 c7 12 8b ba 8d 48 c7 c6 20 d8 a9 8d e8 58 e8 e5 ff 90 <0f> 0b 90 90 90 31 c0 48 8b 3c 24 0f b6 98 c4 00 00 00 41 8b 46 20 [ 2121.966945][T23842] RSP: 0018:ffffc900038cf890 EFLAGS: 00010046 [ 2121.973011][T23842] RAX: 316d2269819da300 RBX: ffffffff8b36d828 RCX: 0000000000080000 [ 2121.980975][T23842] RDX: ffffc90014b99000 RSI: 0000000000003d2c RDI: 0000000000003d2d [ 2121.988938][T23842] RBP: 0000000000001ff7 R08: ffff8880b8624253 R09: 1ffff110170c484a [ 2121.996914][T23842] R10: dffffc0000000000 R11: ffffed10170c484b R12: 0000000000000000 [ 2122.004878][T23842] R13: 0000000000000000 R14: ffff888035a42940 R15: ffff888035a428f0 [ 2122.012849][T23842] ? dns_resolver_preparse+0xb8/0xdc0 [ 2122.018235][T23842] ? dns_resolver_preparse+0xb8/0xdc0 [ 2122.023606][T23842] ? kernfs_remove_by_name_ns+0x3d/0x130 [ 2122.029240][T23842] lock_acquire+0x120/0x360 [ 2122.033751][T23842] ? kernfs_remove_by_name_ns+0x3d/0x130 [ 2122.039389][T23842] ? dns_resolver_preparse+0x48/0xdc0 [ 2122.044752][T23842] down_write+0x96/0x1f0 [ 2122.048996][T23842] ? kernfs_remove_by_name_ns+0x3d/0x130 [ 2122.054636][T23842] ? __pfx_down_write+0x10/0x10 [ 2122.059480][T23842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2122.065100][T23842] ? __rcu_read_unlock+0x84/0xe0 [ 2122.070030][T23842] ? kernfs_root+0x1c/0x230 [ 2122.074525][T23842] ? __pfx_net_ctl_permissions+0x10/0x10 [ 2122.080138][T23842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2122.085794][T23842] ? kernfs_root+0x1ea/0x230 [ 2122.090369][T23842] ? dns_resolver_preparse+0x48/0xdc0 [ 2122.095725][T23842] kernfs_remove_by_name_ns+0x3d/0x130 [ 2122.101178][T23842] bus_remove_driver+0x198/0x2f0 [ 2122.106107][T23842] comedi_device_detach_locked+0x178/0x750 [ 2122.111917][T23842] comedi_unlocked_ioctl+0xcde/0x1020 [ 2122.117286][T23842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2122.122917][T23842] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 2122.128739][T23842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2122.134362][T23842] ? trace_irq_disable+0x37/0x110 [ 2122.139395][T23842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2122.145020][T23842] ? security_file_ioctl+0x26e/0x2d0 [ 2122.150303][T23842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2122.155923][T23842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2122.161543][T23842] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 2122.167341][T23842] __se_sys_ioctl+0xfc/0x170 [ 2122.171922][T23842] do_syscall_64+0xfa/0x3b0 [ 2122.176419][T23842] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2122.182471][T23842] ? asm_sysvec_call_function_single+0x1a/0x20 [ 2122.188618][T23842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2122.194500][T23842] RIP: 0033:0x7f3491b8eec9 [ 2122.198899][T23842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2122.218499][T23842] RSP: 002b:00007f34929a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2122.226918][T23842] RAX: ffffffffffffffda RBX: 00007f3491de6090 RCX: 00007f3491b8eec9 [ 2122.234889][T23842] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000006 [ 2122.242858][T23842] RBP: 00007f3491c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 2122.250824][T23842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2122.258788][T23842] R13: 00007f3491de6128 R14: 00007f3491de6090 R15: 00007ffe28a927a8 [ 2122.266763][T23842] [ 2122.270049][T23842] Kernel Offset: disabled [ 2122.274363][T23842] Rebooting in 86400 seconds..