last executing test programs: 14m44.938958007s ago: executing program 0 (id=1): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x122, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000340)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x31}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) syz_emit_ethernet(0x22, &(0x7f0000000440)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr=0x64010102, @remote}}}}}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000004c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000005c0), 0x400000000000041, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) sched_setaffinity(r0, 0x8, &(0x7f0000000600)=0x2) recvmmsg(r1, &(0x7f0000000640), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000680)={0x0, 'erspan0\x00', {0x1}, 0x26}) ioctl$UBLK_U_CMD_STOP_DEV(0xffffffffffffffff, 0xc0207507, &(0x7f00000006c0)) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) symlink(0x0, &(0x7f00000007c0)='./file0/file0\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000800)='status\x00') rename(&(0x7f0000000840)='./file0\x00', 0x0) r3 = syz_open_dev$sg(&(0x7f00000008c0), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r3, 0x2284, &(0x7f0000000900)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x1f, 0x0, 0x0, &(0x7f0000000a00)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x11}, 0x94) 14m43.42194056s ago: executing program 0 (id=10): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x4000000000000001) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f00000005c0)="306663353a313232373a3f7092c0f0bc085a193376cf620afaf6379a248d1d6534058f1095109d", 0x27) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x29, 0x5, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000002100), 0x804000, &(0x7f00000002c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f000000ac40)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000400)={0x50, 0x0, r6, {0x7, 0x29, 0x9, 0xffffffff9080e5c4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$incfs(r3, &(0x7f0000000480)='.pending_reads\x00', 0x80, 0x151) mount$pvfs2(&(0x7f0000000040), &(0x7f0000000080)='./file0/file1\x00', &(0x7f0000000300), 0x2950008, &(0x7f0000000340)={[], [{@permit_directio}, {@smackfshat={'smackfshat', 0x3d, 'workdir'}}, {@subj_user={'subj_user', 0x3d, 'workdir'}}, {@uid_lt={'uid<', r7}}, {@dont_measure}, {@obj_user={'obj_user', 0x3d, '#-#){\'${}'}}]}) write(r4, 0x0, 0x0) 14m41.65358584s ago: executing program 0 (id=11): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = dup(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000bc0)={{{@in6=@dev, @in6=@private1}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f0000000cc0)=0xfffffffffffffdb2) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, 0x0, 0x40) chdir(&(0x7f0000000140)='./file0\x00') r5 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r5, 0x0, 0x0, 0x1000f4) sendfile(r5, r5, 0x0, 0x40000000800) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r6, 0x100000000000011, 0x2000, 0x2f93) 14m37.829898684s ago: executing program 0 (id=15): prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100060000000000002b00000008000300", @ANYRES32=r2, @ANYBLOB="040046000a0034000101010101010000080026006c0900000800270001000000300051"], 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r3 = getpgrp(0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x50, 0x0, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000380)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r6, &(0x7f0000002240)=""/102392, 0x18ff8) r7 = fcntl$getown(r6, 0x9) ptrace$cont(0x1f, r7, 0x3, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f000001b280)='./tracefs_dir\x00', 0x1f7) mount(0x0, &(0x7f000001b2c0)='./tracefs_dir\x00', &(0x7f000001b300)='tracefs\x00', 0x0, 0x0) acct(&(0x7f000001b340)='./tracefs_dir/free_buffer\x00') socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) 14m25.642428268s ago: executing program 0 (id=21): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000300)=0x1, 0xfffa) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000340)={0x12}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) connect$inet(r3, &(0x7f00000003c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000400)=0x8, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001200)=""/4112, 0x1010}], 0x1, 0x800, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42003, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x2000000) setns(0xc9, 0x0) 14m8.576615991s ago: executing program 32 (id=21): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000300)=0x1, 0xfffa) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000340)={0x12}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) connect$inet(r3, &(0x7f00000003c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000400)=0x8, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001200)=""/4112, 0x1010}], 0x1, 0x800, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42003, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x2000000) setns(0xc9, 0x0) 13m24.428373248s ago: executing program 3 (id=74): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) read(r0, &(0x7f0000000080)=""/220, 0xdc) connect$bt_rfcomm(r0, &(0x7f0000000180)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0x11) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000002c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000300), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000002c0)={0x3, &(0x7f0000000300)=[{0x20, 0x2, 0x40, 0xfffff034}, {0x20, 0x0, 0x8, 0xfffff010}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) syz_emit_ethernet(0x56, &(0x7f0000000580)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100200086dd60f70000001c2c00fe8000000000000000000000000000aaff0200000000000000000000000000013a00000000000000870090780f00"/85], 0x0) r5 = syz_open_dev$video(&(0x7f0000000380), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000003c0)={0x1, @pix={0x0, 0x0, 0x50424752, 0x0, 0x0, 0x0, 0x1, 0xfeedcafe, 0x3, 0x0, 0x0, 0x6}}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0xff00) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, 0xffffffffffffffff, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f0000000500), 0x4) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$dvb_frontend(0x0, 0x20ffffffff, 0x8a543) 13m21.920634969s ago: executing program 3 (id=77): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000980)={0x1, {{0x2, 0x0, @local}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000a40)={@multicast1, @local, @multicast1}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000b40)='net/mcfilter\x00') preadv(r1, &(0x7f0000000b80)=[{&(0x7f0000000bc0)=""/105, 0x69}], 0x1, 0x2000000, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000180)=0x7) r3 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) socket(0x2, 0x80805, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000e40)='./nfsd\x00', &(0x7f0000000e80)='nfsd\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./nfsd/portlist\x00', 0x1, 0x0) write(r4, &(0x7f0000000f00)="330fbaedfa116f5c7402395a69875948914b7fc7fc1ca16b50561004d75e32fb38f33c9bc6ffa993a2576dcf90dd2b17c93c", 0x32) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000001080)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000001100), 0x651, 0x0) recvmmsg(r6, &(0x7f0000001140), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001180)=0x6) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f00000011c0), 0x140, 0x0) ioctl$RTC_SET_TIME(r8, 0x4024700a, &(0x7f0000001200)={0x7, 0x1c, 0x16, 0x1c, 0x8, 0x47, 0x5, 0x10b}) 13m11.759286214s ago: executing program 3 (id=84): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000008, 0x80000008b}, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$setpipe(0xffffffffffffffff, 0x8, 0x80000000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r3, 0x0, 0x0, 0x46, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f0000000100)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) listen(r4, 0x5) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_ecred_conn_req={{0x17, 0x42, 0xa}, {0x80, 0x8200, 0x200, 0xa, [0x40]}}}}, 0x17) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmsg$TEAM_CMD_OPTIONS_GET(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) prlimit64(r0, 0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000800) 13m8.467816187s ago: executing program 3 (id=86): openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/bus/input/handlers\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00') accept4(r2, 0x0, 0x0, 0x80000) syz_open_dev$video(&(0x7f00000004c0), 0x81, 0xa082) lsm_set_self_attr(0x65, &(0x7f0000007000)={0x68, 0xffffffffffffffff, 0x32, 0x12, "719253c233c813bb57cc2450c9c8b97d24ec"}, 0x32, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}}) syz_emit_ethernet(0x8a, &(0x7f0000000000)={@random="1b72e265b25f", @random="275bf3497066", @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "104012", 0x4c, 0x2f, 0x0, @private0={0xfc, 0x0, '\x00', 0xfc}, @mcast2, {[@fragment={0x88, 0x0, 0xc, 0x1, 0x0, 0x1, 0x64}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x2, {0x800, 0x4}}}}}}}}}, 0x0) 13m5.556923566s ago: executing program 3 (id=89): mkdirat(0xffffffffffffff9c, 0x0, 0x1df) mount(0x0, &(0x7f0000000880)='./proc\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f00000008c0)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='myproc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='myproc/iomem\x00', 0x0, 0x0) syz_clone3(&(0x7f00000009c0)={0x4284000, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, {r0}}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000a80)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000ac0)='./config\x00', &(0x7f0000000b00)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000b40)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000b80)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000bc0)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0) write(r1, &(0x7f0000000c00)='Mid', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000c40)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0) write(r2, &(0x7f0000002280), 0x0) write(0xffffffffffffffff, &(0x7f0000002300)='2', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000002380)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000023c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000002400)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000002440)='dummy_udc.0\n', 0xc) syz_open_procfs(0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x11, 0xffffffffffffffff, 0x1000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000024c0)={&(0x7f0000002500)=ANY=[@ANYBLOB="9feb010018000000000000001800000006a1d8ab3600000000"], 0x0, 0x32, 0x0, 0x1}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002540)={r3, 0x0, 0x0, 0x55, 0x0, &(0x7f00000025c0)=""/85, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x50) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000002740)={0xa, 0x0, 0x10000004, @rand_addr=' \x01\x00', 0x1}, 0x1c) write$binfmt_script(r4, &(0x7f0000002780), 0x28) mknod$loop(&(0x7f00000027c0)='./file0\x00', 0x6000, 0x0) 13m2.468965388s ago: executing program 3 (id=94): openat$tun(0xffffffffffffff9c, 0x0, 0x3, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, &(0x7f0000001900), &(0x7f0000000140)=0x80) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x166}]}}}]}]}], {0x14}}, 0xd4}}, 0x0) sendto$inet(r3, 0x0, 0x0, 0x10008085, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r5, &(0x7f0000002540)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x8140) setsockopt$inet6_udp_int(r5, 0x11, 0x1, &(0x7f0000001280), 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x72bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route_sched(r0, 0x0, 0x80) syz_open_dev$video4linux(&(0x7f0000000040), 0x1, 0x80000) socket$kcm(0xf, 0x3, 0x2) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d05, 0x0, 0x390}]}) r7 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r2, 0xc038943b, &(0x7f00000003c0)={0x3, 0x8, '\x00', 0x1, &(0x7f0000000000)=[0x0]}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) getpid() 12m47.332722651s ago: executing program 33 (id=94): openat$tun(0xffffffffffffff9c, 0x0, 0x3, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, &(0x7f0000001900), &(0x7f0000000140)=0x80) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x166}]}}}]}]}], {0x14}}, 0xd4}}, 0x0) sendto$inet(r3, 0x0, 0x0, 0x10008085, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r5, &(0x7f0000002540)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x8140) setsockopt$inet6_udp_int(r5, 0x11, 0x1, &(0x7f0000001280), 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x72bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route_sched(r0, 0x0, 0x80) syz_open_dev$video4linux(&(0x7f0000000040), 0x1, 0x80000) socket$kcm(0xf, 0x3, 0x2) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d05, 0x0, 0x390}]}) r7 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r2, 0xc038943b, &(0x7f00000003c0)={0x3, 0x8, '\x00', 0x1, &(0x7f0000000000)=[0x0]}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) getpid() 12m32.307178015s ago: executing program 1 (id=116): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x28000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff7ffc}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3, 0x401d031, 0xffffffffffffffff, 0x0) inotify_init() r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000000c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0xfffffffffffffd8d) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) dup(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r4, 0x407, 0x100004) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2f, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x2, @mcast2, 0x1}}, {{0xa, 0x4e23, 0x7fff, @rand_addr=' \x01\x00', 0x8}}}, 0x104) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r6, 0x7003) 12m30.684809766s ago: executing program 1 (id=117): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeec, 0x4010, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) getpgrp(0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r2, &(0x7f0000000240)=""/102392, 0x18ff8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000019240)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x3, 0x1}, 0x20) connect$inet6(0xffffffffffffffff, &(0x7f00000192c0)={0xa, 0x0, 0x380000, @loopback}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000019300)={@loopback, 0x800, 0x1}, 0x20) keyctl$instantiate(0xc, 0x0, &(0x7f0000019340)=ANY=[@ANYBLOB='new default user:syz 00'], 0x2a, 0x0) pipe(&(0x7f0000019380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000193c0)=[{&(0x7f0000019400)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000019440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x25a5, 0x0) add_key(&(0x7f0000019480)='encrypted\x00', &(0x7f00000194c0), &(0x7f0000019500), 0x0, 0xfffffffffffffffe) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, 0x0) 12m28.906509885s ago: executing program 1 (id=119): openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/bus/input/handlers\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00') syz_open_dev$video(&(0x7f00000004c0), 0x81, 0xa082) lsm_set_self_attr(0x65, &(0x7f0000007000)={0x68, 0xffffffffffffffff, 0x32, 0x12, "719253c233c813bb57cc2450c9c8b97d24ec"}, 0x32, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000000)={@random="1b72e265b25f", @random="275bf3497066", @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "104012", 0x4c, 0x2f, 0x0, @private0={0xfc, 0x0, '\x00', 0xfc}, @mcast2, {[@fragment={0x88, 0x0, 0xc, 0x1, 0x0, 0x1, 0x64}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x2, {0x800, 0x4}}}}}}}}}, 0x0) 12m25.515485364s ago: executing program 1 (id=121): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@gettfilter={0x2c, 0x2e, 0x1, 0x70bd2c, 0x25dfdafc, {0x0, 0x0, 0x0, 0x0, {0x4, 0xffff}, {0x2, 0xfff1}, {0x0, 0x6}}, [{0x8, 0xb, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x24041080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x141102) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="94", 0xf000}, {0x0}], 0x2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000002c0), &(0x7f0000000300)=0x8) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/ip_vs_stats\x00') r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f00000003c0)={0x10004, 0x0, &(0x7f00003fb000/0x4000)=nil}) dup(r5) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001800)="d8000000100081046881f782db44b904021d080b3f000000e8fe55a11800150006001400000000120800040043000000a80016000a3f014006001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e02360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e8a9b", 0xd8}], 0x1}, 0x0) 12m22.122597414s ago: executing program 1 (id=122): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000940)={0x2, 0x1, 0x1, 0x0, 0x55}) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000000500)=[{&(0x7f0000000540)=""/156, 0x9c}], 0x1, &(0x7f0000000600)=[{&(0x7f0000000640)=""/116, 0x20001c34}], 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="54000000020605000000000000000000000000000c00078008001abb21ebf085d857620840000000810500010006000000050005000200000005000400020000000900020073797a31000000000d006a4a2caae368463d567bf7ac7503006c6973743a85657400000000baead6557ec9b4f559ff99c1dd939430ecd1fc311683d6b81a3d7b4c3a15bb76aab7963e279e3c6d6c277816b645b3c97cb6e06a78645410a2c57c6f59ea1d3fff2a3cfd0709d135b6f1dd5001df81670bcce94859"], 0x54}}, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x1, @tid=r1}, 0x0) r3 = openat$drirender128(0xffffff9c, &(0x7f0000000380), 0x400000, 0x0) ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(r3, 0xc0386447, &(0x7f00000004c0)={{0x8, 0x0, &(0x7f0000000480)}, 0x9, 0xd8, 0x4, 0x2, 0x0, 0x2, 0x100000001, 0x46c2}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000000c0)=@userptr={0x0, 0x1, 0x4, 0x40, 0x0, {0x77359400}, {0x3, 0x1, 0x0, 0x0, 0x0, 0x0, '#\x00'}, 0x0, 0x2, {0x0}, 0x0, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000140)=@mmap={0x0, 0x1, 0x4, 0x100004, 0x0, {0x77359400}, {0x7, 0xc, 0x0, 0x0, 0x0, 0x0, "1000"}}) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f0000000300)={r5, r6+10000000}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x40042, 0xcc) r8 = syz_io_uring_setup(0x5747, &(0x7f0000000780)={0x0, 0x3b40, 0x400, 0xffffffff, 0x2b7, 0x0, r7}, &(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)) mount$9p_fd(0x0, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900), 0x100884, &(0x7f0000000cc0)=ANY=[@ANYBLOB="74720c633044b67d616e733d66070047f05b614297765dc9362477ec2403ac52cdc88aed040000000000000003e51ebe112f1ffb49cd7daf14c62c00c356ee5fcffb1d4801", @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) ioctl$KVM_GET_IRQCHIP(r7, 0xc208ae62, &(0x7f0000000980)={0x2, 0x0, @pic={0x5, 0xc7, 0xe, 0x8, 0x10, 0x81, 0xa, 0xe, 0x4, 0xfc, 0x5, 0x9, 0x4, 0x0, 0x2, 0x3}}) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x101c42, 0x0) cachestat(r4, &(0x7f00000006c0)={0x2, 0x20}, &(0x7f0000000700), 0x0) r9 = gettid() timer_create(0x1, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000000400)=0x0) timer_settime(r10, 0x1, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) r11 = shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_LOCK(r11, 0xb) ppoll(&(0x7f00000001c0)=[{r0, 0x1}], 0x1, 0x0, 0x0, 0x0) 12m18.082386832s ago: executing program 1 (id=124): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e22, @dev}, 0x10, 0x0}, 0x400c080) sendmsg$sock(r2, &(0x7f00000001c0)={&(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x7ff, @local, 0x3, 0x2}, 0x80, 0x0}, 0x4000000) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x2) r4 = socket$key(0xf, 0x3, 0x2) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_TIOCINQ(r5, 0x541b, 0x0) write$tcp_congestion(r5, 0x0, 0x0) sendmsg$key(r4, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0xffd8) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) sendfile(r6, r6, 0x0, 0x4) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x20, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="06ac0f00"}, @typed={0x4, 0x1e}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x4) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r9, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000370404000000000000", @ANYRES32, @ANYBLOB="8304050000000000380012800b000100697036746e6c000028000280"], 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[], 0x38}}, 0x0) poll(&(0x7f0000000380)=[{r10, 0x10}], 0x1, 0x5) 12m2.195797291s ago: executing program 34 (id=124): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e22, @dev}, 0x10, 0x0}, 0x400c080) sendmsg$sock(r2, &(0x7f00000001c0)={&(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x7ff, @local, 0x3, 0x2}, 0x80, 0x0}, 0x4000000) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x2) r4 = socket$key(0xf, 0x3, 0x2) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_TIOCINQ(r5, 0x541b, 0x0) write$tcp_congestion(r5, 0x0, 0x0) sendmsg$key(r4, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0xffd8) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) sendfile(r6, r6, 0x0, 0x4) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x20, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="06ac0f00"}, @typed={0x4, 0x1e}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x4) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r9, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000370404000000000000", @ANYRES32, @ANYBLOB="8304050000000000380012800b000100697036746e6c000028000280"], 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[], 0x38}}, 0x0) poll(&(0x7f0000000380)=[{r10, 0x10}], 0x1, 0x5) 2m59.479537067s ago: executing program 7 (id=1026): socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) io_uring_register$IORING_REGISTER_QUERY(0xffffffffffffffff, 0x23, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) openat$dir(0xffffffffffffff9c, 0x0, 0x6ca283, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) request_key(&(0x7f00000000c0)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)='ntfs3\x00', r1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa41080045c50030006800000901907864010102ac1414aa0b01907800000000451c000400680002098400810000000064010101fe37324f83361b12acbea555bd0e8731b01b73fe6a3300d1f081b7946053a59f52a678357d14b51f"], 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000300), 0x0, 0x47ecf) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) file_getattr(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', &(0x7f00000004c0), 0x18, 0x100) socket$igmp(0x2, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./security/apparmor/.replace\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)="04080076657273696f6e00020548000004080070726f66696c650007050400666f6f00040600666c616773000702000000000200000000020000000008020000000002000000000200000000020000000004", 0x6a) 2m57.87397751s ago: executing program 7 (id=1034): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x5a}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x17}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x9c}}, 0x4) 2m55.513396448s ago: executing program 7 (id=1040): syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x802) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f00000005c0)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 2m54.97759159s ago: executing program 7 (id=1042): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000002c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2m50.623070418s ago: executing program 7 (id=1048): mkdirat(0xffffffffffffff9c, &(0x7f0000001480)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./sys\x00', &(0x7f0000001540)='sysfs\x00', 0x0, 0x0) readlinkat(0xffffffffffffff9c, &(0x7f0000001580)='./sys/bus/virtio/devices/virtio0\x00', &(0x7f00000015c0)=""/256, 0x100) 2m50.188035343s ago: executing program 7 (id=1053): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x183042, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000740)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x8800, 0x0, 0x0, {0x0, {'syz', 0x0, '3\x00'}, @uuid={'CRP-syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000880)={0x4, 0x0, 0x0, 0x1a8, 0x138, 0x1, 0x0, 0xa5e11, 0x0, 0x0, @by_dev={r1}, [@writecache={0x0, 0x3880, 0x0, 0x70, 'writecache\x00', {0x73, 0x20, @ram_num={'1:', 0x1}, 0x20, @ram_num={'1:', 0x0}, 0x20, '4096', 0x20, '2 start_sector 8'}}]}) 2m33.086623669s ago: executing program 35 (id=1053): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x183042, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000740)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x8800, 0x0, 0x0, {0x0, {'syz', 0x0, '3\x00'}, @uuid={'CRP-syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000880)={0x4, 0x0, 0x0, 0x1a8, 0x138, 0x1, 0x0, 0xa5e11, 0x0, 0x0, @by_dev={r1}, [@writecache={0x0, 0x3880, 0x0, 0x70, 'writecache\x00', {0x73, 0x20, @ram_num={'1:', 0x1}, 0x20, @ram_num={'1:', 0x0}, 0x20, '4096', 0x20, '2 start_sector 8'}}]}) 2m24.797422494s ago: executing program 4 (id=1117): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="38000000240001040100000000000000000000000100000000000100ffffffff0000000008000100657473000c0002800500010010000000", 0x38) write(r0, &(0x7f0000000140)="38000000240001040600000000000000000000000100000000000600050001000000000008000100657473000c0002800500010010000000", 0x38) 2m22.574708956s ago: executing program 4 (id=1119): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000280)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000580), 0x12) 2m22.040570105s ago: executing program 4 (id=1121): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x20a02, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() socket$kcm(0x2, 0x3, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000002540)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000025c0), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000002600), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000002640)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000002680)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) sendto$inet(r4, &(0x7f00000026c0), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000002740)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000002780)=0x9) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1, 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 2m17.528428166s ago: executing program 4 (id=1127): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CAP_X86_DISABLE_EXITS(r2, 0x4068aea3, &(0x7f00000002c0)={0x8f, 0x0, 0x10000000}) 2m17.258561069s ago: executing program 4 (id=1129): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/devices/system/clockevents/clockevent1/unbind_device\x00', 0x1, 0x0) write$FUSE_STATFS(r0, &(0x7f00000024c0)={0x60, 0x0, 0x0, {{0x5, 0x6, 0x1, 0x8, 0x100, 0x2, 0x1, 0x43ea}}}, 0x60) 2m16.321813957s ago: executing program 4 (id=1132): mknodat$md(0xffffffffffffff9c, &(0x7f0000000000)='./md0\x00', 0x6180, 0x0) r0 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000040)='./md0\x00', 0x2, 0x0) ioctl$SET_ARRAY_INFO(r0, 0x40480923, 0x0) openat$md_node(0xffffffffffffff9c, &(0x7f0000000080)='./md0\x00', 0x4000, 0x0) 1m59.583362015s ago: executing program 36 (id=1132): mknodat$md(0xffffffffffffff9c, &(0x7f0000000000)='./md0\x00', 0x6180, 0x0) r0 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000040)='./md0\x00', 0x2, 0x0) ioctl$SET_ARRAY_INFO(r0, 0x40480923, 0x0) openat$md_node(0xffffffffffffff9c, &(0x7f0000000080)='./md0\x00', 0x4000, 0x0) 58.8922734s ago: executing program 6 (id=1215): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) 56.166300591s ago: executing program 6 (id=1216): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1b96, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x24, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x53, 0x3e, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xfc, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1f4750895ab09308102c0c0"], 0x0}, 0x0) syz_open_dev$evdev(&(0x7f0000000100), 0x4, 0xac502) 51.769825319s ago: executing program 6 (id=1221): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000000c0)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc0145b0d, &(0x7f0000000180)={0x1, 0xffffffff, 0x40005, 0x1, 0x9}) 47.14113153s ago: executing program 6 (id=1226): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001300), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001440)={0x30, r1, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_NOLEARN={0x5, 0x1e, 0x1}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40014}, 0x20004000) 45.599056625s ago: executing program 6 (id=1230): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c0000001000010027bd700403dcdf2500000000", @ANYRES32=r2, @ANYBLOB="30ce0600016803004c001280110001006272696467655f736c617665000000003400058005000900000000000500060001000010050007"], 0x6c}, 0x1, 0x0, 0x0, 0x400c080}, 0x8002) 41.501447782s ago: executing program 6 (id=1235): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) dup(0xffffffffffffffff) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0xc, [@var={0xa, 0x0, 0x0, 0x11, 0x4}, @restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x5f, 0x4f, 0x30, 0x61, 0x2e, 0x0, 0x0, 0x0, 0x2e, 0x2e]}}, 0x0, 0x50}, 0x28) r5 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x8) unshare(0x2040400) pwritev2(r6, 0x0, 0x0, 0x7ff, 0x1c0000, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs]}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r8, 0x4018aebd, &(0x7f0000000080)={0x4000}) ioctl$KVM_HYPERV_EVENTFD(r8, 0x4018aebd, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x1}) 38.739078058s ago: executing program 2 (id=1237): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/dynamic_events\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='!:__group/m', 0xb) 37.298806952s ago: executing program 2 (id=1239): r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0xb, &(0x7f0000000280), 0xe) sendmsg$inet(r0, &(0x7f0000000900)={&(0x7f0000000940)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000980)=[{&(0x7f00000009c0)="e5", 0x1}], 0x1}, 0x480c0) recvmsg(r0, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x121) 36.327328021s ago: executing program 2 (id=1241): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x48, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xffff, 0xf}, {0x0, 0xfff3}, {0x2, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "e711f592e2765d06afabc373f952ed23"}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 35.695549058s ago: executing program 2 (id=1242): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) pwritev2(r0, &(0x7f00000004c0)=[{&(0x7f0000000500)="1bbc54", 0x3}], 0x1, 0xa74a, 0x80000000, 0x30) 35.017740299s ago: executing program 2 (id=1244): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)="306663353a313232373ad36c66256fc507138eef06f195222da4748207f70207d97a5cbf22f78a60d131280755c559d41916ca57741064c323d961b86942a05ebe7dd593a84f2b54ede3eb7def3aad3bc89d0ec21fbf7947b0155f62288b011f7ca7ee6d7a9c", 0x66) 33.192556766s ago: executing program 2 (id=1246): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r1, {0x10, 0x7}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x80}, 0x0) 24.86675972s ago: executing program 37 (id=1235): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) dup(0xffffffffffffffff) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0xc, [@var={0xa, 0x0, 0x0, 0x11, 0x4}, @restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x5f, 0x4f, 0x30, 0x61, 0x2e, 0x0, 0x0, 0x0, 0x2e, 0x2e]}}, 0x0, 0x50}, 0x28) r5 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x8) unshare(0x2040400) pwritev2(r6, 0x0, 0x0, 0x7ff, 0x1c0000, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs]}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r8, 0x4018aebd, &(0x7f0000000080)={0x4000}) ioctl$KVM_HYPERV_EVENTFD(r8, 0x4018aebd, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x1}) 24.395816021s ago: executing program 5 (id=1252): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0xe0881) write$sndseq(r0, 0x0, 0x0) poll(&(0x7f0000000240)=[{r0, 0x18}], 0x1, 0x100) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000280)={0x80, 0x1, 0x0, 0xfffffffd}) 22.589313976s ago: executing program 5 (id=1253): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x26a, 0x0, 0x200000000}]}) 21.28821828s ago: executing program 5 (id=1254): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x101041, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) write$UHID_INPUT2(r3, &(0x7f0000000200)={0xc, {0x7, "4600c541deef10"}}, 0xd) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37}, 0x28) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r6}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) r7 = fsmount(r5, 0x1, 0x0) fchdir(r7) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) pread64(0xffffffffffffffff, &(0x7f0000000240)=""/133, 0x85, 0x4640) 18.93922695s ago: executing program 5 (id=1255): r0 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r1 = dup(r0) write$binfmt_elf64(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c4606ff78b3050000000000000002003e00cd000000c9030000000000004000000000000000ea0200000000000002000100050038000101"], 0x178) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 18.250083727s ago: executing program 5 (id=1256): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x10, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv6/conf/syz_tun/addr_gen_mode\x00', 0x1, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000180)="92", 0x1}], 0x1, 0x4, 0x11, 0x15) 16.810393354s ago: executing program 5 (id=1257): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x101800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000003c0)={0x1, 0x0, [{0x80000008, 0x7, 0x5, 0x0, 0x1000}]}) 16.633774182s ago: executing program 38 (id=1246): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r1, {0x10, 0x7}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x80}, 0x0) 0s ago: executing program 39 (id=1257): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x101800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000003c0)={0x1, 0x0, [{0x80000008, 0x7, 0x5, 0x0, 0x1000}]}) kernel console output (not intermixed with test programs): T5618] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 523.852448][ T5618] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 523.858573][ T5618] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 523.860943][ T5618] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 524.276485][ T7944] JFS: discard option not supported on device [ 524.311465][ T7944] Mount JFS Failure: -5 [ 524.311485][ T7944] jfs_mount failed w/return code = -5 [ 526.384811][ T4921] Bluetooth: hci1: command tx timeout [ 526.825744][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 526.825768][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.426893][ T4921] Bluetooth: hci1: command tx timeout [ 528.552065][ T7970] 9p: Bad value for 'rfdno' [ 530.511308][ T4921] Bluetooth: hci1: command tx timeout [ 531.291741][ T1166] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.162208][ T4921] Bluetooth: hci1: command tx timeout [ 534.628463][ T8010] netlink: 'syz.6.329': attribute type 10 has an invalid length. [ 536.304239][ T1166] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.534084][ T8010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 536.552774][ T8010] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 539.037349][ T8040] JFS: discard option not supported on device [ 539.038154][ T8040] Mount JFS Failure: -5 [ 539.038169][ T8040] jfs_mount failed w/return code = -5 [ 544.703316][ T1166] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.770645][ T7934] rxe_eth0 speed is unknown, defaulting to 1000 [ 545.701569][ T4921] Bluetooth: Frame is too long (len 84, expected len 18) [ 547.135963][ T36] audit: type=1326 audit(1793096749.173:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8055 comm="syz.6.334" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72012f559 code=0x7ffc0000 [ 547.136898][ T36] audit: type=1326 audit(1793096749.173:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8055 comm="syz.6.334" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72012f559 code=0x7ffc0000 [ 547.137815][ T36] audit: type=1326 audit(1793096749.173:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8055 comm="syz.6.334" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe7200efd8e code=0x7ffc0000 [ 547.137899][ T36] audit: type=1326 audit(1793096749.173:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8055 comm="syz.6.334" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe7200efd8e code=0x7ffc0000 [ 547.138630][ T36] audit: type=1326 audit(1793096749.173:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8055 comm="syz.6.334" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe7200efd8e code=0x7ffc0000 [ 547.139333][ T36] audit: type=1326 audit(1793096749.183:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8055 comm="syz.6.334" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe7200efd8e code=0x7ffc0000 [ 547.139385][ T36] audit: type=1326 audit(1793096749.603:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8055 comm="syz.6.334" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe72012f559 code=0x7ffc0000 [ 547.753943][ T36] audit: type=1326 audit(1793096749.883:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8055 comm="syz.6.334" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72012f559 code=0x7ffc0000 [ 547.754002][ T36] audit: type=1326 audit(1793096749.883:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8055 comm="syz.6.334" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72012f559 code=0x7ffc0000 [ 547.754051][ T36] audit: type=1326 audit(1793096749.173:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8055 comm="syz.6.334" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72012f559 code=0x7ffc0000 [ 549.565973][ T8092] vxcan0: tx address claim with dest, not broadcast [ 550.594908][ T1166] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.370744][ T7934] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.370973][ T7934] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.371183][ T7934] bridge_slave_0: entered allmulticast mode [ 554.374021][ T7934] bridge_slave_0: entered promiscuous mode [ 554.419079][ T7934] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.419223][ T7934] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.419431][ T7934] bridge_slave_1: entered allmulticast mode [ 554.422256][ T7934] bridge_slave_1: entered promiscuous mode [ 554.571471][ T7934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 554.688188][ T7934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 554.907004][ T1166] bridge_slave_1: left allmulticast mode [ 554.907044][ T1166] bridge_slave_1: left promiscuous mode [ 554.907352][ T1166] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.071974][ T1166] bridge_slave_0: left allmulticast mode [ 555.072016][ T1166] bridge_slave_0: left promiscuous mode [ 555.072962][ T1166] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.926958][ T1166] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 556.007077][ T1166] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 556.031079][ T1166] bond0 (unregistering): Released all slaves [ 556.069513][ T7934] team0: Port device team_slave_0 added [ 556.147502][ T7934] team0: Port device team_slave_1 added [ 556.224510][ T7934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 556.224531][ T7934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 556.224560][ T7934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 556.309919][ T7934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 556.309941][ T7934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 556.309972][ T7934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 556.473053][ T7934] hsr_slave_0: entered promiscuous mode [ 556.474779][ T7934] hsr_slave_1: entered promiscuous mode [ 556.475801][ T7934] debugfs: 'hsr0' already exists in 'hsr' [ 556.475827][ T7934] Cannot create hsr debugfs directory [ 557.476457][ T1166] hsr_slave_0: left promiscuous mode [ 557.516444][ T1166] hsr_slave_1: left promiscuous mode [ 557.517852][ T1166] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 557.517881][ T1166] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 557.579145][ T1166] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 557.579196][ T1166] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 557.660679][ T1166] veth1_macvtap: left promiscuous mode [ 557.660765][ T1166] veth0_macvtap: left promiscuous mode [ 557.660950][ T1166] veth1_vlan: left promiscuous mode [ 557.661078][ T1166] veth0_vlan: left promiscuous mode [ 558.511887][ T1166] team0 (unregistering): Port device team_slave_1 removed [ 558.557079][ T1166] team0 (unregistering): Port device team_slave_0 removed [ 560.353989][ T7934] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 560.379730][ T7934] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 560.380864][ T7934] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 560.416959][ T7934] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 560.418134][ T7934] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 560.469922][ T7934] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 560.471092][ T7934] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 560.513700][ T7934] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 560.628246][ T7934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 560.663177][ T7934] 8021q: adding VLAN 0 to HW filter on device team0 [ 560.678450][ T1192] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.678606][ T1192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 560.702594][ T1192] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.702774][ T1192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 561.276496][ T7934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 561.578669][ T7934] veth0_vlan: entered promiscuous mode [ 561.605872][ T7934] veth1_vlan: entered promiscuous mode [ 561.653043][ T7934] veth0_macvtap: entered promiscuous mode [ 561.666518][ T7934] veth1_macvtap: entered promiscuous mode [ 561.698410][ T7934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 561.704900][ T7934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 562.281305][ T1438] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.281330][ T1438] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.322073][ T1193] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.323468][ T171] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.323812][ T171] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.416347][ T171] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.454221][ T1019] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.454245][ T1019] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 563.859386][ T8234] block2mtd: error: cannot open device [ 563.956526][ T8236] capability: warning: `syz.7.354' uses deprecated v2 capabilities in a way that may be insecure [ 566.186960][ T8252] JFS: discard option not supported on device [ 566.202704][ T8252] Mount JFS Failure: -5 [ 566.202750][ T8252] jfs_mount failed w/return code = -5 [ 569.317121][ T1342] ieee802154 phy1 wpan1: encryption failed: -22 [ 576.300517][ T8309] sctp: [Deprecated]: syz.6.364 (pid 8309) Use of int in max_burst socket option. [ 576.300517][ T8309] Use struct sctp_assoc_value instead [ 578.897150][ T8319] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 580.133513][ T8325] lo speed is unknown, defaulting to 1000 [ 580.141924][ T8325] lo speed is unknown, defaulting to 1000 [ 580.245684][ T8325] lo speed is unknown, defaulting to 1000 [ 580.262564][ T8325] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 580.262607][ T8325] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 580.262916][ T8325] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 581.580705][ T8327] Unknown options in mask e346 [ 583.300315][ T8325] lo speed is unknown, defaulting to 1000 [ 583.597892][ T8325] lo speed is unknown, defaulting to 1000 [ 583.619442][ T8325] lo speed is unknown, defaulting to 1000 [ 584.035389][ T8325] lo speed is unknown, defaulting to 1000 [ 584.251463][ T8325] lo speed is unknown, defaulting to 1000 [ 587.731621][ T5608] Bluetooth: hci6: command 0x0406 tx timeout [ 589.026245][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 589.026267][ T36] audit: type=1326 audit(1793096790.953:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8358 comm="syz.2.372" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70afe4f559 code=0x7ffc0000 [ 589.026322][ T36] audit: type=1326 audit(1793096790.953:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8358 comm="syz.2.372" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70afe4f559 code=0x7ffc0000 [ 589.026385][ T36] audit: type=1326 audit(1793096790.953:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8358 comm="syz.2.372" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f70afe4f559 code=0x7ffc0000 [ 589.026434][ T36] audit: type=1326 audit(1793096790.953:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8358 comm="syz.2.372" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70afe4f559 code=0x7ffc0000 [ 589.026502][ T36] audit: type=1326 audit(1793096790.953:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8358 comm="syz.2.372" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70afe4f559 code=0x7ffc0000 [ 589.026550][ T36] audit: type=1326 audit(1793096790.953:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8358 comm="syz.2.372" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f70afe4f559 code=0x7ffc0000 [ 589.026597][ T36] audit: type=1326 audit(1793096790.953:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8358 comm="syz.2.372" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70afe4f559 code=0x7ffc0000 [ 589.026643][ T36] audit: type=1326 audit(1793096790.953:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8358 comm="syz.2.372" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70afe4f559 code=0x7ffc0000 [ 589.026690][ T36] audit: type=1326 audit(1793096790.953:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8358 comm="syz.2.372" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f70afe4f559 code=0x7ffc0000 [ 589.026736][ T36] audit: type=1326 audit(1793096790.983:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8358 comm="syz.2.372" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70afe4f559 code=0x7ffc0000 [ 589.859618][ T8378] netlink: 'syz.4.376': attribute type 26 has an invalid length. [ 590.323013][ T8385] netlink: 100 bytes leftover after parsing attributes in process `syz.6.375'. [ 594.108680][ T8405] overlay: Unknown parameter 'fowner>00000000000000000000' [ 602.555458][ T4921] Bluetooth: hci1: unexpected event 0x04 length: 3 < 10 [ 604.429109][ T8475] netlink: 8 bytes leftover after parsing attributes in process `syz.6.395'. [ 605.449158][ T8484] __vm_enough_memory: pid: 8484, comm: syz.7.396, bytes: 4503599627366400 not enough memory for the allocation [ 611.122006][ T8502] netlink: 'syz.6.401': attribute type 1 has an invalid length. [ 612.658801][ T8504] netlink: 52 bytes leftover after parsing attributes in process `syz.4.398'. [ 612.675473][ T8504] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.677502][ T8504] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.693004][ T8504] netlink: 12 bytes leftover after parsing attributes in process `syz.4.398'. [ 614.580841][ T4921] Bluetooth: hci0: command 0x0406 tx timeout [ 614.752680][ T4921] Bluetooth: hci6: unexpected event 0x04 length: 3 < 10 [ 621.100567][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 621.100589][ T36] audit: type=1326 audit(1793096821.935:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8544 comm="syz.4.412" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51bf88f559 code=0x7ffc0000 [ 621.107195][ T36] audit: type=1326 audit(1793096821.953:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8544 comm="syz.4.412" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51bf88f559 code=0x7ffc0000 [ 621.109082][ T36] audit: type=1326 audit(1793096821.963:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8544 comm="syz.4.412" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51bf88f559 code=0x7ffc0000 [ 621.142420][ T36] audit: type=1326 audit(1793096821.963:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8544 comm="syz.4.412" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51bf88f559 code=0x7ffc0000 [ 621.142575][ T36] audit: type=1326 audit(1793096821.972:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8544 comm="syz.4.412" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f51bf88f559 code=0x7ffc0000 [ 621.144476][ T36] audit: type=1326 audit(1793096821.990:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8544 comm="syz.4.412" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51bf88f559 code=0x7ffc0000 [ 621.151319][ T36] audit: type=1326 audit(1793096821.990:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8544 comm="syz.4.412" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51bf88f559 code=0x7ffc0000 [ 621.168825][ T36] audit: type=1326 audit(1793096821.999:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8544 comm="syz.4.412" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51bf88f559 code=0x7ffc0000 [ 621.168968][ T36] audit: type=1326 audit(1793096822.009:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8544 comm="syz.4.412" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51bf88f559 code=0x7ffc0000 [ 621.186700][ T36] audit: type=1326 audit(1793096822.036:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8544 comm="syz.4.412" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f51bf88f559 code=0x7ffc0000 [ 621.939802][ T8551] netlink: 120 bytes leftover after parsing attributes in process `syz.7.411'. [ 626.130081][ T8571] fuse: fd is not a fuse device [ 626.147068][ T8571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.419'. [ 630.410068][ T8581] JFS: discard option not supported on device [ 630.410448][ T8581] Mount JFS Failure: -5 [ 630.410461][ T8581] jfs_mount failed w/return code = -5 [ 632.151554][ T8590] netlink: 20 bytes leftover after parsing attributes in process `syz.5.423'. [ 633.441441][ T1342] ieee802154 phy1 wpan1: encryption failed: -22 [ 633.485947][ T8590] bond0: (slave bond_slave_0): Releasing backup interface [ 633.646614][ T8590] bond_slave_0: entered promiscuous mode [ 633.646668][ T8590] bond_slave_0: entered allmulticast mode [ 633.705790][ T5757] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 634.877348][ T5757] usb 7-1: Using ep0 maxpacket: 32 [ 634.982132][ T5757] usb 7-1: New USB device found: idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 635.640622][ T5757] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 635.640668][ T5757] usb 7-1: can't read configurations, error -71 [ 635.863536][ T8625] netlink: 'syz.2.431': attribute type 2 has an invalid length. [ 635.918860][ T8620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.431'. [ 637.154057][ T5608] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 637.235734][ T5608] Bluetooth: hci1: command tx timeout [ 640.884896][ T5608] Bluetooth: hci3: unexpected cc 0x204b length: 34 > 3 [ 641.132514][ T5608] Bluetooth: hci2: unexpected event for opcode 0x100c [ 641.348814][ T5608] Bluetooth: hci0: unexpected event for opcode 0x0403 [ 641.887798][ T8694] netlink: 100 bytes leftover after parsing attributes in process `syz.7.447'. [ 642.569238][ T8675] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 642.574293][ T8675] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 643.367775][ T8711] Bluetooth: MGMT ver 1.23 [ 644.360956][ T5608] Bluetooth: hci2: unexpected event for opcode 0x2039 [ 644.445718][ T8675] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 644.445925][ T8675] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 644.446006][ T8675] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 644.535394][ T8675] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 644.535532][ T8675] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 644.652311][ T5618] Bluetooth: hci6: unexpected event for opcode 0x2024 [ 644.691741][ T8675] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 644.691882][ T8675] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 644.802296][ T8675] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 644.935657][ T8675] hwrng_fill thread creation failed [ 646.728659][ T5618] Bluetooth: hci3: command 0x0c1a tx timeout [ 646.794868][ T5618] Bluetooth: hci0: command 0x0406 tx timeout [ 646.955000][ T5618] Bluetooth: hci1: command 0x0c1a tx timeout [ 649.293276][ T5618] Bluetooth: hci1: unexpected event for opcode 0x204e [ 649.314031][ T5618] Bluetooth: hci0: command 0x0406 tx timeout [ 651.403240][ T5618] Bluetooth: hci3: unexpected event for opcode 0x0c1b [ 654.111272][ T5618] Bluetooth: hci0: unexpected event for opcode 0x2042 [ 662.141171][ T5618] Bluetooth: hci3: unexpected event for opcode 0x0c5a [ 662.151077][ T5756] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 662.442148][ T5756] usb 8-1: Using ep0 maxpacket: 8 [ 662.450119][ T5756] usb 8-1: New USB device found: idVendor=0dba, idProduct=1000, bcdDevice=0.40 [ 662.451731][ T5756] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 662.452234][ T5756] usb 8-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 662.452283][ T5756] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 191, changing to 7 [ 662.511300][ T5756] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.511332][ T5756] usb 8-1: Product: syz [ 662.511349][ T5756] usb 8-1: Manufacturer: syz [ 662.511366][ T5756] usb 8-1: SerialNumber: syz [ 663.508998][ T5618] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 665.472311][ T5756] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 665.513329][ T5756] snd-usb-audio 8-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 666.421600][ T5618] Bluetooth: hci2: unexpected event for opcode 0x2010 [ 669.201421][ T5618] Bluetooth: hci0: unexpected event for opcode 0x20a3 [ 669.392868][ T5618] Bluetooth: hci3: unexpected event for opcode 0x200f [ 669.839477][ T5756] snd-usb-audio 8-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 669.902674][ T8846] udevd[8846]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 670.087529][ T5756] usb 8-1: USB disconnect, device number 2 [ 670.556836][ T8921] FAULT_INJECTION: forcing a failure. [ 670.556836][ T8921] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 670.556974][ T8921] CPU: 1 UID: 0 PID: 8921 Comm: syz.6.506 Tainted: G L Y syzkaller #0 PREEMPT_{RT,(full)} [ 670.557012][ T8921] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 670.557021][ T8921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 670.557046][ T8921] Call Trace: [ 670.557059][ T8921] [ 670.557071][ T8921] dump_stack_lvl+0xe8/0x150 [ 670.557117][ T8921] should_fail_ex+0x46b/0x600 [ 670.557162][ T8921] _copy_from_user+0x2d/0xb0 [ 670.557200][ T8921] csum_and_copy_from_iter_full+0x210/0x1fb0 [ 670.557250][ T8921] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 670.557284][ T8921] ? rcu_is_watching+0x16/0xb0 [ 670.557313][ T8921] ? trace_kmalloc+0x2a/0xf0 [ 670.557359][ T8921] ip_generic_getfrag+0x149/0x2d0 [ 670.557402][ T8921] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 670.557443][ T8921] ? __alloc_skb+0x4d0/0x7a0 [ 670.557479][ T8921] ? skb_put+0x112/0x210 [ 670.557506][ T8921] __ip_append_data+0x2f45/0x3cf0 [ 670.557565][ T8921] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 670.557626][ T8921] ? __pfx___ip_append_data+0x10/0x10 [ 670.557660][ T8921] ? ipv4_mtu+0x561/0x670 [ 670.557696][ T8921] ? ip_setup_cork+0x512/0x920 [ 670.557735][ T8921] ip_make_skb+0x250/0x460 [ 670.557776][ T8921] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 670.557814][ T8921] ? __pfx_ip_make_skb+0x10/0x10 [ 670.557848][ T8921] ? irqentry_exit+0x2a0/0x9b0 [ 670.557899][ T8921] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 670.557941][ T8921] udp_sendmsg+0x1937/0x2140 [ 670.557988][ T8921] ? __pfx_udp_sendmsg+0x10/0x10 [ 670.558056][ T8921] ? finish_task_switch+0x40e/0xc60 [ 670.558088][ T8921] ? lockdep_hardirqs_on+0x7b/0x110 [ 670.558120][ T8921] ? trace_sched_exit_tp+0x3a/0x130 [ 670.558153][ T8921] ? __schedule+0x1733/0x56e0 [ 670.558184][ T8921] udpv6_sendmsg+0x915/0x2610 [ 670.558237][ T8921] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 670.558273][ T8921] ? __pfx___schedule+0x10/0x10 [ 670.558349][ T8921] ? inet_send_prepare+0x5b/0x260 [ 670.558388][ T8921] ? inet6_sendmsg+0xe4/0x120 [ 670.558421][ T8921] ? __pfx_inet6_sendmsg+0x10/0x10 [ 670.558450][ T8921] sock_sendmsg_nosec+0x90/0x190 [ 670.558486][ T8921] sock_write_iter+0x2e4/0x3f0 [ 670.558518][ T8921] ? __pfx_sock_write_iter+0x10/0x10 [ 670.558570][ T8921] vfs_write+0x61e/0xbb0 [ 670.558611][ T8921] ? __pfx_vfs_write+0x10/0x10 [ 670.558648][ T8921] ? __fget_files+0x3a8/0x420 [ 670.558677][ T8921] ? __fget_files+0x2a/0x420 [ 670.558711][ T8921] ? fdget+0x1b2/0x250 [ 670.558748][ T8921] ksys_write+0x156/0x270 [ 670.558782][ T8921] ? __pfx_ksys_write+0x10/0x10 [ 670.558828][ T8921] do_syscall_64+0x166/0x520 [ 670.558855][ T8921] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.558880][ T8921] ? clear_bhb_loop+0x70/0xc0 [ 670.558909][ T8921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.558940][ T8921] RIP: 0033:0x7fe72012f559 [ 670.558975][ T8921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 670.558995][ T8921] RSP: 002b:00007fe71e344028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 670.559023][ T8921] RAX: ffffffffffffffda RBX: 00007fe7203b6180 RCX: 00007fe72012f559 [ 670.559041][ T8921] RDX: 0000000000003f80 RSI: 0000200000000300 RDI: 0000000000000005 [ 670.559057][ T8921] RBP: 00007fe7201c6b20 R08: 0000000000000000 R09: 0000000000000000 [ 670.559072][ T8921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 670.559086][ T8921] R13: 00007fe7203b6218 R14: 00007fe7203b6180 R15: 00007fff2ef3d648 [ 670.559123][ T8921] [ 675.835369][ T5618] Bluetooth: hci2: unexpected event for opcode 0x2023 [ 676.163839][ T1004] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 676.332535][ T1004] usb 6-1: New USB device found: idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 676.370901][ T1004] usb 6-1: config index 0 descriptor too short (expected 59277, got 27) [ 676.370963][ T1004] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 676.370992][ T1004] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 676.371021][ T1004] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 676.371065][ T1004] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.641828][ T1004] usb 6-1: config 0 descriptor?? [ 676.688246][ T8964] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 676.708647][ T8986] FAULT_INJECTION: forcing a failure. [ 676.708647][ T8986] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 676.708690][ T8986] CPU: 0 UID: 0 PID: 8986 Comm: syz.7.525 Tainted: G L Y syzkaller #0 PREEMPT_{RT,(full)} [ 676.708722][ T8986] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 676.708730][ T8986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 676.708743][ T8986] Call Trace: [ 676.708751][ T8986] [ 676.708761][ T8986] dump_stack_lvl+0xe8/0x150 [ 676.708803][ T8986] should_fail_ex+0x46b/0x600 [ 676.708844][ T8986] _copy_from_user+0x2d/0xb0 [ 676.708879][ T8986] __sys_bpf+0x2e7/0xe00 [ 676.708915][ T8986] ? __pfx___sys_bpf+0x10/0x10 [ 676.708944][ T8986] ? do_futex+0x3e7/0x4e0 [ 676.709000][ T8986] ? rcu_is_watching+0x16/0xb0 [ 676.709032][ T8986] __x64_sys_bpf+0xba/0xd0 [ 676.709059][ T8986] do_syscall_64+0x166/0x520 [ 676.709085][ T8986] ? trace_irq_disable+0x3b/0x140 [ 676.709107][ T8986] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.709130][ T8986] ? clear_bhb_loop+0x70/0xc0 [ 676.709159][ T8986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.709182][ T8986] RIP: 0033:0x7f4278bbf559 [ 676.709204][ T8986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 676.709225][ T8986] RSP: 002b:00007f4276ded028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 676.709250][ T8986] RAX: ffffffffffffffda RBX: 00007f4278e46090 RCX: 00007f4278bbf559 [ 676.709265][ T8986] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 676.709278][ T8986] RBP: 00007f4278c56b20 R08: 0000000000000000 R09: 0000000000000000 [ 676.709291][ T8986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 676.709310][ T8986] R13: 00007f4278e46128 R14: 00007f4278e46090 R15: 00007ffccb956fb8 [ 676.709345][ T8986] [ 676.967350][ T7912] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 677.115365][ T1004] ath6kl: Failed to submit usb control message: -71 [ 677.115549][ T1004] ath6kl: unable to send the bmi data to the device: -71 [ 677.115568][ T1004] ath6kl: Unable to send get target info: -71 [ 677.183098][ T1004] ath6kl: Failed to init ath6kl core: -71 [ 677.184594][ T1004] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 677.334151][ T7912] usb 7-1: unable to get BOS descriptor or descriptor too short [ 677.334213][ T7912] usb 7-1: New USB device found: idVendor=0ccd, idProduct=0038, bcdDevice=86.b8 [ 677.411105][ T1004] usb 6-1: USB disconnect, device number 2 [ 677.493520][ T7912] usb 7-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 677.520987][ T7912] usb 7-1: New USB device strings: Mfr=164, Product=146, SerialNumber=3 [ 677.521022][ T7912] usb 7-1: Product: syz [ 677.521039][ T7912] usb 7-1: Manufacturer: syz [ 677.521055][ T7912] usb 7-1: SerialNumber: syz [ 677.840539][ T7912] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 677.841237][ T7912] dvb-usb: bulk message failed: -22 (2/0) [ 677.841280][ T7912] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 677.847896][ T7912] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver) [ 677.850898][ T7912] usb 7-1: media controller created [ 678.089149][ T7912] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 678.386332][ T7912] dvb-usb: bulk message failed: -22 (1/0) [ 678.386433][ T7912] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' [ 679.528768][ T7912] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input7 [ 680.631623][ T7912] dvb-usb: schedule remote query interval to 50 msecs. [ 680.631661][ T7912] dvb-usb: bulk message failed: -22 (2/0) [ 680.631679][ T7912] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected. [ 680.665714][ T7912] usb 7-1: USB disconnect, device number 4 [ 680.700704][ T5618] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 680.700979][ T5618] Bluetooth: hci2: Injecting HCI hardware error event [ 680.709264][ T5618] Bluetooth: hci2: hardware error 0x00 [ 680.993004][ T9037] FAULT_INJECTION: forcing a failure. [ 680.993004][ T9037] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 680.993050][ T9037] CPU: 0 UID: 0 PID: 9037 Comm: syz.7.539 Tainted: G L Y syzkaller #0 PREEMPT_{RT,(full)} [ 680.993086][ T9037] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 680.993095][ T9037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 680.993109][ T9037] Call Trace: [ 680.993119][ T9037] [ 680.993129][ T9037] dump_stack_lvl+0xe8/0x150 [ 680.993173][ T9037] should_fail_ex+0x46b/0x600 [ 680.993217][ T9037] _copy_from_user+0x2d/0xb0 [ 680.993256][ T9037] __sys_bpf+0x2e7/0xe00 [ 680.993294][ T9037] ? __pfx___sys_bpf+0x10/0x10 [ 680.993327][ T9037] ? do_futex+0x3e7/0x4e0 [ 680.993390][ T9037] ? rcu_is_watching+0x16/0xb0 [ 680.993426][ T9037] __x64_sys_bpf+0xba/0xd0 [ 680.993457][ T9037] do_syscall_64+0x166/0x520 [ 680.993484][ T9037] ? trace_irq_disable+0x3b/0x140 [ 680.993521][ T9037] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.993545][ T9037] ? clear_bhb_loop+0x70/0xc0 [ 680.993575][ T9037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.993599][ T9037] RIP: 0033:0x7f4278bbf559 [ 680.993621][ T9037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 680.993640][ T9037] RSP: 002b:00007f4276ded028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 680.993666][ T9037] RAX: ffffffffffffffda RBX: 00007f4278e46090 RCX: 00007f4278bbf559 [ 680.993684][ T9037] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 680.993699][ T9037] RBP: 00007f4278c56b20 R08: 0000000000000000 R09: 0000000000000000 [ 680.993714][ T9037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 680.993728][ T9037] R13: 00007f4278e46128 R14: 00007f4278e46090 R15: 00007ffccb956fb8 [ 680.993765][ T9037] [ 681.307839][ T9039] netlink: 36 bytes leftover after parsing attributes in process `syz.6.542'. [ 683.053966][ T9056] netlink: 112 bytes leftover after parsing attributes in process `syz.7.544'. [ 683.298700][ T5618] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 683.567514][ T7912] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected. [ 685.253461][ T9056] vti0: entered allmulticast mode [ 687.718670][ T9114] netlink: 28 bytes leftover after parsing attributes in process `syz.6.559'. [ 687.718838][ T9114] netlink: 28 bytes leftover after parsing attributes in process `syz.6.559'. [ 688.108082][ T9122] netlink: 128 bytes leftover after parsing attributes in process `syz.2.562'. [ 688.108112][ T9122] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 688.539241][ T9131] netlink: zone id is out of range [ 688.539272][ T9131] netlink: get zone limit has 4 unknown bytes [ 689.206383][ T9155] comedi comedi0: c6xdigio: I/O port conflict (0x4,3) [ 691.125413][ T5757] lo speed is unknown, defaulting to 1000 [ 691.736471][ T1004] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 695.996912][ T1004] usb 8-1: New USB device found: idVendor=0c45, idProduct=6280, bcdDevice=d5.fc [ 695.998918][ T1004] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.490846][ T1004] usb 8-1: can't set config #252, error -71 [ 697.567694][ T9227] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 697.759111][ T1004] usb 8-1: USB disconnect, device number 3 [ 700.006907][ T1342] ieee802154 phy1 wpan1: encryption failed: -22 [ 717.519972][ T9368] UDC core: g1: couldn't find an available UDC or it's busy [ 720.901476][ T9382] wg2 speed is unknown, defaulting to 1000 [ 721.100832][ T9382] wg2 speed is unknown, defaulting to 1000 [ 721.163988][ T9382] wg2 speed is unknown, defaulting to 1000 [ 721.790645][ T9398] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 723.395289][ T5754] wg2 speed is unknown, defaulting to 1000 [ 723.399107][ T9382] infiniband syz0: set active [ 723.399130][ T9382] infiniband syz0: added wg2 [ 723.402024][ T9382] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 723.530532][ T9423] netlink: 52 bytes leftover after parsing attributes in process `syz.5.658'. [ 723.565379][ T9423] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.579322][ T9423] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.639721][ T9423] netlink: 12 bytes leftover after parsing attributes in process `syz.5.658'. [ 724.011087][ T9382] infiniband syz0: Couldn't open port 1 [ 724.493095][ T9382] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 724.493140][ T9382] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 724.493185][ T9382] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 724.724215][ T9429] netlink: get zone limit has 4 unknown bytes [ 724.784396][ T9382] RDS/IB: syz0: added [ 724.790861][ T9382] smc: adding ib device syz0 with port count 1 [ 724.791552][ T9382] smc: ib device syz0 port 1 has pnetid SYZ2 (user defined) [ 724.871782][ T9432] netlink: 20 bytes leftover after parsing attributes in process `syz.5.661'. [ 724.977993][ T1004] wg2 speed is unknown, defaulting to 1000 [ 724.993959][ T9382] wg2 speed is unknown, defaulting to 1000 [ 725.424669][ T9382] wg2 speed is unknown, defaulting to 1000 [ 728.075690][ T5756] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 728.170259][ T9382] wg2 speed is unknown, defaulting to 1000 [ 728.218564][ T9472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.675'. [ 728.218623][ T9472] netlink: 12 bytes leftover after parsing attributes in process `syz.2.675'. [ 728.254100][ T5756] usb 8-1: New USB device found: idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 728.255419][ T5756] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.367014][ T5756] usb 8-1: config 0 descriptor?? [ 729.813705][ T5756] hackrf 8-1:0.0: usb_control_msg() failed -71 request 0e [ 729.813736][ T5756] hackrf 8-1:0.0: Could not detect board [ 729.813805][ T5756] hackrf 8-1:0.0: probe with driver hackrf failed with error -71 [ 729.950652][ T5756] usb 8-1: USB disconnect, device number 4 [ 731.514100][ T9382] wg2 speed is unknown, defaulting to 1000 [ 732.184050][ T9525] openvswitch: netlink: Key 14 has unexpected len 0 expected 28 [ 732.681297][ T9534] netlink: 256 bytes leftover after parsing attributes in process `syz.2.702'. [ 732.720276][ T9382] wg2 speed is unknown, defaulting to 1000 [ 732.783804][ T9534] unsupported nlmsg_type 40 [ 732.820533][ T9536] netlink: 'syz.4.703': attribute type 4 has an invalid length. [ 732.820560][ T9536] netlink: 17 bytes leftover after parsing attributes in process `syz.4.703'. [ 737.070055][ T5618] Bluetooth: hci6: unexpected cc 0x080e length: 5 > 3 [ 737.070095][ T5618] Bluetooth: hci6: unexpected event for opcode 0x080e [ 747.265918][ T9693] sock: sock_timestamping_bind_phc: sock not bind to device [ 748.904960][ T9700] bridge_slave_0 (unregistering): left allmulticast mode [ 748.904997][ T9700] bridge_slave_0 (unregistering): left promiscuous mode [ 748.927055][ T9700] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.641548][ T9758] netlink: 'syz.7.790': attribute type 2 has an invalid length. [ 755.641573][ T9758] netlink: 252 bytes leftover after parsing attributes in process `syz.7.790'. [ 760.143576][ T9786] netlink: 64 bytes leftover after parsing attributes in process `syz.7.801'. [ 761.516427][ T9780] kthread_run failed with err -4 [ 766.626863][ T1342] ieee802154 phy1 wpan1: encryption failed: -22 [ 768.109293][ T9863] netlink: 8 bytes leftover after parsing attributes in process `syz.5.827'. [ 770.477524][ T9906] netlink: 112 bytes leftover after parsing attributes in process `syz.5.841'. [ 771.536341][ T9919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.848'. [ 771.536381][ T9919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.848'. [ 771.632659][ T158] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 771.632715][ T158] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 771.632756][ T158] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 771.632795][ T158] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 773.236579][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 773.386887][ T9951] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 773.387884][ T9951] netlink: 80 bytes leftover after parsing attributes in process `syz.4.861'. [ 773.497601][ T10] usb 6-1: New USB device found: idVendor=047f, idProduct=0418, bcdDevice=0.00 [ 773.499423][ T10] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 773.499460][ T10] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 773.499485][ T10] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 773.499515][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 773.499552][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.648954][ T10] usb 6-1: config 0 descriptor?? [ 774.933208][ T10] plantronics 0003:047F:0418.0001: ignoring exceeding usage max [ 775.464755][ T10] plantronics 0003:047F:0418.0001: hiddev0,hidraw0: USB HID v0.10 Joystick [HID 047f:0418] on usb-dummy_hcd.5-1/input0 [ 775.521728][ T10] usb 6-1: USB disconnect, device number 3 [ 776.076124][ T9974] fido_id[9974]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 776.598291][ T10] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 776.791349][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 776.792382][ T10] usb 7-1: New USB device found: idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 776.795619][ T10] usb 7-1: config index 0 descriptor too short (expected 19, got 18) [ 776.799690][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.799720][ T10] usb 7-1: Product: syz [ 776.799736][ T10] usb 7-1: Manufacturer: syz [ 776.799752][ T10] usb 7-1: SerialNumber: syz [ 777.880581][ T10] usb 7-1: config 0 descriptor?? [ 780.357568][ T10] usb 7-1: can't set config #0, error -71 [ 780.414572][ T10] usb 7-1: USB disconnect, device number 5 [ 780.609865][T10014] netlink: 4 bytes leftover after parsing attributes in process `syz.7.882'. [ 780.639561][T10015] sctp: [Deprecated]: syz.2.884 (pid 10015) Use of int in max_burst socket option. [ 780.639561][T10015] Use struct sctp_assoc_value instead [ 780.751561][T10019] netlink: 20 bytes leftover after parsing attributes in process `syz.4.885'. [ 780.751657][T10019] netlink: 20 bytes leftover after parsing attributes in process `syz.4.885'. [ 782.795440][ T6349] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 782.961742][ T6349] usb 7-1: New USB device found: idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 782.984743][ T6349] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.052244][ T6349] usb 7-1: config 0 descriptor?? [ 783.093610][ T6349] ums-realtek 7-1:0.0: USB Mass Storage device detected [ 783.223368][T10065] netlink: 36 bytes leftover after parsing attributes in process `syz.7.902'. [ 786.433488][ T6349] usb 7-1: USB disconnect, device number 6 [ 792.589209][T10128] Bluetooth: hci0: unsupported parameter 5161 [ 792.589235][T10128] Bluetooth: hci0: unsupported parameter 8192 [ 792.589249][T10128] Bluetooth: hci0: unsupported parameter 5161 [ 792.589262][T10128] Bluetooth: hci0: unsupported parameter 8192 [ 792.739916][T10133] Set syz0 is full, maxelem 2 reached [ 792.777093][ T9] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 792.939753][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 792.943069][ T9] usb 8-1: New USB device found: idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 792.987973][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.988006][ T9] usb 8-1: Product: syz [ 792.988023][ T9] usb 8-1: Manufacturer: syz [ 792.988039][ T9] usb 8-1: SerialNumber: syz [ 794.426754][ T9] usb 8-1: config 0 descriptor?? [ 794.622684][T10150] tipc: Started in network mode [ 794.622722][T10150] tipc: Node identity 00000000000000000000ffffe0000001, cluster identity 4711 [ 794.622796][T10150] tipc: Enabling of bearer rejected, failed to enable media [ 796.328479][ T9] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 796.328783][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 796.328804][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 796.328959][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 796.330670][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 796.683607][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 796.685579][ T9] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 796.685658][ T9] usb 8-1: media controller created [ 796.773504][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 796.823302][T10167] netlink: 'syz.4.938': attribute type 10 has an invalid length. [ 796.865997][ T9] usb 8-1: selecting invalid altsetting 3 [ 796.866025][ T9] ttusb2: set interface to alts=3 failed [ 796.879530][T10168] netlink: 'syz.4.938': attribute type 10 has an invalid length. [ 797.220983][ T9] DVB: Unable to find symbol tda10086_attach() [ 797.221021][ T9] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 797.285097][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 797.285118][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 797.302027][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 797.302056][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 797.302242][ T9] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 797.398539][ T9] usb 8-1: USB disconnect, device number 5 [ 797.521119][T10174] netlink: 'syz.5.939': attribute type 29 has an invalid length. [ 797.544303][T10167] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 797.751290][T10167] team0: Port device netdevsim1 added [ 797.948263][ T9] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 798.082419][T10168] team0: Port device netdevsim1 removed [ 798.417264][T10168] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 798.431144][T10168] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 800.098088][ T9] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 801.428021][ T9] usb 6-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 801.446569][ T9] usb 6-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 801.446607][ T9] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 801.446637][ T9] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 801.446663][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 801.533231][ T9] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 801.533264][ T9] usb 6-1: Product: syz [ 801.533280][ T9] usb 6-1: Manufacturer: syz [ 801.533296][ T9] usb 6-1: SerialNumber: syz [ 801.682789][ T9] usb 6-1: config 0 descriptor?? [ 801.726051][ T9] usb 6-1: selecting invalid altsetting 0 [ 802.065577][ T6349] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 802.090966][ T9] usb 6-1: USB disconnect, device number 4 [ 802.239483][ T6349] usb 8-1: New USB device found: idVendor=047d, idProduct=2041, bcdDevice=0.00 [ 802.242715][ T6349] usb 8-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 802.242827][ T6349] usb 8-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 802.242868][ T6349] usb 8-1: config 0 interface 0 has no altsetting 0 [ 802.242905][ T6349] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.260432][ T5754] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 802.391101][ T6349] usb 8-1: config 0 descriptor?? [ 802.496118][ T5754] usb 7-1: Using ep0 maxpacket: 16 [ 802.507226][ T5754] usb 7-1: New USB device found: idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 802.508567][ T5754] usb 7-1: config index 0 descriptor too short (expected 51443, got 18) [ 802.541417][ T5754] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.541440][ T5754] usb 7-1: Product: syz [ 802.541451][ T5754] usb 7-1: Manufacturer: syz [ 802.541463][ T5754] usb 7-1: SerialNumber: syz [ 802.820678][ T5754] r8152-cfgselector 7-1: Unknown version 0x0000 [ 802.820773][ T5754] r8152-cfgselector 7-1: config 0 descriptor?? [ 803.468373][ T10] r8152-cfgselector 7-1: USB disconnect, device number 7 [ 803.547249][ T6349] input: HID 047d:2041 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:047D:2041.0002/input/input9 [ 803.956982][ T6349] kensington 0003:047D:2041.0002: input,hiddev0,hidraw0: USB HID v80.00 Device [HID 047d:2041] on usb-dummy_hcd.7-1/input0 [ 803.999914][ T6349] usb 8-1: USB disconnect, device number 6 [ 804.595386][T10246] fido_id[10246]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 805.900013][ T5754] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 806.028079][T10276] netlink: 32 bytes leftover after parsing attributes in process `syz.4.972'. [ 806.186023][ T5754] usb 6-1: New USB device found: idVendor=1020, idProduct=0006, bcdDevice=0.00 [ 806.189922][ T5754] usb 6-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 806.189966][ T5754] usb 6-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 806.189996][ T5754] usb 6-1: config 0 interface 0 has no altsetting 0 [ 806.190033][ T5754] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.257634][ T5754] usb 6-1: config 0 descriptor?? [ 806.258923][T10267] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 806.627750][ T9] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 806.749184][ T5754] belkin 0003:1020:0006.0003: ignoring exceeding usage max [ 806.806345][ T9] usb 7-1: New USB device found: idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 806.807748][ T5754] belkin 0003:1020:0006.0003: hidraw0: USB HID v0.11 Joystick [HID 1020:0006] on usb-dummy_hcd.5-1/input0 [ 806.809200][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 806.809235][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 806.809277][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.899622][ T9] usb 7-1: config 0 descriptor?? [ 807.133357][ T10] usb 6-1: USB disconnect, device number 5 [ 808.481664][ T9] playstation 0003:054C:0DF2.0004: item fetching failed at offset 3/5 [ 808.486928][ T9] playstation 0003:054C:0DF2.0004: Parse failed [ 808.487054][ T9] playstation 0003:054C:0DF2.0004: probe with driver playstation failed with error -22 [ 809.616570][ T9] usb 7-1: USB disconnect, device number 8 [ 810.436277][ T10] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 810.605144][ T9] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 810.627586][ T10] usb 8-1: New USB device found: idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 810.629836][ T10] usb 8-1: config 127 has an invalid interface number: 41 but max is 0 [ 810.629875][ T10] usb 8-1: config 127 has no interface number 0 [ 810.629926][ T10] usb 8-1: config 127 interface 41 altsetting 0 endpoint 0xC has invalid maxpacket 255, setting to 64 [ 810.633446][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.633477][ T10] usb 8-1: Product: syz [ 810.633494][ T10] usb 8-1: Manufacturer: syz [ 810.633511][ T10] usb 8-1: SerialNumber: syz [ 810.713924][T10312] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 810.798695][ T9] usb 7-1: New USB device found: idVendor=17ef, idProduct=6067, bcdDevice=0.00 [ 810.930576][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 810.930683][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 810.930732][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.006925][ T9] usb 7-1: config 0 descriptor?? [ 811.013204][T10322] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 811.153387][ T10] asix 8-1:127.41: probe with driver asix failed with error -71 [ 811.198968][ T10] usb 8-1: USB disconnect, device number 7 [ 812.678461][ T5608] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 812.692792][ T5618] Bluetooth: hci0: command 0x0406 tx timeout [ 812.755696][ T9] lenovo 0003:17EF:6067.0005: hidraw0: USB HID v0.00 Device [HID 17ef:6067] on usb-dummy_hcd.6-1/input0 [ 812.967075][ T9] usb 7-1: USB disconnect, device number 9 [ 813.125957][T10351] fido_id[10351]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 826.497252][T10466] dummy0: entered allmulticast mode [ 826.544313][T10465] dummy0: left allmulticast mode [ 828.523796][ T5754] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 828.845062][ T5754] usb 8-1: Using ep0 maxpacket: 32 [ 828.846060][ T5754] usb 8-1: New USB device found: idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 828.847377][ T5754] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.876654][ T5754] usb 8-1: config 0 descriptor?? [ 829.091563][ T5754] gspca_main: sq930x-2.14.0 probing 041e:403c [ 830.236445][ T5754] gspca_sq930x: reg_r 001f failed -110 [ 830.236576][ T5754] sq930x 8-1:0.0: probe with driver sq930x failed with error -110 [ 830.942625][ T5755] usb 8-1: USB disconnect, device number 8 [ 832.563755][ T1342] ieee802154 phy1 wpan1: encryption failed: -22 [ 832.893432][T10498] device-mapper: table: 248:2: ram15 too small for target: start=0, len=14464, dev_size=8192 [ 832.893465][T10498] device-mapper: core: Cannot calculate initial queue limits [ 832.893493][T10498] device-mapper: ioctl: unable to set up device queue for new table. [ 835.693455][T10543] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1065'. [ 835.693484][T10543] netlink: 192 bytes leftover after parsing attributes in process `syz.6.1065'. [ 839.021987][ T10] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 839.608089][ T10] usb 6-1: New USB device found: idVendor=1bc7, idProduct=1101, bcdDevice=8d.d6 [ 839.611672][ T10] usb 6-1: config 3 interface 0 has no altsetting 0 [ 839.616558][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.616585][ T10] usb 6-1: Product: syz [ 839.616598][ T10] usb 6-1: Manufacturer: syz [ 839.616612][ T10] usb 6-1: SerialNumber: syz [ 840.674537][ T10] usb 6-1: USB disconnect, device number 6 [ 841.449468][ T7751] netdevsim netdevsim3 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.449520][ T7751] netdevsim netdevsim3 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.449557][ T7751] netdevsim netdevsim3 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.449593][ T7751] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.449630][ T7751] netdevsim netdevsim3 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.449662][ T7751] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.449693][ T7751] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.449725][ T7751] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.449758][ T7751] netdevsim netdevsim1 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.449791][ T7751] netdevsim netdevsim1 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.449841][ T7751] netdevsim netdevsim1 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.588311][ T7751] netdevsim netdevsim1 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.554888][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 842.871868][ T10] usb 6-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=0.00 [ 842.876362][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 842.876399][ T10] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 842.912860][ T9] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 843.001174][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.001208][ T10] usb 6-1: Product: syz [ 843.001224][ T10] usb 6-1: Manufacturer: syz [ 843.001241][ T10] usb 6-1: SerialNumber: syz [ 843.184913][ T9] usb 7-1: New USB device found: idVendor=c696, idProduct=790a, bcdDevice=53.0d [ 843.222730][ T9] usb 7-1: config 3 has an invalid interface number: 73 but max is 0 [ 843.265041][ T9] usb 7-1: config 3 has no interface number 0 [ 843.265107][ T9] usb 7-1: config 3 interface 73 has no altsetting 0 [ 843.280308][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.280597][ T9] usb 7-1: Product: syz [ 843.280615][ T9] usb 7-1: Manufacturer: syz [ 843.280631][ T9] usb 7-1: SerialNumber: syz [ 844.494749][ T10] usb 6-1: Cannot retrieve CPort count: -110 [ 844.494807][ T10] usb 6-1: Cannot retrieve CPort count: -110 [ 844.494847][ T10] es2_ap_driver 6-1:1.0: probe with driver es2_ap_driver failed with error -110 [ 846.127116][ T9] usb-storage 7-1:3.73: USB Mass Storage device detected [ 846.178014][ T6349] usb 6-1: USB disconnect, device number 7 [ 847.930591][ T7829] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 848.122231][ T7829] usb 6-1: New USB device found: idVendor=0b48, idProduct=1008, bcdDevice=1.00 [ 848.124191][ T7829] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 848.124252][ T7829] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 848.124299][ T7829] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.743515][ T7829] ttusb-dec 6-1:1.0: probe with driver ttusb-dec failed with error -2 [ 850.211174][ T10] usb 6-1: USB disconnect, device number 8 [ 850.971717][ T5608] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 851.063431][ T5608] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 851.085751][ T5608] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 851.090931][ T5608] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 851.112097][ T5608] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 851.637089][ T10] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 851.899903][ T10] usb 6-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 851.901624][ T10] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 851.901651][ T10] usb 6-1: config 0 has no interface number 0 [ 851.901702][ T10] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 851.901733][ T10] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 851.901779][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.000988][ T10] usb 6-1: config 0 descriptor?? [ 852.036210][T10659] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 853.160007][ T10] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 853.390475][ T9] usb 7-1: USB disconnect, device number 10 [ 853.486494][T10343] Bluetooth: hci4: command tx timeout [ 853.511851][ T10] usb 6-1: USB disconnect, device number 9 [ 854.097331][T10689] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1106'. [ 854.413931][T10343] Bluetooth: hci3: unexpected event for opcode 0x0c6d [ 854.503222][T10700] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1109'. [ 855.722702][T10343] Bluetooth: hci4: command tx timeout [ 855.986264][T10653] rxe_eth0 speed is unknown, defaulting to 1000 [ 858.192562][T10343] Bluetooth: hci4: command tx timeout [ 858.770211][T10343] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 858.825362][T10343] Bluetooth: hci3: Injecting HCI hardware error event [ 858.878124][ T5608] Bluetooth: hci3: hardware error 0x00 [ 860.610435][T10343] Bluetooth: hci4: command tx timeout [ 860.701318][T10653] lo speed is unknown, defaulting to 1000 [ 860.749171][T10653] wg2 speed is unknown, defaulting to 1000 [ 861.274586][ T5608] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 867.990987][ T6349] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 868.295654][ T6349] usb 6-1: New USB device found: idVendor=04e6, idProduct=0005, bcdDevice=1.00 [ 868.297277][ T6349] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 868.297310][ T6349] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 868.549065][ T6349] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.549098][ T6349] usb 6-1: Product: syz [ 868.549116][ T6349] usb 6-1: Manufacturer: syz [ 868.549131][ T6349] usb 6-1: SerialNumber: syz [ 869.448401][ T6349] ums-sddr09 6-1:1.0: USB Mass Storage device detected [ 869.511344][ T6349] ums-sddr09 6-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 869.511344][ T6349] Please send a copy of this message to and [ 870.722698][T10653] bridge0: port 1(bridge_slave_0) entered blocking state [ 870.722824][T10653] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.723094][T10653] bridge_slave_0: entered allmulticast mode [ 870.729653][T10653] bridge_slave_0: entered promiscuous mode [ 870.769691][T10653] bridge0: port 2(bridge_slave_1) entered blocking state [ 870.769954][T10653] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.770174][T10653] bridge_slave_1: entered allmulticast mode [ 870.785031][T10653] bridge_slave_1: entered promiscuous mode [ 871.064573][T10653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 871.095087][T10653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 871.349714][T10653] team0: Port device team_slave_0 added [ 871.399761][T10653] team0: Port device team_slave_1 added [ 873.949239][T10653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 873.949260][T10653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 873.949291][T10653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 874.015044][T10653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 874.015063][T10653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 874.015095][T10653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 874.830361][T10653] hsr_slave_0: entered promiscuous mode [ 874.831737][T10653] hsr_slave_1: entered promiscuous mode [ 874.832663][T10653] debugfs: 'hsr0' already exists in 'hsr' [ 874.832689][T10653] Cannot create hsr debugfs directory [ 880.838078][ T6349] ums-sddr09 6-1:1.0: probe with driver ums-sddr09 failed with error -32 [ 881.003967][ T6349] usb 6-1: USB disconnect, device number 10 [ 881.772262][ T9] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 881.886664][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 882.037266][ T9] usb 7-1: device descriptor read/64, error -32 [ 882.570225][T10891] 9p: Bad value for 'rfdno' [ 883.694924][ T9] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 883.865736][ T9] usb 7-1: not running at top speed; connect to a high speed hub [ 883.865784][ T9] usb 7-1: New USB device found: idVendor=06cd, idProduct=0131, bcdDevice=1.00 [ 883.933133][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.935357][ T9] usb 7-1: Product: syz [ 883.935379][ T9] usb 7-1: Manufacturer: syz [ 883.935395][ T9] usb 7-1: SerialNumber: syz [ 884.209859][ T9] keyspan 7-1:1.0: Keyspan 4 port adapter converter detected [ 884.946637][T10653] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 885.381838][T10343] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 885.412873][T10343] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 885.414906][T10343] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 885.416228][T10343] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 885.418326][T10343] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 886.290515][ T9] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 886.331054][ T9] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 886.399054][ T9] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 886.438082][ T9] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 886.636940][ T9] usb 7-1: USB disconnect, device number 12 [ 886.918180][T10653] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 886.919062][ T9] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 886.952773][T10653] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 887.045956][ T9] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 887.096308][ T9] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 887.190084][ T9] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 887.254880][ T9] keyspan 7-1:1.0: device disconnected [ 887.350696][T10653] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 887.355749][T10653] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 887.802564][ T5608] Bluetooth: hci5: command tx timeout [ 887.837253][T10653] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 887.956512][T10653] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 888.194657][T10653] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 888.272017][ T9] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 888.639549][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 888.641969][ T9] usb 7-1: New USB device found: idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 888.644170][ T9] usb 7-1: config index 0 descriptor too short (expected 51443, got 18) [ 888.674388][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.674418][ T9] usb 7-1: Product: syz [ 888.674434][ T9] usb 7-1: Manufacturer: syz [ 888.674451][ T9] usb 7-1: SerialNumber: syz [ 888.753022][ T9] r8152-cfgselector 7-1: Unknown version 0x0000 [ 888.753053][ T9] r8152-cfgselector 7-1: config 0 descriptor?? [ 889.609172][ T5754] r8152-cfgselector 7-1: USB disconnect, device number 13 [ 890.056732][ T5608] Bluetooth: hci5: command tx timeout [ 890.689279][T10653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 890.921420][T10653] 8021q: adding VLAN 0 to HW filter on device team0 [ 890.982492][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 890.982603][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 891.173460][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 891.173619][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 892.377037][T10895] rxe_eth0 speed is unknown, defaulting to 1000 [ 892.423628][ T5608] Bluetooth: hci5: command tx timeout [ 894.651928][ T5608] Bluetooth: hci5: command tx timeout [ 894.837373][T10895] lo speed is unknown, defaulting to 1000 [ 894.862356][T10895] wg2 speed is unknown, defaulting to 1000 [ 896.904545][T10653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 898.992584][ T1342] ieee802154 phy1 wpan1: encryption failed: -22 [ 900.178777][T10895] bridge0: port 1(bridge_slave_0) entered blocking state [ 900.178921][T10895] bridge0: port 1(bridge_slave_0) entered disabled state [ 900.181398][T10895] bridge_slave_0: entered allmulticast mode [ 900.210924][T10895] bridge_slave_0: entered promiscuous mode [ 900.327494][T10895] bridge0: port 2(bridge_slave_1) entered blocking state [ 900.327648][T10895] bridge0: port 2(bridge_slave_1) entered disabled state [ 900.327901][T10895] bridge_slave_1: entered allmulticast mode [ 900.362004][T10895] bridge_slave_1: entered promiscuous mode [ 901.447033][T10895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 901.521657][T10895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 903.178524][T10895] team0: Port device team_slave_0 added [ 904.379009][T10895] team0: Port device team_slave_1 added [ 905.888204][T10999] autofs4:pid:10999:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(0.0), cmd(0xc0189374) [ 905.888240][T10999] autofs4:pid:10999:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 905.952305][T10895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 905.952326][T10895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 905.952358][T10895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 906.001000][T10653] veth0_vlan: entered promiscuous mode [ 906.038510][T10895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 906.038534][T10895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 906.038565][T10895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 906.578380][T10653] veth1_vlan: entered promiscuous mode [ 906.962460][T10895] hsr_slave_0: entered promiscuous mode [ 906.976429][T10895] hsr_slave_1: entered promiscuous mode [ 906.977572][T10895] debugfs: 'hsr0' already exists in 'hsr' [ 906.977601][T10895] Cannot create hsr debugfs directory [ 908.123222][ T6349] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 908.309125][ T6349] usb 6-1: not running at top speed; connect to a high speed hub [ 908.309170][ T6349] usb 6-1: New USB device found: idVendor=046d, idProduct=0825, bcdDevice=1.00 [ 908.311137][ T6349] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 908.311212][ T6349] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.511188][ T6349] uvcvideo 6-1:1.0: Found UVC 1.00 device (046d:0825) [ 909.610097][ T6349] uvcvideo 6-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 911.279243][T10653] veth0_macvtap: entered promiscuous mode [ 911.805296][ T6349] videodev: could not get a free minor [ 911.805320][ T6349] uvcvideo 6-1:1.1: Failed to register meta-cap device (-23). [ 912.231263][T10653] veth1_macvtap: entered promiscuous mode [ 912.295736][ T6349] usb 6-1: USB disconnect, device number 11 [ 913.001518][T10653] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 913.199103][T10653] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 913.341615][ T71] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.342227][ T71] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.342276][ T71] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.342319][ T71] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.853602][T10343] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 915.902697][T10343] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 915.922514][T10343] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 915.931236][T10343] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 915.936378][T10343] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 916.477533][T11041] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1186'. [ 918.335543][ T5608] Bluetooth: hci7: command tx timeout [ 920.578635][ T5608] Bluetooth: hci7: command tx timeout [ 922.839612][ T5608] Bluetooth: hci7: command tx timeout [ 924.232967][T10798] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 924.254280][T10798] block device autoloading is deprecated and will be removed. [ 924.463524][T10799] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 924.463551][T10799] block device autoloading is deprecated and will be removed. [ 925.098542][ T5608] Bluetooth: hci7: command tx timeout [ 926.573163][T11072] input: syz1 as /devices/virtual/input/input12 [ 928.119612][T11079] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 929.316224][T11089] 9p: Bad value for 'rfdno' [ 931.717201][T10895] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 931.917905][T10895] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 931.922119][T11088] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1197'. [ 932.089878][T10895] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 932.203550][T11096] 9p: Bad value for 'rfdno' [ 932.365721][T10895] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 932.385286][T10895] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 932.622385][T10653] syz-executor (10653) used greatest stack depth: 18536 bytes left [ 932.670789][T11100] capability: warning: `syz.2.1202' uses 32-bit capabilities (legacy support in use) [ 932.753920][T10895] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 932.765871][T10895] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 932.920308][T10895] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 933.822948][T11042] rxe_eth0 speed is unknown, defaulting to 1000 [ 934.359311][T10895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 935.209592][T10895] 8021q: adding VLAN 0 to HW filter on device team0 [ 935.263676][ T1180] bridge0: port 1(bridge_slave_0) entered blocking state [ 935.274779][ T1180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 935.324340][ T1180] bridge0: port 2(bridge_slave_1) entered blocking state [ 935.324532][ T1180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 936.125942][T11042] lo speed is unknown, defaulting to 1000 [ 936.242607][T11042] wg2 speed is unknown, defaulting to 1000 [ 940.365536][ T9] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 940.604217][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 940.605239][ T9] usb 7-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 940.608336][ T9] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 940.608368][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 940.608390][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 940.608432][ T9] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 940.608469][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.228699][ T9] usb 7-1: GET_CAPABILITIES returned 0 [ 941.228758][ T9] usbtmc 7-1:16.0: can't read capabilities [ 941.457210][ T9] usb 7-1: USB disconnect, device number 14 [ 944.183656][ T1019] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.930225][ T5756] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 946.135248][T10895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 946.272215][ T5756] usb 7-1: Using ep0 maxpacket: 16 [ 946.274396][ T5756] usb 7-1: New USB device found: idVendor=1b96, idProduct=0006, bcdDevice=0.00 [ 946.276525][ T5756] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 946.276563][ T5756] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 946.276593][ T5756] usb 7-1: config 0 interface 0 has no altsetting 0 [ 946.276629][ T5756] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.339369][ T5756] usb 7-1: config 0 descriptor?? [ 949.430845][ T5756] input: HID 1b96:0006 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:1B96:0006.0006/input/input13 [ 949.728471][T11184] program syz.5.1220 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 950.133734][ T5756] ntrig 0003:1B96:0006.0006: input,hidraw0: USB HID v0.53 Joystick [HID 1b96:0006] on usb-dummy_hcd.6-1/input0 [ 951.174432][ T5756] usb 7-1: USB disconnect, device number 15 [ 952.779064][T10343] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 952.841344][T10343] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 952.846856][T10343] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 952.866010][T10343] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 952.867474][T10343] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 954.607813][T11207] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1225'. [ 955.457502][ T1019] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.516867][ T5608] Bluetooth: hci3: command tx timeout [ 956.078597][T11217] 9p: Bad value for 'rfdno' [ 957.798304][ T5608] Bluetooth: hci3: command tx timeout [ 959.843774][T11222] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1230'. [ 959.870117][T11222] bridge0: port 2(bridge_slave_1) entered disabled state [ 960.026066][T10343] Bluetooth: hci3: command tx timeout [ 960.084649][T11042] bridge0: port 1(bridge_slave_0) entered blocking state [ 960.088111][T11042] bridge0: port 1(bridge_slave_0) entered disabled state [ 960.088346][T11042] bridge_slave_0: entered allmulticast mode [ 960.151542][T11042] bridge_slave_0: entered promiscuous mode [ 960.441280][T11042] bridge0: port 2(bridge_slave_1) entered blocking state [ 960.441434][T11042] bridge0: port 2(bridge_slave_1) entered disabled state [ 960.443504][T11042] bridge_slave_1: entered allmulticast mode [ 960.552959][T11042] bridge_slave_1: entered promiscuous mode [ 962.279488][ T5608] Bluetooth: hci3: command tx timeout [ 962.812998][T11042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 962.883374][T11042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 964.599439][T11042] team0: Port device team_slave_0 added [ 964.621894][T11042] team0: Port device team_slave_1 added [ 965.439971][T11199] rxe_eth0 speed is unknown, defaulting to 1000 [ 965.458058][T11042] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 965.458073][T11042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 965.458095][T11042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 965.580488][ T1342] ieee802154 phy1 wpan1: encryption failed: -22 [ 965.711463][T11042] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 965.711485][T11042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 965.711519][T11042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 966.549757][T11042] hsr_slave_0: entered promiscuous mode [ 966.556155][T11042] hsr_slave_1: entered promiscuous mode [ 966.566780][T11042] debugfs: 'hsr0' already exists in 'hsr' [ 966.566858][T11042] Cannot create hsr debugfs directory [ 968.708697][T11270] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1246'. [ 970.532136][ T1019] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.742915][T11270] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 971.742953][T11270] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 971.928275][T11270] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 971.928310][T11270] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 973.281914][T11199] lo speed is unknown, defaulting to 1000 [ 973.405120][T11199] wg2 speed is unknown, defaulting to 1000 [ 978.572291][ T5608] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 978.642879][ T5608] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 978.644640][ T5608] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 978.653896][ T5608] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 978.687833][ T5608] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 979.614381][T10895] syz-executor (10895) used greatest stack depth: 17584 bytes left [ 981.223811][T10343] Bluetooth: hci4: command tx timeout [ 981.298396][ T5608] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 981.358663][ T5608] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 981.368003][ T5608] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 981.415735][ T5608] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 981.447682][ T5608] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 983.436546][ T5608] Bluetooth: hci4: command tx timeout [ 983.868277][ T5608] Bluetooth: hci0: command tx timeout [ 985.719201][ T5608] Bluetooth: hci4: command tx timeout [ 986.122536][ T5608] Bluetooth: hci0: command tx timeout [ 987.161430][T11199] bridge0: port 1(bridge_slave_0) entered blocking state [ 987.161574][T11199] bridge0: port 1(bridge_slave_0) entered disabled state [ 987.161797][T11199] bridge_slave_0: entered allmulticast mode [ 987.197663][T11199] bridge_slave_0: entered promiscuous mode [ 987.396310][T11199] bridge0: port 2(bridge_slave_1) entered blocking state [ 987.442485][T11199] bridge0: port 2(bridge_slave_1) entered disabled state [ 987.464820][T11199] bridge_slave_1: entered allmulticast mode [ 987.646366][T10343] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 987.670452][T10343] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 987.693266][T10343] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 987.702294][T11199] bridge_slave_1: entered promiscuous mode [ 987.703052][T10343] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 987.716928][T11301] rxe_eth0 speed is unknown, defaulting to 1000 [ 987.730889][T10343] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 987.949686][T10343] Bluetooth: hci4: command tx timeout [ 988.381790][ T5608] Bluetooth: hci0: command tx timeout [ 989.253232][T11199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 989.391737][T11199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 989.789211][T11199] team0: Port device team_slave_0 added [ 989.834154][T11199] team0: Port device team_slave_1 added [ 990.200966][ T5608] Bluetooth: hci5: command tx timeout [ 990.631122][ T5608] Bluetooth: hci0: command tx timeout [ 991.007237][T11289] rxe_eth0 speed is unknown, defaulting to 1000 [ 991.027004][T11301] lo speed is unknown, defaulting to 1000 [ 991.111691][T11199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 991.111715][T11199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 991.111746][T11199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 991.129496][T11301] wg2 speed is unknown, defaulting to 1000 [ 991.141605][T11199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 991.141655][T11199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 991.141737][T11199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 992.462576][ T5608] Bluetooth: hci5: command tx timeout [ 992.520974][T11199] hsr_slave_0: entered promiscuous mode [ 992.522872][T11199] hsr_slave_1: entered promiscuous mode [ 992.524302][T11199] debugfs: 'hsr0' already exists in 'hsr' [ 992.524330][T11199] Cannot create hsr debugfs directory [ 994.706381][ T5608] Bluetooth: hci5: command tx timeout [ 995.323847][T11289] lo speed is unknown, defaulting to 1000 [ 995.356346][T11334] rxe_eth0 speed is unknown, defaulting to 1000 [ 995.608550][T11289] wg2 speed is unknown, defaulting to 1000 [ 996.967101][ T5608] Bluetooth: hci5: command tx timeout [ 999.473919][ T1019] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.265812][T11334] lo speed is unknown, defaulting to 1000 [ 1000.298173][T11334] wg2 speed is unknown, defaulting to 1000 [ 1002.805959][T10343] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1002.848089][T10343] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1002.853236][T10343] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1002.893905][T10343] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1002.894701][T10343] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1005.283805][ T5608] Bluetooth: hci6: command tx timeout [ 1007.521342][T11301] bridge0: port 1(bridge_slave_0) entered blocking state [ 1007.540066][ T5608] Bluetooth: hci6: command tx timeout [ 1007.596296][T11301] bridge0: port 1(bridge_slave_0) entered disabled state [ 1007.627022][T11301] bridge_slave_0: entered allmulticast mode [ 1007.719033][T11301] bridge_slave_0: entered promiscuous mode [ 1007.793505][T11301] bridge0: port 2(bridge_slave_1) entered blocking state [ 1007.793594][T11301] bridge0: port 2(bridge_slave_1) entered disabled state [ 1007.793762][T11301] bridge_slave_1: entered allmulticast mode [ 1007.824503][T11301] bridge_slave_1: entered promiscuous mode [ 1008.700931][T11353] rxe_eth0 speed is unknown, defaulting to 1000 [ 1008.729719][T11301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1009.006361][T11301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1009.426995][T11289] bridge0: port 1(bridge_slave_0) entered blocking state [ 1009.427130][T11289] bridge0: port 1(bridge_slave_0) entered disabled state [ 1009.427349][T11289] bridge_slave_0: entered allmulticast mode [ 1009.521431][T11289] bridge_slave_0: entered promiscuous mode [ 1009.792467][ T5608] Bluetooth: hci6: command tx timeout [ 1010.102613][T11289] bridge0: port 2(bridge_slave_1) entered blocking state [ 1010.102754][T11289] bridge0: port 2(bridge_slave_1) entered disabled state [ 1010.102997][T11289] bridge_slave_1: entered allmulticast mode [ 1010.132462][T11289] bridge_slave_1: entered promiscuous mode [ 1011.445031][T11301] team0: Port device team_slave_0 added [ 1011.446375][T11353] lo speed is unknown, defaulting to 1000 [ 1011.722419][T11301] team0: Port device team_slave_1 added [ 1011.730729][T11353] wg2 speed is unknown, defaulting to 1000 [ 1011.879817][T11289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1012.057572][ T5608] Bluetooth: hci6: command tx timeout [ 1012.097157][T11289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1012.525804][T11301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1012.525826][T11301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1012.525867][T11301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1012.738702][T11301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1012.738725][T11301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1012.738761][T11301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1013.170313][T11289] team0: Port device team_slave_0 added [ 1013.229312][T11289] team0: Port device team_slave_1 added [ 1014.241696][T11289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1014.241717][T11289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1014.241749][T11289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1014.805688][T11289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1014.805710][T11289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1014.805743][T11289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1014.904399][T11301] hsr_slave_0: entered promiscuous mode [ 1015.131999][T11301] hsr_slave_1: entered promiscuous mode [ 1015.148205][T11301] debugfs: 'hsr0' already exists in 'hsr' [ 1015.148238][T11301] Cannot create hsr debugfs directory [ 1015.739680][T10343] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1015.801455][T10343] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1015.811952][T10343] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1015.827636][T10343] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1015.837291][T10343] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1017.942352][T11334] bridge0: port 1(bridge_slave_0) entered blocking state [ 1017.942487][T11334] bridge0: port 1(bridge_slave_0) entered disabled state [ 1017.942757][T11334] bridge_slave_0: entered allmulticast mode [ 1018.172470][T11334] bridge_slave_0: entered promiscuous mode [ 1018.202699][ T5608] Bluetooth: hci8: command tx timeout [ 1018.551787][T11289] hsr_slave_0: entered promiscuous mode [ 1018.558818][T11289] hsr_slave_1: entered promiscuous mode [ 1018.574253][T11289] debugfs: 'hsr0' already exists in 'hsr' [ 1018.574287][T11289] Cannot create hsr debugfs directory [ 1018.577100][T11334] bridge0: port 2(bridge_slave_1) entered blocking state [ 1018.577239][T11334] bridge0: port 2(bridge_slave_1) entered disabled state [ 1018.577527][T11334] bridge_slave_1: entered allmulticast mode [ 1018.580290][T11334] bridge_slave_1: entered promiscuous mode [ 1019.737075][T11334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1020.136034][T11334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1020.456521][ T5608] Bluetooth: hci8: command tx timeout [ 1021.957258][T11334] team0: Port device team_slave_0 added [ 1022.716315][ T5608] Bluetooth: hci8: command tx timeout [ 1024.965380][ T5608] Bluetooth: hci8: command tx timeout [ 1025.350824][T11334] team0: Port device team_slave_1 added [ 1026.871435][T11388] rxe_eth0 speed is unknown, defaulting to 1000 [ 1027.212881][T11334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1027.212903][T11334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1027.212935][T11334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1028.314333][T11334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1028.314356][T11334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1028.314389][T11334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1029.536613][T11388] lo speed is unknown, defaulting to 1000 [ 1029.706794][T11388] wg2 speed is unknown, defaulting to 1000 [ 1029.900229][T11334] hsr_slave_0: entered promiscuous mode [ 1029.910919][T11334] hsr_slave_1: entered promiscuous mode [ 1029.932478][T11334] debugfs: 'hsr0' already exists in 'hsr' [ 1029.932515][T11334] Cannot create hsr debugfs directory [ 1032.171679][ T1342] ieee802154 phy1 wpan1: encryption failed: -22 [ 1032.421918][T11353] bridge0: port 1(bridge_slave_0) entered blocking state [ 1032.422074][T11353] bridge0: port 1(bridge_slave_0) entered disabled state [ 1032.422280][T11353] bridge_slave_0: entered allmulticast mode [ 1032.424962][T11353] bridge_slave_0: entered promiscuous mode [ 1032.810242][T11353] bridge0: port 2(bridge_slave_1) entered blocking state [ 1032.810379][T11353] bridge0: port 2(bridge_slave_1) entered disabled state [ 1032.810607][T11353] bridge_slave_1: entered allmulticast mode [ 1032.870861][T11353] bridge_slave_1: entered promiscuous mode [ 1033.441387][T11353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1033.897013][T11353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1034.781953][T11353] team0: Port device team_slave_0 added [ 1034.803345][T11353] team0: Port device team_slave_1 added [ 1035.181574][T11353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1035.181594][T11353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1035.181626][T11353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1035.852859][T11353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1035.852881][T11353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1035.852911][T11353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1036.981579][T11353] hsr_slave_0: entered promiscuous mode [ 1036.989765][T11353] hsr_slave_1: entered promiscuous mode [ 1037.084521][T11353] debugfs: 'hsr0' already exists in 'hsr' [ 1037.084559][T11353] Cannot create hsr debugfs directory [ 1043.534991][T10343] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1043.618510][T10343] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1043.626293][T10343] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1043.652106][T10343] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1043.653986][T10343] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1044.572500][T11388] bridge0: port 1(bridge_slave_0) entered blocking state [ 1044.572639][T11388] bridge0: port 1(bridge_slave_0) entered disabled state [ 1044.572869][T11388] bridge_slave_0: entered allmulticast mode [ 1044.594264][T11388] bridge_slave_0: entered promiscuous mode [ 1045.047155][T11388] bridge0: port 2(bridge_slave_1) entered blocking state [ 1045.047485][T11388] bridge0: port 2(bridge_slave_1) entered disabled state [ 1045.047785][T11388] bridge_slave_1: entered allmulticast mode [ 1045.052287][T11388] bridge_slave_1: entered promiscuous mode [ 1045.740353][T11388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1045.792342][T11388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1046.120653][T10343] Bluetooth: hci1: command tx timeout [ 1046.610011][ T1019] bridge_slave_1: left allmulticast mode [ 1046.610053][ T1019] bridge_slave_1: left promiscuous mode [ 1046.610371][ T1019] bridge0: port 2(bridge_slave_1) entered disabled state [ 1046.785033][ T5608] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1046.819092][ T5608] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1046.820669][ T5608] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1046.823716][ T5608] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1046.868413][ T5608] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1048.364379][ T1019] bridge_slave_0: left allmulticast mode [ 1048.364421][ T1019] bridge_slave_0: left promiscuous mode [ 1048.364701][ T1019] bridge0: port 1(bridge_slave_0) entered disabled state [ 1048.374815][T10343] Bluetooth: hci1: command tx timeout [ 1049.339517][T10343] Bluetooth: hci2: command tx timeout [ 1050.629166][T10343] Bluetooth: hci1: command tx timeout [ 1051.409305][T10343] Bluetooth: hci7: command 0x0406 tx timeout [ 1051.590421][T10343] Bluetooth: hci2: command tx timeout [ 1052.286823][T10343] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1052.393660][T10343] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1052.418067][T10343] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1052.424543][T10343] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1052.425309][T10343] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1052.883119][ T5608] Bluetooth: hci1: command tx timeout [ 1053.838483][ T5608] Bluetooth: hci2: command tx timeout [ 1054.964444][ T5608] Bluetooth: hci9: command tx timeout [ 1055.487313][ T1019] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1055.825646][ T1019] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1055.899930][ T1019] bond0 (unregistering): Released all slaves [ 1056.091102][ T5608] Bluetooth: hci2: command tx timeout [ 1056.546950][T11388] team0: Port device team_slave_0 added [ 1057.010182][T11388] team0: Port device team_slave_1 added [ 1057.218604][ T5608] Bluetooth: hci9: command tx timeout [ 1059.483359][ T5608] Bluetooth: hci9: command tx timeout [ 1059.643249][T11388] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1059.643268][T11388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1059.643299][T11388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1059.761181][T11388] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1059.761202][T11388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1059.761232][T11388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1060.057687][T11416] rxe_eth0 speed is unknown, defaulting to 1000 [ 1061.246138][T11388] hsr_slave_0: entered promiscuous mode [ 1061.249645][T11388] hsr_slave_1: entered promiscuous mode [ 1061.270056][T11388] debugfs: 'hsr0' already exists in 'hsr' [ 1061.270088][T11388] Cannot create hsr debugfs directory [ 1061.738052][ T5608] Bluetooth: hci9: command tx timeout [ 1062.963965][T11433] rxe_eth0 speed is unknown, defaulting to 1000 [ 1062.965838][T11416] lo speed is unknown, defaulting to 1000 [ 1063.134923][T11416] wg2 speed is unknown, defaulting to 1000 [ 1064.098405][ T58] netdevsim netdevsim8 eth13: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.111670][ T58] netdevsim netdevsim8 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.112010][ T58] netdevsim netdevsim8 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.080195][T11427] rxe_eth0 speed is unknown, defaulting to 1000 [ 1065.084656][T11433] lo speed is unknown, defaulting to 1000 [ 1068.096820][ T5266] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1068.746753][T11433] wg2 speed is unknown, defaulting to 1000 [ 1069.397510][T10343] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1069.541247][T10343] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1069.573325][T10343] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1069.604130][T10343] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1069.608428][T10343] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1070.222268][T11427] lo speed is unknown, defaulting to 1000 [ 1072.217799][ T5608] Bluetooth: hci10: command tx timeout [ 1073.624721][T11427] wg2 speed is unknown, defaulting to 1000 [ 1074.472991][ T5608] Bluetooth: hci10: command tx timeout [ 1076.636678][T11473] rxe_eth0 speed is unknown, defaulting to 1000 [ 1076.737026][ T5608] Bluetooth: hci10: command tx timeout [ 1077.328721][ T5266] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1078.917005][T11416] bridge0: port 1(bridge_slave_0) entered blocking state [ 1078.917241][T11416] bridge0: port 1(bridge_slave_0) entered disabled state [ 1078.917505][T11416] bridge_slave_0: entered allmulticast mode [ 1078.923565][T11416] bridge_slave_0: entered promiscuous mode [ 1078.967198][T11473] lo speed is unknown, defaulting to 1000 [ 1078.981941][ T5608] Bluetooth: hci10: command tx timeout [ 1079.079831][T11416] bridge0: port 2(bridge_slave_1) entered blocking state [ 1079.079976][T11416] bridge0: port 2(bridge_slave_1) entered disabled state [ 1079.080203][T11416] bridge_slave_1: entered allmulticast mode [ 1079.103373][T11416] bridge_slave_1: entered promiscuous mode [ 1079.168039][T11473] wg2 speed is unknown, defaulting to 1000 [ 1079.949871][T11416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1080.536933][T11416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1080.849110][T10343] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1080.891506][T10343] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1080.915121][T10343] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1080.948993][T10343] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1080.949813][T10343] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1081.509533][T11416] team0: Port device team_slave_0 added [ 1082.036021][T11416] team0: Port device team_slave_1 added [ 1083.071548][T11416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1083.071575][T11416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1083.071627][T11416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1083.372850][ T5608] Bluetooth: hci11: command tx timeout [ 1084.014183][T11416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1084.014207][T11416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1084.014239][T11416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1084.568088][T11433] bridge0: port 1(bridge_slave_0) entered blocking state [ 1084.568218][T11433] bridge0: port 1(bridge_slave_0) entered disabled state [ 1084.568484][T11433] bridge_slave_0: entered allmulticast mode [ 1084.687405][T11433] bridge_slave_0: entered promiscuous mode [ 1084.840365][T11433] bridge0: port 2(bridge_slave_1) entered blocking state [ 1084.840555][T11433] bridge0: port 2(bridge_slave_1) entered disabled state [ 1084.840854][T11433] bridge_slave_1: entered allmulticast mode [ 1084.873329][T11433] bridge_slave_1: entered promiscuous mode [ 1085.328409][T11416] hsr_slave_0: entered promiscuous mode [ 1085.349970][T11416] hsr_slave_1: entered promiscuous mode [ 1085.358802][T11416] debugfs: 'hsr0' already exists in 'hsr' [ 1085.358831][T11416] Cannot create hsr debugfs directory [ 1085.570482][ T5608] Bluetooth: hci11: command tx timeout [ 1086.028873][T11433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1086.276209][T11433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1086.721879][T11513] rxe_eth0 speed is unknown, defaulting to 1000 [ 1087.824350][T10343] Bluetooth: hci11: command tx timeout [ 1087.884882][ T5266] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1088.211825][T11433] team0: Port device team_slave_0 added [ 1088.557121][T11433] team0: Port device team_slave_1 added [ 1089.025528][T11427] bridge0: port 1(bridge_slave_0) entered blocking state [ 1089.025763][T11427] bridge0: port 1(bridge_slave_0) entered disabled state [ 1089.026012][T11427] bridge_slave_0: entered allmulticast mode [ 1089.055057][T11427] bridge_slave_0: entered promiscuous mode [ 1089.126765][T11513] lo speed is unknown, defaulting to 1000 [ 1089.422402][T11427] bridge0: port 2(bridge_slave_1) entered blocking state [ 1089.422539][T11427] bridge0: port 2(bridge_slave_1) entered disabled state [ 1089.422766][T11427] bridge_slave_1: entered allmulticast mode [ 1089.452287][T11427] bridge_slave_1: entered promiscuous mode [ 1089.454690][T11513] wg2 speed is unknown, defaulting to 1000 [ 1089.611696][T11433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1089.611717][T11433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1089.611760][T11433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1089.905050][T10343] Bluetooth: hci3: command 0x0406 tx timeout [ 1090.013346][T11433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1090.013366][T11433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1090.013397][T11433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1090.078355][T10343] Bluetooth: hci11: command tx timeout [ 1091.733336][T11427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1092.375353][T11427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1094.678899][T11427] team0: Port device team_slave_0 added [ 1094.721858][T11433] hsr_slave_0: entered promiscuous mode [ 1094.734234][T11433] hsr_slave_1: entered promiscuous mode [ 1094.754868][T11433] debugfs: 'hsr0' already exists in 'hsr' [ 1094.754902][T11433] Cannot create hsr debugfs directory [ 1094.982560][T11427] team0: Port device team_slave_1 added [ 1096.149958][T11427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1096.149979][T11427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1096.150011][T11427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1096.467920][T11427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1096.467940][T11427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1096.467972][T11427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1096.946952][T11473] bridge0: port 1(bridge_slave_0) entered blocking state [ 1096.947089][T11473] bridge0: port 1(bridge_slave_0) entered disabled state [ 1096.947347][T11473] bridge_slave_0: entered allmulticast mode [ 1096.968502][T11473] bridge_slave_0: entered promiscuous mode [ 1097.017870][T11473] bridge0: port 2(bridge_slave_1) entered blocking state [ 1097.018004][T11473] bridge0: port 2(bridge_slave_1) entered disabled state [ 1097.018237][T11473] bridge_slave_1: entered allmulticast mode [ 1097.024473][T11473] bridge_slave_1: entered promiscuous mode [ 1097.991560][T11427] hsr_slave_0: entered promiscuous mode [ 1097.997774][T11427] hsr_slave_1: entered promiscuous mode [ 1098.067530][T11427] debugfs: 'hsr0' already exists in 'hsr' [ 1098.067565][T11427] Cannot create hsr debugfs directory [ 1098.624833][T11473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1098.764585][ T1342] ieee802154 phy1 wpan1: encryption failed: -22 [ 1098.996542][T11473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1100.199859][T11473] team0: Port device team_slave_0 added [ 1100.476022][T11473] team0: Port device team_slave_1 added [ 1102.464220][T11473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1102.464240][T11473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1102.464272][T11473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1102.550135][T11473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1102.550154][T11473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1102.550187][T11473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1104.329185][T11473] hsr_slave_0: entered promiscuous mode [ 1104.336153][T11473] hsr_slave_1: entered promiscuous mode [ 1104.339324][T11473] debugfs: 'hsr0' already exists in 'hsr' [ 1104.339358][T11473] Cannot create hsr debugfs directory [ 1106.080083][T11513] bridge0: port 1(bridge_slave_0) entered blocking state [ 1106.093630][T11513] bridge0: port 1(bridge_slave_0) entered disabled state [ 1106.094363][T11513] bridge_slave_0: entered allmulticast mode [ 1106.181640][T11513] bridge_slave_0: entered promiscuous mode [ 1106.326677][T11513] bridge0: port 2(bridge_slave_1) entered blocking state [ 1106.326813][T11513] bridge0: port 2(bridge_slave_1) entered disabled state [ 1106.327063][T11513] bridge_slave_1: entered allmulticast mode [ 1106.332930][T11513] bridge_slave_1: entered promiscuous mode [ 1107.091685][T11513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1108.181693][T11513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1109.352385][T10343] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1109.429342][T10343] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1109.455557][T10343] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1109.502860][T10343] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1109.508471][T10343] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1109.661503][T11513] team0: Port device team_slave_0 added [ 1109.806919][T11513] team0: Port device team_slave_1 added [ 1110.272929][T11513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1110.272950][T11513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1110.272982][T11513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1110.287096][T11513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1110.287123][T11513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1110.287203][T11513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1111.094521][T11513] hsr_slave_0: entered promiscuous mode [ 1111.096067][T11513] hsr_slave_1: entered promiscuous mode [ 1111.097191][T11513] debugfs: 'hsr0' already exists in 'hsr' [ 1111.097218][T11513] Cannot create hsr debugfs directory [ 1111.840569][ T5608] Bluetooth: hci12: command tx timeout [ 1112.104461][ T5608] Bluetooth: hci4: command 0x0406 tx timeout [ 1112.812705][T11577] rxe_eth0 speed is unknown, defaulting to 1000 [ 1113.259446][ T4921] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1113.872239][ T4921] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1113.929765][ T4921] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1113.953042][ T4921] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1113.963743][ T4921] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1114.096469][ T5608] Bluetooth: hci12: command tx timeout [ 1116.349908][T10343] Bluetooth: hci12: command tx timeout [ 1116.696642][T10343] Bluetooth: hci13: command tx timeout [ 1117.644618][T11604] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1117.664473][ T5618] Bluetooth: hci0: command 0x0406 tx timeout [ 1117.751766][T11604] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1117.755475][T11604] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1117.757434][T11604] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1117.777383][T11604] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1118.564224][T11042] netdevsim netdevsim8 eth15 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.606436][ T5608] Bluetooth: hci12: command tx timeout [ 1118.952161][ T5608] Bluetooth: hci13: command tx timeout [ 1119.223061][T11577] lo speed is unknown, defaulting to 1000 [ 1119.230984][T11577] wg2 speed is unknown, defaulting to 1000 [ 1119.999248][ T5608] Bluetooth: hci14: command tx timeout [ 1120.360489][T11602] rxe_eth0 speed is unknown, defaulting to 1000 [ 1121.204741][T11604] Bluetooth: hci13: command tx timeout [ 1122.255666][T11604] Bluetooth: hci14: command tx timeout [ 1123.286178][T11604] Bluetooth: hci5: command 0x0406 tx timeout [ 1123.469979][T11604] Bluetooth: hci13: command tx timeout [ 1124.511783][T11604] Bluetooth: hci14: command tx timeout [ 1124.756820][T11625] rxe_eth0 speed is unknown, defaulting to 1000 [ 1124.757119][T11602] lo speed is unknown, defaulting to 1000 [ 1124.935168][T11602] wg2 speed is unknown, defaulting to 1000 [ 1126.764275][ T5608] Bluetooth: hci14: command tx timeout [ 1128.307485][T11577] bridge0: port 1(bridge_slave_0) entered blocking state [ 1128.307645][T11577] bridge0: port 1(bridge_slave_0) entered disabled state [ 1128.307917][T11577] bridge_slave_0: entered allmulticast mode [ 1128.358696][T11577] bridge_slave_0: entered promiscuous mode [ 1128.409185][T11577] bridge0: port 2(bridge_slave_1) entered blocking state [ 1128.409429][T11577] bridge0: port 2(bridge_slave_1) entered disabled state [ 1128.410066][T11577] bridge_slave_1: entered allmulticast mode [ 1128.451380][T11577] bridge_slave_1: entered promiscuous mode [ 1128.851098][T11577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1128.978710][T11577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1128.992030][T11625] lo speed is unknown, defaulting to 1000 [ 1129.488108][T11625] wg2 speed is unknown, defaulting to 1000 [ 1131.258179][T11577] team0: Port device team_slave_0 added [ 1131.454136][T11577] team0: Port device team_slave_1 added [ 1131.953954][T11577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1131.953975][T11577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1131.954007][T11577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1132.076062][T11577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1132.076083][T11577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1132.076123][T11577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1133.918348][T11577] hsr_slave_0: entered promiscuous mode [ 1133.919950][T11577] hsr_slave_1: entered promiscuous mode [ 1133.959912][T11577] debugfs: 'hsr0' already exists in 'hsr' [ 1133.959947][T11577] Cannot create hsr debugfs directory [ 1135.137052][T11604] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1135.187467][T11604] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1135.189380][T11604] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1135.248705][T11604] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1135.259903][T11604] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1137.765361][T11604] Bluetooth: hci15: command tx timeout [ 1139.039350][T11602] bridge0: port 1(bridge_slave_0) entered blocking state [ 1139.039600][T11602] bridge0: port 1(bridge_slave_0) entered disabled state [ 1139.039879][T11602] bridge_slave_0: entered allmulticast mode [ 1139.094979][T11602] bridge_slave_0: entered promiscuous mode [ 1139.508279][T11602] bridge0: port 2(bridge_slave_1) entered blocking state [ 1139.509422][T11602] bridge0: port 2(bridge_slave_1) entered disabled state [ 1139.509708][T11602] bridge_slave_1: entered allmulticast mode [ 1139.585919][T11602] bridge_slave_1: entered promiscuous mode [ 1139.857985][T11604] Bluetooth: hci6: command 0x0406 tx timeout [ 1140.018753][T11604] Bluetooth: hci15: command tx timeout [ 1140.512515][T11602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1140.856998][T11602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1141.592241][T11625] bridge0: port 1(bridge_slave_0) entered blocking state [ 1141.592420][T11625] bridge0: port 1(bridge_slave_0) entered disabled state [ 1141.592713][T11625] bridge_slave_0: entered allmulticast mode [ 1141.648746][T11625] bridge_slave_0: entered promiscuous mode [ 1141.916532][T11625] bridge0: port 2(bridge_slave_1) entered blocking state [ 1141.916672][T11625] bridge0: port 2(bridge_slave_1) entered disabled state [ 1141.916970][T11625] bridge_slave_1: entered allmulticast mode [ 1141.947430][T11625] bridge_slave_1: entered promiscuous mode [ 1141.998878][T11602] team0: Port device team_slave_0 added [ 1141.999256][T11677] rxe_eth0 speed is unknown, defaulting to 1000 [ 1142.273319][ T5608] Bluetooth: hci15: command tx timeout [ 1142.280310][T11602] team0: Port device team_slave_1 added [ 1143.215860][T11625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1143.936243][T11625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1143.938909][T11677] lo speed is unknown, defaulting to 1000 [ 1143.953882][T11602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1143.959547][T11602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1143.959646][T11602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1144.130855][T11677] wg2 speed is unknown, defaulting to 1000 [ 1144.173574][T11602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1144.173596][T11602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1144.173627][T11602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1144.526505][T11625] team0: Port device team_slave_0 added [ 1144.528524][ T5608] Bluetooth: hci15: command tx timeout [ 1144.584962][T11625] team0: Port device team_slave_1 added [ 1145.614555][T11625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1145.614577][T11625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1145.614621][T11625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1146.423978][T11602] hsr_slave_0: entered promiscuous mode [ 1146.425322][T11602] hsr_slave_1: entered promiscuous mode [ 1146.426132][T11602] debugfs: 'hsr0' already exists in 'hsr' [ 1146.426160][T11602] Cannot create hsr debugfs directory [ 1146.472179][T11625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1146.472201][T11625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1146.472233][T11625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1148.143554][ T5608] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1148.359840][ T5608] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1148.364007][ T5608] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1148.502769][ T5608] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1148.519116][ T5608] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1149.056364][T11625] hsr_slave_0: entered promiscuous mode [ 1149.106091][T11625] hsr_slave_1: entered promiscuous mode [ 1149.116543][T11625] debugfs: 'hsr0' already exists in 'hsr' [ 1149.116593][T11625] Cannot create hsr debugfs directory [ 1150.944525][T11604] Bluetooth: hci8: command 0x0406 tx timeout [ 1150.945054][T11604] Bluetooth: hci16: command tx timeout [ 1153.209957][T10343] Bluetooth: hci16: command tx timeout [ 1153.384646][T11706] rxe_eth0 speed is unknown, defaulting to 1000 [ 1155.353200][T11706] lo speed is unknown, defaulting to 1000 [ 1155.388017][T11706] wg2 speed is unknown, defaulting to 1000 [ 1155.463345][T10343] Bluetooth: hci16: command tx timeout [ 1156.866354][T11677] bridge0: port 1(bridge_slave_0) entered blocking state [ 1156.868228][T11677] bridge0: port 1(bridge_slave_0) entered disabled state [ 1156.870249][T11677] bridge_slave_0: entered allmulticast mode [ 1156.945127][T11677] bridge_slave_0: entered promiscuous mode [ 1157.322889][T11677] bridge0: port 2(bridge_slave_1) entered blocking state [ 1157.323022][T11677] bridge0: port 2(bridge_slave_1) entered disabled state [ 1157.323679][T11677] bridge_slave_1: entered allmulticast mode [ 1157.544097][T11677] bridge_slave_1: entered promiscuous mode [ 1157.706475][T10343] Bluetooth: hci16: command tx timeout [ 1157.918135][T11677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1158.039598][T11677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1158.423017][T11677] team0: Port device team_slave_0 added [ 1158.569470][T11677] team0: Port device team_slave_1 added [ 1159.685712][T11677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1159.685733][T11677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1159.685764][T11677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1159.761952][T11677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1159.761983][T11677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1159.762014][T11677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1161.174516][ T38] INFO: task syz-executor:11199 blocked for more than 143 seconds. [ 1161.174550][ T38] Tainted: G L Y syzkaller #0 [ 1161.174564][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1161.174575][ T38] task:syz-executor state:D stack:17688 pid:11199 tgid:11199 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1161.174634][ T38] Call Trace: [ 1161.174643][ T38] [ 1161.174659][ T38] __schedule+0x171d/0x56e0 [ 1161.174718][ T38] ? __pfx___schedule+0x10/0x10 [ 1161.174759][ T38] rt_mutex_schedule+0x76/0xf0 [ 1161.174794][ T38] rt_mutex_slowlock_block+0x540/0x6a0 [ 1161.174838][ T38] ? rt_mutex_slowlock_block+0x33f/0x6a0 [ 1161.174882][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 1161.174919][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 1161.174955][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1161.175009][ T38] ? del_device_store+0xd6/0x370 [ 1161.175050][ T38] ? del_device_store+0xd6/0x370 [ 1161.175081][ T38] mutex_lock_nested+0x163/0x1d0 [ 1161.175112][ T38] ? sysfs_file_kobj+0x1a/0x230 [ 1161.175149][ T38] del_device_store+0xd6/0x370 [ 1161.175183][ T38] ? sysfs_file_kobj+0x1a/0x230 [ 1161.175215][ T38] ? __pfx_del_device_store+0x10/0x10 [ 1161.175249][ T38] ? sysfs_file_kobj+0x1e4/0x230 [ 1161.175282][ T38] ? sysfs_kf_write+0x166/0x260 [ 1161.175319][ T38] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1161.175350][ T38] kernfs_fop_write_iter+0x3a5/0x540 [ 1161.175385][ T38] vfs_write+0x61e/0xbb0 [ 1161.175435][ T38] ? __pfx_vfs_write+0x10/0x10 [ 1161.175469][ T38] ? do_sys_openat2+0x18d/0x200 [ 1161.175492][ T38] ? kmem_cache_free+0x187/0x6d0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1161.175534][ T38] ? fdget+0x171/0x250 [ 1161.175570][ T38] ksys_write+0x156/0x270 [ 1161.175604][ T38] ? __pfx_ksys_write+0x10/0x10 [ 1161.175649][ T38] do_syscall_64+0x166/0x520 [ 1161.175676][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1161.175701][ T38] ? clear_bhb_loop+0x70/0xc0 [ 1161.175730][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1161.175753][ T38] RIP: 0033:0x7fe06590fd8e [ 1161.175774][ T38] RSP: 002b:00007fff5b098c18 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1161.175808][ T38] RAX: ffffffffffffffda RBX: 00005555821a6500 RCX: 00007fe06590fd8e [ 1161.175846][ T38] RDX: 0000000000000001 RSI: 00007fff5b098ca0 RDI: 0000000000000005 [ 1161.175861][ T38] RBP: 00007fe0659e73e4 R08: 0000000000000000 R09: 0000000000000000 [ 1161.175875][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1161.175888][ T38] R13: 00007fff5b098ca0 R14: 00007fff5b0994e0 R15: 0000000000000003 [ 1161.289553][ T38] [ 1161.289641][ T38] [ 1161.289641][ T38] Showing all locks held in the system: [ 1161.289655][ T38] locks held by rcuc/1/27: 4, last CPU#1: [ 1161.289673][ T38] #0: ffffffff8f255b80 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1161.289748][ T38] #1: ffffffff8f3c1680 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1161.289818][ T38] #2: ffffffff8f3c17a0 (rcu_callback){....}-{0:0}, at: rcu_cpu_kthread+0x217/0x1700 [ 1161.289877][ T38] #3: ffffffff8f3c1680 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1161.289963][ T38] locks held by pr/ttyS0/37: 3, last CPU#0: [ 1161.311721][ T38] #0: ffffffff8f29b058 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 1161.311865][ T38] #1: ffffffff9b13ef38 (&port_lock_key){+.+.}-{3:3}, at: nbcon_kthread_func+0x6ac/0x8d0 [ 1161.312068][ T38] #2: ffffffff8f3c1680 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1161.312252][ T38] locks held by khungtaskd/38: 1, last CPU# ** replaying previous printk message ** [ 1161.312252][ T38] locks held by khungtaskd/38: 1, last CPU#1: [ 1161.312295][ T38] #0: ffffffff8f3c1680 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1161.312456][ T38] locks held by kworker/u8:3/58: 1, last CPU#1: [ 1161.312500][ T38] #0: ffffffff8f3c1680 (rcu_read_lock){....}-{1:3}, at: process_scheduled_works+0x97a/0x1630 [ 1161.312689][ T38] locks held by kworker/u8:4/71: 17, last CPU#0: [ 1161.312735][ T38] #0: ffff88813fe3c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1161.312913][ T38] #1: ffffc9000156fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1161.313123][ T38] #2: ffff8880278da310 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xca0 [ 1161.313309][ T38] #3: ffff888042909120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xca0 [ 1161.313469][ T38] #4: ffffffff8f3c1680 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1161.313562][ T38] #5: ffffffff8f3c1680 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1161.313624][ T38] #6: ffff8880b843e480 ((process_queue_bh_lock)){+...}-{3:3}, at: process_backlog+0x261/0xc50 [ 1161.313690][ T38] #7: ffffffff8f3c1680 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 [ 1161.313745][ T38] #8: ffffffff8f3c1680 (rcu_read_lock){....}-{1:3}, at: ip_route_output_key_hash+0xd8/0x2a0 [ 1161.313827][ T38] #9: ffffffff8f3c1680 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1161.313888][ T38] #10: ffffffff8f255b80 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1161.313949][ T38] #11: ffffffff8f3c16e0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2a0/0x3a70 [ 1161.314035][ T38] #12: ffffffff8f3c1680 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1161.314116][ T38] #13: ffff8880b843e690 (_T->lock){....}-{2:2}, at: rt_mutex_slowunlock+0xbf/0xa30 [ 1161.314191][ T38] #14: ffffffff8f255b80 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1161.314255][ T38] #15: ffffffff8f3c16e0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2a0/0x3a70 [ 1161.314315][ T38] #16: ffffffff8f3c1680 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1161.314401][ T38] locks held by kworker/u8:8/1019: 6, last CPU#0: [ 1161.314418][ T38] #0: ffff88801c288940 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1161.314518][ T38] #1: ffffc90006377c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1161.314593][ T38] #2: ffffffff907f7ba0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 1161.323084][ T38] #3: ffff88813fe47348 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140 [ 1161.323151][ T38] #4: ffff88813fe47238 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x4e/0x140 [ 1161.323222][ T38] #5: ffffffff8f3c1680 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1161.323289][ T38] locks held by kworker/u8:14/1193: 9, last CPU#1: [ 1161.323306][ T38] #0: ffff88813fe3c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1161.323370][ T38] #1: ffffc90006b47c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1161.323433][ T38] #2: ffff888028e5a310 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xca0 [ 1161.323495][ T38] #3: ffff888039279d20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xca0 [ 1161.323563][ T38] #4: ffffffff8f3c1680 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1161.323630][ T38] #5: ffffffff8f3c1680 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1161.323694][ T38] #6: ffffffff8f3c1680 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x261/0xc50 [ 1161.323760][ T38] #7: ffffffff8f3c1680 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 [ 1161.323818][ T38] #8: ffffffff8f3c1680 (rcu_read_lock){....}-{1:3}, at: ip_route_output_key_hash+0xd8/0x2a0 [ 1161.323906][ T38] locks held by getty/5360: 2, on CPU#0: [ 1161.323923][ T38] #0: ffff88803625e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1161.323988][ T38] #1: ffffc900044e32e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 1161.324048][ T38] locks held by syz-executor/5592: 4, last CPU#0: [ 1161.324065][ T38] #0: ffff888034d7b308 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 1161.324129][ T38] #1: ffff8880362a6688 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1ff/0x1490 [ 1161.324186][ T38] #2: ffffffff8f516370 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1161.324251][ T38] #3: ffffffff8f3c1680 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1161.324320][ T38] locks held by kworker/1:4/5754: 3, last CPU#1: [ 1161.324336][ T38] #0: ffff88813ff3a540 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1161.324406][ T38] #1: ffffc90005e5fc40 ((gc_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1161.324472][ T38] #2: ffffffff8ff222b8 ("ratelimiter_table_lock"){+.+.}-{3:3}, at: wg_ratelimiter_gc_entries+0x5d/0x470 [ 1161.324551][ T38] locks held by kworker/u8:18/6560: 2, last CPU#1: [ 1161.324567][ T38] #0: ffff88813fe3c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1161.324636][ T38] #1: ffffc900049dfc40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1161.324711][ T38] locks held by kworker/u8:19/7751: 5, last CPU#1: [ 1161.324727][ T38] #0: ffff88813fe3c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1161.324795][ T38] #1: ffffc900048bfc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1161.324871][ T38] #2: ffff888028ce4310 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xca0 [ 1161.324940][ T38] #3: ffff888062b7f920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xca0 [ 1161.325004][ T38] #4: ffffffff8f3c1680 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1161.325076][ T38] locks held by kworker/u8:21/8439: 5, last CPU#0: [ 1161.325093][ T38] #0: ffff8880342e7940 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1161.325161][ T38] #1: ffffc900065a7c40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1161.325229][ T38] #2: ffffffff8f255b80 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1161.325293][ T38] #3: ffffffff8f3c1680 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1161.325373][ T38] #4: ffffffff8f3c1680 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1161.325443][ T38] locks held by syz-executor/11042: 7, on CPU#0: [ 1161.325460][ T38] #0: ffff8880378b8510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1161.337041][ T38] #1: ffff8880429e8078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1161.337108][ T38] #2: ffff88802ab8d788 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1161.337179][ T38] #3: ffffffff90059b78 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1161.337248][ T38] #4: ffff88803d098160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xa9/0x7d0 [ 1161.337315][ T38] #5: ffff8880212fa310 (&devlink->lock_key#10){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 1161.337391][ T38] #6: ffffffff8f3c7bb0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x175/0x610 [ 1161.337461][ T38] locks held by syz-executor/11199: 4, on CPU#0: [ 1161.337479][ T38] #0: ffff8880378b8510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1161.337548][ T38] #1: ffff888062816878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1161.337611][ T38] #2: ffff88802ab8d788 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1161.337681][ T38] #3: ffffffff90059b78 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1161.337749][ T38] locks held by syz-executor/11289: 4, on CPU#1: [ 1161.337784][ T38] #0: ffff8880378b8510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1161.337855][ T38] #1: ffff88802bd8b878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1161.337923][ T38] #2: ffff88802ab8d788 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1161.337994][ T38] #3: ffffffff90059b78 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1161.338064][ T38] locks held by syz-executor/11301: 4, on CPU#0: [ 1161.338081][ T38] #0: ffff8880378b8510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1161.338151][ T38] #1: ffff88805882cc78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1161.338214][ T38] #2: ffff88802ab8d788 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1161.338282][ T38] #3: ffffffff90059b78 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1161.338362][ T38] locks held by syz-executor/11334: 4, on CPU#1: [ 1161.338380][ T38] #0: ffff8880378b8510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1161.338452][ T38] #1: ffff888068aaf478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1161.338515][ T38] #2: ffff88802ab8d788 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1161.338607][ T38] #3: ffffffff90059b78 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1161.338679][ T38] locks held by syz-executor/11353: 4, on CPU#0: [ 1161.338696][ T38] #0: ffff8880378b8510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1161.338765][ T38] #1: ffff888083107878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1161.338827][ T38] #2: ffff88802ab8d788 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1161.338897][ T38] #3: ffffffff90059b78 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1161.338969][ T38] locks held by syz-executor/11388: 4, on CPU#0: [ 1161.338986][ T38] #0: ffff8880378b8510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1161.339056][ T38] #1: ffff88803b760878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1161.339119][ T38] #2: ffff88802ab8d788 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1161.339188][ T38] #3: ffffffff90059b78 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1161.339274][ T38] locks held by syz-executor/11416: 4, on CPU#1: [ 1161.339293][ T38] #0: ffff8880378b8510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1161.370666][ T38] #1: ffff88806269ac78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1161.370873][ T38] #2: ffff88802ab8d788 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1161.371055][ T38] #3: ffffffff90059b78 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1161.371238][ T38] locks held by syz-executor/11427: 4, on CPU#1: [ 1161.371287][ T38] #0: ffff8880378b8510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1161.371501][ T38] #1: ffff88805733e878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1161.371683][ T38] #2: ffff88802ab8d788 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1161.371867][ T38] #3: ffffffff90059b78 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1161.372049][ T38] locks held by syz-executor/11433: 4, on CPU#1: [ 1161.372094][ T38] #0: ffff8880378b8510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1161.372275][ T38] #1: ffff888094b14c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1161.372435][ T38] #2: ffff88802ab8d788 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1161.372587][ T38] #3: ffffffff90059b78 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1161.372713][ T38] locks held by syz-executor/11473: 4, on CPU#1: [ 1161.372730][ T38] #0: ffff8880378b8510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1161.372898][ T38] #1: ffff8880941cc078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1161.402581][ T38] #2: ffff88802ab8d788 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1161.402847][ T38] #3: ffffffff90059b78 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1161.403002][ T38] locks held by syz-executor/11513: 4, on CPU#0: [ 1161.403026][ T38] #0: ffff8880378b8510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1161.403194][ T38] #1: ffff888070f35078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1161.403374][ T38] #2: ffff88802ab8d788 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1161.403531][ T38] #3: ffffffff90059b78 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1161.403716][ T38] locks held by syz-executor/11577: 4, on CPU#0: [ 1161.403759][ T38] #0: ffff8880378b8510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1161.403943][ T38] #1: ffff8880a435d478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1161.404108][ T38] #2: ffff88802ab8d788 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1161.404290][ T38] #3: ffffffff90059b78 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1161.404467][ T38] locks held by syz-executor/11602: 4, on CPU#0: [ 1161.404505][ T38] #0: ffff8880378b8510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1161.404701][ T38] #1: ffff888022bdd078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1161.404868][ T38] #2: ffff88802ab8d788 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1161.405078][ T38] #3: ffffffff90059b78 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1161.405259][ T38] locks held by syz-executor/11625: 4, on CPU#0: [ 1161.405301][ T38] #0: ffff8880378b8510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1161.405509][ T38] #1: ffff888056e5b078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1161.570016][ T38] #2: ffff88802ab8d788 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1161.570203][ T38] #3: ffffffff90059b78 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1161.570387][ T38] locks held by syz-executor/11677: 3, on CPU#1: [ 1161.570425][ T38] #0: ffffffff8ff47608 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1161.570610][ T38] #1: ffffffff90806858 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc1d/0x1c30 [ 1161.570803][ T38] #2: ffff88813fe47238 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x510 [ 1161.570969][ T38] locks held by syz-executor/11706: 4, last CPU#1: [ 1161.571013][ T38] #0: ffffffff907f7ba0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x51f/0x770 [ 1161.571162][ T38] #1: ffff888036574558 (k-sk_lock-AF_RXRPC){+.+.}-{0:0}, at: rxrpc_bind+0x90/0x450 [ 1161.571255][ T38] #2: ffff88809a51c268 (&rxnet->local_mutex){+.+.}-{4:4}, at: rxrpc_lookup_local+0xc8/0x1640 [ 1161.620050][ T38] #3: ffffffff8f516370 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1161.620299][ T38] [ 1161.620313][ T38] ============================================= [ 1161.620313][ T38] [ 1161.620364][ T38] NMI backtrace for cpu 1 [ 1161.620426][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L Y syzkaller #0 PREEMPT_{RT,(full)} [ 1161.620518][ T38] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1161.620541][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1161.620583][ T38] Call Trace: [ 1161.620607][ T38] [ 1161.620631][ T38] dump_stack_lvl+0xe8/0x150 [ 1161.620740][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 1161.620847][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1161.620949][ T38] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1161.621058][ T38] sys_info+0x135/0x170 [ 1161.621135][ T38] watchdog+0xfd2/0x1030 [ 1161.621222][ T38] ? watchdog+0x1c7/0x1030 [ 1161.621305][ T38] kthread+0x38b/0x470 [ 1161.621373][ T38] ? __pfx_watchdog+0x10/0x10 [ 1161.621428][ T38] ? __pfx_kthread+0x10/0x10 [ 1161.621516][ T38] ret_from_fork+0x514/0xb70 [ 1161.621594][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1161.621648][ T38] ? __switch_to+0xc78/0x1410 [ 1161.621713][ T38] ? __pfx_kthread+0x10/0x10 [ 1161.621768][ T38] ret_from_fork_asm+0x1a/0x30 [ 1161.621842][ T38] [ 1161.621904][ T38] Sending NMI from CPU 1 to CPUs 0: [ 1161.621981][ C0] NMI backtrace for cpu 0 [ 1161.621997][ C0] CPU: 0 UID: 0 PID: 37 Comm: pr/ttyS0 Tainted: G L Y syzkaller #0 PREEMPT_{RT,(full)} [ 1161.622025][ C0] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1161.622032][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1161.622043][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 1161.622065][ C0] Code: e8 ee 00 58 fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 2f 2b ca fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 0a 54 04 06 cc 44 89 f9 80 e1 07 [ 1161.622082][ C0] RSP: 0018:ffffc90000ae78b8 EFLAGS: 00000202 [ 1161.622098][ C0] RAX: 1ffffffff3627d00 RBX: 00000000000003fd RCX: 0000000000000000 [ 1161.622111][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1161.622122][ C0] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1161.622134][ C0] R10: dffffc0000000000 R11: ffffffff856fd550 R12: dffffc0000000000 [ 1161.622148][ C0] R13: 0000000000000000 R14: ffffffff9b13ef60 R15: 0000000000000000 [ 1161.622161][ C0] FS: 0000000000000000(0000) GS:ffff888124732000(0000) knlGS:0000000000000000 [ 1161.622176][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1161.622189][ C0] CR2: 00007f90f4747e20 CR3: 000000000f1b0000 CR4: 00000000003526f0 [ 1161.622205][ C0] Call Trace: [ 1161.622212][ C0] [ 1161.622221][ C0] wait_for_lsr+0x190/0x300 [ 1161.622241][ C0] __serial8250_console_fifo_write+0xd0/0x3f0 [ 1161.622271][ C0] serial8250_console_write+0xaa2/0x1220 [ 1161.622297][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 1161.622325][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 1161.622353][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 1161.622374][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 1161.622415][ C0] nbcon_kthread_func+0x6d9/0x8d0 [ 1161.622454][ C0] ? nbcon_kthread_func+0x163/0x8d0 [ 1161.622482][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1161.622515][ C0] ? __kthread_parkme+0x71/0x1f0 [ 1161.622533][ C0] ? __kthread_parkme+0x199/0x1f0 [ 1161.622553][ C0] kthread+0x38b/0x470 [ 1161.622573][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1161.622601][ C0] ? __pfx_kthread+0x10/0x10 [ 1161.622622][ C0] ret_from_fork+0x514/0xb70 [ 1161.622644][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1161.622664][ C0] ? __switch_to+0xc78/0x1410 [ 1161.622683][ C0] ? __pfx_kthread+0x10/0x10 [ 1161.622704][ C0] ret_from_fork_asm+0x1a/0x30 [ 1161.622733][ C0] [ 1161.634511][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1163.451736][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L Y syzkaller #0 PREEMPT_{RT,(full)} [ 1163.463081][ T38] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1163.468929][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1163.479040][ T38] Call Trace: [ 1163.482368][ T38] [ 1163.485344][ T38] vpanic+0x56d/0xa60 [ 1163.489384][ T38] ? __pfx___schedule+0x10/0x10 [ 1163.494287][ T38] ? __pfx_vpanic+0x10/0x10 [ 1163.498851][ T38] panic+0xc5/0xd0 [ 1163.502620][ T38] ? __pfx_panic+0x10/0x10 [ 1163.507087][ T38] ? preempt_schedule_common+0x7f/0xd0 [ 1163.512621][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 1163.518052][ T38] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 1163.524265][ T38] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 1163.530534][ T38] watchdog+0x102b/0x1030 [ 1163.534927][ T38] ? watchdog+0x1c7/0x1030 [ 1163.539395][ T38] kthread+0x38b/0x470 [ 1163.543515][ T38] ? __pfx_watchdog+0x10/0x10 [ 1163.548243][ T38] ? __pfx_kthread+0x10/0x10 [ 1163.552872][ T38] ret_from_fork+0x514/0xb70 [ 1163.557509][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1163.562715][ T38] ? __switch_to+0xc78/0x1410 [ 1163.567425][ T38] ? __pfx_kthread+0x10/0x10 [ 1163.572045][ T38] ret_from_fork_asm+0x1a/0x30 [ 1163.577042][ T38] [ 1163.580695][ T38] Kernel Offset: disabled [ 1163.585052][ T38] Rebooting in 86400 seconds..